Questions

cumba isn’t notarized, because Apple notarizes apps only for paid developer accounts. Its releases are built by GitHub Actions from tagged commits, and each has a SHA-256 checksum and signed build provenance you can check.

• How to open it
• Checking the file and building from source

cumba is new, made by one person with help from Claude Code, and hasn’t had an external audit. It sends no telemetry and never downloads code, and the privacy page lists everything it can access.

• Privacy and permissions
• SECURITY.md

Yes, two: MediaRemote, to read Now Playing from every app through a small helper that opens no files or connections, and DisplayServices for the brightness level. Both can be turned off, and cumba falls back to public APIs if macOS breaks them.

Anything that reports to Now Playing: Safari, Chrome, YouTube, Spotify, Music, podcasts and more. No extension needed.

Open Settings > Agents and click Install. You review the change first, and a backup is kept. For Codex, also run /hooks once in Codex and trust the hooks. If your hooks are out of date, cumba opens Settings > Agents at launch; click Update.

If cumba isn’t running, Claude Code and Codex carry on as usual.

• Manual setup in docs/claude-code-setup.md

Yes, the tool runs right away. By default, you can allow everything from the notch except shell commands: requests for Claude Code’s Bash and Codex’s shell tools are answered in the terminal. In Settings > Agents, choose All requests to allow those too, or Never to keep only Deny and In Terminal.

A request with hidden characters or a run of blank lines never gets an Allow button. When a request is longer than its box, Allow waits until you’ve scrolled to the end.

None at launch. cumba asks for each one only when you turn on the feature that needs it, and Settings > Permissions shows them all. macOS may ask again after an update.

• The full list

Yes. Turn on the virtual notch in Settings > Displays. You need macOS 26 or later.

English, Spanish, French and Turkish. Spanish comes in two versions, for Spain and for Latin America, each with the words macOS uses there. cumba follows your Mac’s language. To use a different one, add cumba under Applications in System Settings > General > Language & Region.

Yes, free and open source under the MIT license. No account, subscription or purchase.

Remove the agent hooks in Settings > Agents, quit cumba and move it to the Trash. The app’s README has commands to delete its data too.

• Uninstall steps