A Mac app that lets AI agents control a real iPhone
Proof of what an AI agent was allowed to do, and what it then did
Stage
Not given
Startup
Founded
Not given
2026
Based in
Not given
Not given
Pricing model
Paid
Open source
Pricing
Monthly: $25/month for 1 iPhone. Lifetime: $99 once for 1 iPhone. Lifetime Plus: $199 once for up to 5 iPhones. All plans include access to Claude Code and Codex on your own subscription, run on your Mac with no cloud, and include all updates.
Not given
Key features
Control a real iPhone from your Mac over USB and Bluetooth
Connect Claude Code, Codex, Cursor, Hermes, OpenClaw and any MCP client
Built-in chat that runs on your own Claude or ChatGPT subscription
Use any App Store app and your own logged-in accounts
No installation on the iPhone, no developer mode needed
No Xcode, Apple Developer account or code signing required
Optional phone unlock with passcode stored in macOS Keychain
Local MCP server that only accepts connections from your Mac
Free trial for the first hour of live use
Works with up to 3 Macs per license
Signed permissions with passkey authentication
Receipts for each agent action with signatures
Free checker tool to verify compliance
Quantum-safe signatures (Ed25519 and ML-DSA-87)
Permission narrowing for helper agents
Permission cancellation with signed acknowledgement
JavaScript and Python libraries
LangChain and Pydantic AI middleware
What makes it different
Real iPhone instead of simulator - runs your actual apps and accounts with no virtual copy limitations
Local-only operation with no account or cloud - your data stays on your Mac
No developer setup required - just plug in a USB cable and pair Bluetooth
Bring your own AI - works with agents and plans you already pay for
Pay once, keep it for life with no subscriptions required
Only open-source project combining machine-checkable limits, permission narrowing for helpers, and signed permission cancellation
Built entirely from published standards with no hand-made components
Free and no dependencies, sends nothing anywhere or holds money
Distinguishes between record integrity and whether agent stayed within permission
All published versions stay available for backward compatibility