ios-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| IOS_AGENT_MODEL | No | The model name to use with the configured provider. | |
| IOS_AGENT_PROVIDER | No | The model provider to use (e.g., 'openai', 'anthropic', 'gemini'). If not set, a default provider is used. | |
| IOS_MCP_ALLOW_DEVICE | No | Set to '1' to allow controlling a physical iPhone. Controlling physical hardware is opt-in; the default is '0' (not allowed). | 0 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| extensions | {
"io.modelcontextprotocol/ui": {}
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| ios_doctorA | Check that this machine can drive an iOS device, and say how to fix what it can't. Run this first when a session fails to start, when a device does not appear, or after an Xcode or iOS upgrade. Every failing check comes with a concrete remedy. |
| ios_list_devicesA | List iOS Simulators and attached physical iPhones available for automation.
|
| ios_open_sessionA | Attach to a device and start driving it. Boots the simulator or verifies the phone, starts WebDriverAgent, and
opens a tuned session. Omitting |
| ios_session_statusA | Report the current session: device, foreground app, and safety state. |
| ios_close_sessionA | Release the device and shut down its WebDriverAgent runner. |
| ios_list_appsA | List apps installed on the device, with their bundle identifiers. |
| ios_launch_appB | Bring an app to the foreground and return its screen. |
| ios_terminate_appC | Force-quit an app. |
| ios_open_urlA | Open a URL or deep link. Usually the cheapest way to reach a screen: a deep link skips the navigation an agent would otherwise have to tap through. |
| ios_install_appA | Install an app from a local .app or .ipa. |
| ios_observeA | Read the screen as a compact list of elements with short refs. Each line is one element: If the result says elements were omitted, narrow with |
| ios_screenshotA | Capture the screen as an image. Use this when an element has no accessibility label, when the layout
matters, or when Annotating re-reads the screen first, so the refs on the image are the
current ones rather than whatever was observed last. That costs a tree
fetch, and needs the |
| ios_read_textA | Read the text of the screen, or of one element and everything inside it. Use this to extract content, rather than |
| ios_findA | Search the screen's accessibility tree, including what the digest hides. Prefer |
| ios_wait_forA | Wait for something to appear or disappear. Prefer this over guessing a sleep. It returns as soon as the condition holds, and reports failure rather than raising, so a timeout is something you can reason about. |
| ios_get_logsA | Read recent device logs. Useful when an app misbehaves and the UI does not say why. |
| ios_export_traceA | Return the ordered record of everything this session has done. Useful for explaining what happened, and for turning a successful run into a regression test. |
| ios_tapA | Tap an element and return the resulting screen. Prefer |
| ios_typeA | Type into a field, focusing it first when a ref or target is given. The field is read back afterwards. If the text did not land, the call
fails with |
| ios_type_secretA | Type a stored secret without ever seeing its value. The value is read from the host keychain and sent straight to the
device. Use this for every password and one-time code; never put a
real credential into |
| ios_set_valueA | Set a switch, slider, or picker wheel to a value. 'on' or 'off' for a switch, a percentage such as '40%' or a fraction for a slider, and the option spelled the way the wheel spells it for a picker. A wheel is turned a row at a time and read back after each one, so an option it does not contain fails listing what it does. Prefer this over tapping a switch: it checks the current state first, so asking for 'on' when it is already on does nothing rather than turning it off. Steppers and segmented controls are not set this way. iOS reports their parts and the digest shows them, so tap 'Increment', 'Decrement', or the segment by its own label. |
| ios_scrollA | Scroll, optionally until some text comes into view. With |
| ios_swipeA | Swipe once, for carousels, page views, and swipe-to-reveal rows. |
| ios_dragA | Drag one element onto another, for reordering lists and moving items. |
| ios_press_buttonA | Press a hardware button or a keyboard key. |
| ios_handle_alertA | Answer a system alert. Read the alert text before choosing. Accepting blindly is how an agent grants a permission or confirms a deletion nobody wanted. |
| ios_haltB | Stop this session from taking further action. |
| ios_resumeA | Clear a halt after a human has decided it is safe to continue. |
| ios_set_permissionA | Set a privacy permission without going through the alert. Simulator only. On a real phone there is no API for this: drive the Settings app, or answer the permission alert with ios_handle_alert. |
| ios_clipboardA | Read or write the device clipboard. Writing is often faster and more reliable than typing a long string, which the on-screen keyboard can mangle with autocorrect. |
| ios_set_device_stateA | Change device-level state. Appearance, location, and status bar are Simulator only. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| ios_operator | How to drive an iOS device well: the observe, act, verify loop and its rules. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| screenshot_resource | The current screen, as a resource for clients that prefer to pull it. |
| devices_resource | Every simulator and attached iPhone, with readiness. |
| session_resource | The current session, or a note that none is open. |
| screen_resource | The last observed screen, without spending a tool call. |
| capabilities_resource | Which tools work on the attached device. Several capabilities are Simulator-only, and an agent that knows this up front does not waste a turn discovering it. |
TDQS
Scored across 31 tools
The tools are highly distinct, with clear separations between observation (observe, read_text, find, screenshot), input actions (tap, type, set_value, scroll, swipe, drag), and session/device management. Descriptions explicitly guide when to prefer one over another, preventing misselection.
All 31 tools follow the ios_ prefix and snake_case convention, with no mixing of camelCase or alternative styles. Although some names are noun-based (screenshot, clipboard) and others verb-based, the overall pattern is predictable and consistent.
With 31 tools, this exceeds the typical well-scoped range (3-15) and crosses into the 25+ 'too many' territory per the rubric, despite the complex domain. Many actions are granular and could potentially be consolidated or grouped.
The surface covers most core iOS automation needs: session lifecycle, app install/launch/terminate, rich UI interaction, device state, permissions, logs, and clipboard. Minor gaps exist, such as no app uninstall or explicit text-field clearing, but these are workaround-able.