Skip to main content
Glama

android-use

Let AI agents see and control an Android phone over ADB, with safety guards built in.

npm License: MIT

android-use is a Model Context Protocol (MCP) server. Any MCP-capable app (Claude Desktop, Claude Code, Cursor, Hermes Agent and others) can use it to take screenshots, read the on-screen UI, tap, swipe, type, press keys and launch apps on a real Android device. Since v0.3 it can also run as a remote connector: a private https://…/mcp URL you paste into Claude.ai, ChatGPT, Cursor, LibreChat, Open WebUI or LM Studio.

npx -y @ghostfacemodz/android-use          # local (stdio) MCP server
npx -y @ghostfacemodz/android-use setup    # guided setup as a remote connector (URL + key)

Get started in 2 minutes

With a computer (Windows, macOS or Linux):

  1. Install Node.js 18+ and adb (winget install Google.PlatformTools · brew install android-platform-tools · sudo apt install adb).

  2. On the phone, turn on Developer options → USB debugging (or Wireless debugging), plug it in and accept the prompt. (Phone setup)

  3. Run:

    npx -y @ghostfacemodz/android-use setup

    It checks adb, finds your phone (and helps you adb pair / adb connect if needed), creates your own secret token, starts the server, and offers to open a public https:// link through a free Cloudflare quick tunnel (it downloads cloudflared for you). It then prints your connector URL, key and copy-paste configs.

  4. Paste the URL into your AI app (Use as a connector). Next time just run npx -y @ghostfacemodz/android-use start --tunnel.

With only the phone (no PC, no root): install Termux and run one command. See docs/PHONE-ONLY.md.

Just want a local MCP server for Claude Desktop / Cursor? Skip setup and use the stdio configs in Add it to your MCP client.

Formerly android-adb-mcp. The tools, environment variables and behaviour are unchanged; only the package name, binary name (android-use) and MCP server name changed.

⚠️ Read Safety before you connect a phone you care about. An AI with this tool can do anything you could do by tapping the screen.

Not affiliated with, endorsed by, or sponsored by Google, Android or Samsung. "Android" is a trademark of Google LLC.


Related MCP server: scrcpy-mcp

Contents

What it does

android-use is a small TypeScript wrapper around the adb command-line tool. It talks to your MCP client over stdio (default) or Streamable HTTP (--http, setup, start) and has two runtime dependencies (@modelcontextprotocol/sdk and zod).

Example: "Open YouTube and search for lo-fi beats."

  1. current_app → com.sec.android.app.launcher

  2. open_app { package: "com.google.android.youtube" }

  3. ui_dump → #4 ImageView [clickable] desc="Search" center=980,140 …

  4. tap_element { text: "Search" }

  5. type_text { text: "lo-fi beats" }, then key_event { key: "enter" }

  6. screenshot to check the result

What you can do with it

You talk to your AI assistant normally. It works out the steps and uses android-use to carry them out on your phone: it looks at the screen (ui_dump, screenshot), acts (open_app, tap_element, tap, swipe, type_text, key_event) and checks the result before moving on. The phone needs to be unlocked.

The full guide, with step-by-step walkthroughs, more prompts and limits for each use case, is in docs/USE-CASES.md.

Hands-free errands

Put on a video or stream, start music, open navigation, or set an alarm or timer while your hands are busy.

Real example: an assistant connected to a phone over Tailscale and Wireless debugging opened a YouTube channel's newest video, then switched to another channel's live stream, all from a chat message while the owner was away from the phone.

  • "Play my Discover Weekly playlist on Spotify and turn the volume up a bit."

  • "Open Google Maps and start directions to the nearest Tesco."

  • "Set a 12-minute timer."

Tips: ask for list_apps if you don't know an app's package name. type_text is ASCII-only, so searches with accents or emoji won't type. More detail →

Repetitive taps

Clear notifications, check for updates, or run the same daily flow, such as collecting a daily reward. Pair it with an AI agent that can run on a schedule (for example a cron job running Claude Code headless) to make it happen every morning.

  • "Pull down the notification shade and tap Clear." → swipe from the top edge → tap_element "Clear" → key_event home

  • "Open [game], collect the daily reward, then go home." → open_app → screenshot → tap_element "Collect" → key_event home

  • "Open Galaxy Store and update everything."

Limits: Google Play is on the sensitive-app list by default (it can make purchases), so use Play's own auto-update instead. Scheduled runs fail if the phone has locked. Respect each app's terms of service: many games and apps ban automation and can suspend accounts for it. More detail →

Social posting from the phone

Use mobile-only features, such as TikTok's editor or Instagram Stories, without a third-party scheduler, because the assistant drives the real app.

  • "Start a new Instagram Story from my latest photo and stop before sharing so I can check it."

  • "Upload my newest video to TikTok with this caption, and leave it on the Post screen."

  • "Read me the comments on my latest post." (ui_dump + swipe)

Keep a human in the loop: have the assistant stop on the final screen and send a screenshot, and write or approve captions yourself. Emoji can't be typed. Respect platform rules on automated activity; no bulk liking, following or fake engagement. More detail →

Accessibility

If touchscreens are hard for you, you can control the phone by talking or typing to an AI in plain language, and have it read the screen back using ui_dump (on-screen text) and screenshot (images and anything unlabelled).

  • "What's on my screen right now?"

  • "Turn on dark mode and make the text bigger."

  • "Go back", "Scroll down", "Turn the volume down." (key_event back, swipe, key_event volume_down)

Be realistic: this complements Android's built-in tools such as TalkBack and Voice Access; it doesn't replace them. Those run on the phone, work offline and work on the lock screen. android-use needs a computer, a connection, an AI service and an unlocked phone, and it's slower. More detail →

Remote help for family

Fix a relative's settings from anywhere over Tailscale plus ADB debugging: turn the ringer back on, enlarge the text, or find a missing app icon. Set ADB_SERIAL to their phone so nothing else can be touched.

  • "Mum's phone isn't ringing. Put it back on Sound with the ringtone at about 70%."

  • "Make Dad's font one size bigger and turn on bold."

Always with their consent. They grant access by accepting the "Allow USB debugging?" prompt, and they can switch it off at any time by turning off USB/Wireless debugging or disconnecting Tailscale. Leave the sensitive-app guard on. More detail →

How much control it has on your phone

In short: anything you could do by tapping the unlocked screen, the AI can do too, within the limits of what ADB allows and the guards below. This is based on the code in src/; the full breakdown has more detail.

Can

Can't

Off by default

See the screen (screenshot)

Get past the lock screen or bypass your PIN

Raw shell tool (ALLOW_SHELL=1)

Read the UI as text (ui_dump)

Root the phone or gain system privileges

Banking, payment, messaging and password apps (ALLOW_SENSITIVE=1)

Tap, long-press, swipe

Read apps' private data (chats, databases, saved logins)

Device allowlist: off until you set ADB_SERIAL (recommended)

Type text (printable ASCII only)

Do anything when USB and Wireless debugging are off

Press keys (home, back, recents, volume, power, enter…)

Type emoji or non-ASCII text

Open apps, list apps, see the foreground app

Hear or speak on phone calls

What it can't do, in more detail. It can wake the screen but can't unlock it without your PIN, pattern or password. ADB runs as Android's limited shell user, so it can't root the phone or read other apps' private storage; it only sees what's on screen, and screens that apps mark as secure show up black. If USB and Wireless debugging are off, or the phone hasn't authorised your computer, nothing works.

Safety guards that exist in the code:

  • Device allowlist: ADB_SERIAL (default: not set, so any connected device). Comma-separated serials; every other device is refused and hidden from list_devices. The first entry is used by default.

  • Sensitive-app guard: on unless ALLOW_SENSITIVE=1. screenshot, ui_dump, tap, tap_element, swipe, long_press, type_text and most keys are refused while a sensitive app is in the foreground, and open_app won't launch one. Blocked by default: Google Wallet, Samsung Wallet/Pay, PayPal, Venmo, Cash App, Zelle, Coinbase, WhatsApp, Telegram, Signal, Google Messages, Samsung Messages, Messenger and Google Play, plus any package whose name contains bank, wallet, pay, finance, crypto, authenticator, messag, signal, keepass, bitwarden or 1password. Add more with SENSITIVE_PACKAGES. Home, back, recents and power always work. It matches package names, so it's a best-effort heuristic: many banking apps need adding by hand.

  • Raw shell off by default: ALLOW_SHELL. Unless set to 1, the shell tool isn't registered at all. If enabled, it isn't covered by the sensitive-app guard.

  • Rate limit: RATE_LIMIT_PER_MIN (default 120 calls per rolling minute).

  • Action log: every tool call is written to stderr with a timestamp and its arguments; typed text is logged as a length only.

Revoke access instantly: on the phone, turn off Wireless debugging or USB debugging (or unplug). For a full reset, use Developer options → Revoke USB debugging authorisations, disconnect Tailscale, or restart the phone (which ends adb tcpip sessions).

Recommended safe setup:

  1. Set ADB_SERIAL to just your phone.

  2. Leave ALLOW_SENSITIVE and ALLOW_SHELL unset.

  3. Add your banking apps to SENSITIVE_PACKAGES if their names don't contain a keyword.

  4. Keep a screen lock on, and watch the screen while the agent works.

  5. Ask the assistant to stop before anything public or paid.

  6. Turn off Wireless debugging when you're done.

Requirements

  • Node.js 18 or newer (provides npx)

  • ADB (Android platform-tools) on your PATH, or set ADB_PATH

    • macOS: brew install --cask android-platform-tools

    • Windows: winget install Google.PlatformTools, or download platform-tools and add the folder to PATH

    • Linux: sudo apt install adb (or the platform-tools zip)

    • Check with adb version

  • An Android phone with USB debugging or Wireless debugging enabled (see below)

Phone setup

  1. Enable Developer options: Settings → About phone (Samsung: → Software information) → tap Build number 7 times.

  2. Enable debugging: Settings → Developer options → turn on USB debugging and/or Wireless debugging (Android 11+).

  3. Samsung: if taps are ignored, turn off Auto Blocker (Settings → Security and privacy) while using ADB. Xiaomi and some other ROMs: also enable USB debugging (Security settings).

Connect over USB: plug in the phone, accept the "Allow USB debugging?" prompt, then run adb devices.

Connect wirelessly (Android 11+): Developer options → Wireless debugging → Pair device with pairing code. That screen shows an IP, a pairing port and a 6-digit code; the main Wireless debugging screen shows a different connect port.

adb pair 192.168.1.23:41234 123456     # pairing port + code
adb connect 192.168.1.23:37099         # connect port

You can also ask the assistant to call connect_wifi { host, port, pairing_code, pair_port }.

Run adb devices and note your device's serial. You'll use it for ADB_SERIAL.

Use as a connector (remote MCP over HTTPS)

In HTTP mode android-use speaks the MCP Streamable HTTP transport, so any app that can "add an MCP server by URL" can use your phone.

Endpoint

Purpose

POST/GET/DELETE /mcp

Streamable HTTP (current MCP spec, sessions via Mcp-Session-Id)

GET /sse + POST /messages

Legacy HTTP+SSE transport for older clients

GET /health

Liveness check (no auth, reveals nothing about the phone)

Start it

npx -y @ghostfacemodz/android-use setup             # guided: phone + token + optional public URL
npx -y @ghostfacemodz/android-use start --tunnel    # later: reuse saved phone + token, open a public URL
npx -y @ghostfacemodz/android-use start --funnel    # same, but a stable Tailscale Funnel URL
MCP_AUTH_TOKEN=... npx -y @ghostfacemodz/android-use --http --port 3333   # plain HTTP server, bring your own tunnel

setup stores your token in ~/.config/android-use/token (%APPDATA%\android-use\token on Windows) with owner-only permissions and remembers the phone's serial in config.json next to it. It prints the token in the copy-paste configs only when run in an interactive terminal (--hide-token to suppress, --show-token to force). Read it again any time with cat ~/.config/android-use/token.

Public URL options:

Option

URL

Notes

--tunnel (Cloudflare quick tunnel)

https://<random>.trycloudflare.com/mcp

Free, no account. cloudflared is downloaded automatically. The URL changes every restart, so you re-paste it into your apps. Needs outbound port 7844 (some networks block it).

--funnel (Tailscale Funnel)

https://<machine>.<tailnet>.ts.net/mcp

Stable. Needs Tailscale and Funnel enabled for your tailnet (the command prints the admin link if it isn't).

Named Cloudflare tunnel / your own reverse proxy

your domain

Stable. Point it at http://127.0.0.1:3333.

Generic remote MCP config

{
  "mcpServers": {
    "android-use": {
      "url": "https://YOUR-HOST/mcp",
      "headers": { "Authorization": "Bearer YOUR_TOKEN" }
    }
  }
}

Some apps can't send custom headers. For those, put the token in the URL instead: https://YOUR-HOST/mcp?key=YOUR_TOKEN. Tradeoff: a URL is easier to leak than a header (it can end up in browser history, screenshots, proxy or app logs, and shared chats), so only use the ?key= form where headers aren't possible, never share it, and rotate the token if it might have leaked (delete the token file and run setup again). android-use itself never logs query strings. X-API-Key: YOUR_TOKEN is also accepted.

App-specific snippets

Claude.ai and Claude Desktop (custom connectors): Settings → Connectors → Add custom connector → Remote MCP server URL: https://YOUR-HOST/mcp?key=YOUR_TOKEN (leave the OAuth fields empty). Custom connectors added on claude.ai also appear in Claude Desktop and mobile. To use headers from Claude Desktop instead, bridge it through mcp-remote in claude_desktop_config.json:

{
  "mcpServers": {
    "android-use": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://YOUR-HOST/mcp", "--header", "Authorization:${AUTH}"],
      "env": { "AUTH": "Bearer YOUR_TOKEN" }
    }
  }
}

Claude Code:

claude mcp add --transport http android-use https://YOUR-HOST/mcp --header "Authorization: Bearer YOUR_TOKEN"

Cursor (~/.cursor/mcp.json or .cursor/mcp.json):

{
  "mcpServers": {
    "android-use": {
      "url": "https://YOUR-HOST/mcp",
      "headers": { "Authorization": "Bearer YOUR_TOKEN" }
    }
  }
}

ChatGPT (developer mode): on the web, Settings → Apps → Advanced settings → turn on Developer mode, then Create app (newer UI: Plugins → + → Add custom MCP server). Server URL: https://YOUR-HOST/mcp?key=YOUR_TOKEN, Authentication: No authentication (the key in the URL is the auth). Developer mode is available on Plus, Pro, Business, Enterprise and Edu plans.

LibreChat (librechat.yaml):

mcpServers:
  android-use:
    type: streamable-http
    url: https://YOUR-HOST/mcp
    headers:
      Authorization: "Bearer ${ANDROID_USE_TOKEN}"   # set ANDROID_USE_TOKEN in LibreChat's .env
    timeout: 120000

Open WebUI: Admin Settings (or Settings) → External Tools → + → Type: MCP (Streamable HTTP), URL: https://YOUR-HOST/mcp, Auth: Bearer, Key: YOUR_TOKEN. Enable the tool in a chat with a model that supports native tool calling.

LM Studio (Program → Install → Edit mcp.json):

{
  "mcpServers": {
    "android-use": {
      "url": "https://YOUR-HOST/mcp",
      "headers": { "Authorization": "Bearer YOUR_TOKEN" }
    }
  }
}

LM Studio can also reach http://127.0.0.1:3333/mcp directly when it runs on the same computer, no tunnel needed.

Venice: Venice's own chat app doesn't support custom MCP servers yet (it's on their feature-request board, not shipped). You can still use Venice models with android-use by adding your Venice API key as an OpenAI-compatible provider (https://api.venice.ai/api/v1) in one of the apps above, such as LibreChat, Open WebUI or LM Studio-compatible clients, and adding the connector there.

Older clients that only speak HTTP+SSE: use https://YOUR-HOST/sse (with the Authorization header, or /sse?key=YOUR_TOKEN). Note: Cloudflare quick tunnels buffer GET event streams, so legacy /sse doesn't work through --tunnel; use /mcp (which answers with plain JSON by default and works fine), Tailscale Funnel or a named tunnel.

Docker

The image runs HTTP mode on 0.0.0.0:3333 inside the container. adb inside the container connects to the phone over the network (Wireless debugging or adb tcpip); USB passthrough also works on Linux with --device /dev/bus/usb.

docker build -t android-use .
docker run -d --name android-use -p 127.0.0.1:3333:3333 \
  -e MCP_AUTH_TOKEN="$(cat ~/.config/android-use/token)" \
  -e ADB_SERIAL=192.168.1.23:37099 \
  -v android-use-adb:/root/.android \
  android-use
docker exec -it android-use adb pair 192.168.1.23:41234 123456   # first time only
docker exec -it android-use adb connect 192.168.1.23:37099

The /root/.android volume keeps the container's adb key, so the phone doesn't ask to authorise it again. Put a tunnel or reverse proxy in front of port 3333 for a public URL.

Keep it running

scripts/keepalive.sh (in this repo and in the npm package at $(npm root -g)/@ghostfacemodz/android-use/scripts/) runs android-use start in the background and restarts it if it exits (macOS/Linux/Termux):

scripts/keepalive.sh start --tunnel     # or --funnel
scripts/keepalive.sh status             # running? + current public URL
scripts/keepalive.sh restart
scripts/keepalive.sh stop

It logs to ~/.config/android-use/android-use.log and the current URL is always in ~/.config/android-use/connection.json (the token is never written there). On Windows, run npx -y @ghostfacemodz/android-use start --tunnel in a terminal you leave open, or wrap it with Task Scheduler / NSSM.

Connector security

  • A token is mandatory. HTTP mode won't start without MCP_AUTH_TOKEN / a token file unless you set MCP_ALLOW_NO_AUTH=1 (only sensible on 127.0.0.1 for testing). Tokens from setup are 256-bit random values.

  • Tokens are compared in constant time; failed attempts are logged without the token and limited to 10 per minute per client; requests are rate-limited per client (HTTP_RATE_LIMIT_PER_MIN), on top of the tool-call limit (RATE_LIMIT_PER_MIN).

  • It binds to 127.0.0.1 by default, so only the tunnel (or apps on the same machine) can reach it.

  • CORS allows any origin by default so browser-based clients work; that's safe because auth is by token, not cookies. Restrict it with MCP_CORS_ORIGINS if you like.

  • Sessions expire after 30 minutes idle; at most 50 at once.

  • Anyone with the URL and token controls your phone (within the guards: device lock, no shell, sensitive apps blocked). Never share them. Rotate by deleting the token file and running setup again. To cut access instantly, stop the server or turn off Wireless/USB debugging.

Add it to your MCP client

Every client runs the same command: npx -y @ghostfacemodz/android-use. Setting ADB_SERIAL to your phone's serial is optional but strongly recommended. Restart the client after editing its config.

Claude Desktop

Edit claude_desktop_config.json (Settings → Developer → Edit Config):

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

  • Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "android-use": {
      "command": "npx",
      "args": ["-y", "@ghostfacemodz/android-use"],
      "env": {
        "ADB_SERIAL": "R5CT1234ABC"
      }
    }
  }
}

Claude Code

claude mcp add android-use -- npx -y @ghostfacemodz/android-use

With a device allowlist:

claude mcp add android-use --env ADB_SERIAL=R5CT1234ABC -- npx -y @ghostfacemodz/android-use

Add --scope user to make it available in every project. Check it with claude mcp list.

Cursor

Create .cursor/mcp.json in your project, or ~/.cursor/mcp.json to make it available everywhere:

{
  "mcpServers": {
    "android-use": {
      "command": "npx",
      "args": ["-y", "@ghostfacemodz/android-use"],
      "env": {
        "ADB_SERIAL": "R5CT1234ABC"
      }
    }
  }
}

Hermes Agent

Add it under mcp_servers in ~/.hermes/config.yaml:

mcp_servers:
  android_use:
    command: "npx"
    args: ["-y", "@ghostfacemodz/android-use"]
    env:
      ADB_SERIAL: "R5CT1234ABC"
    timeout: 120          # per-tool-call timeout in seconds
    connect_timeout: 60

Restart Hermes (or reload MCP). The tools show up with the mcp_android_use_ prefix, for example mcp_android_use_screenshot. See the Hermes MCP docs for the other options, such as tools.include / tools.exclude.

Other clients (generic stdio)

Any MCP client that can launch a stdio server works:

Field

Value

Transport

stdio

Command

npx

Args

-y, @ghostfacemodz/android-use

Env (optional)

ADB_SERIAL, ALLOW_SHELL, ALLOW_SENSITIVE, SENSITIVE_PACKAGES, RATE_LIMIT_PER_MIN, ADB_PATH

Or install it globally and use the android-use binary directly:

npm install -g @ghostfacemodz/android-use
android-use        # speaks MCP over stdin/stdout; logs go to stderr

Windows notes: if your client can't find npx, use "command": "cmd" with "args": ["/c", "npx", "-y", "@ghostfacemodz/android-use"]. If adb isn't on the client's PATH, set ADB_PATH, for example C:\\platform-tools\\adb.exe.

Configuration

All configuration is through environment variables.

Variable

Default

Meaning

ADB_SERIAL

(any device)

Comma-separated allowlist of device serials (from adb devices). Every other device is refused. Recommended.

ALLOW_SHELL

off

1 registers the raw shell tool.

ALLOW_SENSITIVE

off

1 turns off the sensitive-app guard.

SENSITIVE_PACKAGES

Extra package names to treat as sensitive (comma-separated).

RATE_LIMIT_PER_MIN

120

Maximum tool calls per minute.

ADB_PATH

adb

Path to the adb binary.

HTTP / connector mode (--http, setup, start):

Variable / flag

Default

Meaning

MCP_TRANSPORT=http / --http

stdio

Serve Streamable HTTP on /mcp (plus /health and legacy /sse).

PORT / --port

3333

Listen port.

HOST / --host

127.0.0.1

Listen address. Use 0.0.0.0 only in Docker or behind a firewall.

MCP_AUTH_TOKEN

Token clients must send. HTTP mode refuses to start without one.

MCP_AUTH_TOKEN_FILE

<config dir>/token

File holding the token (setup creates it with mode 600). Config dir: ~/.config/android-use (Linux/macOS/Termux), %APPDATA%\android-use (Windows), or ANDROID_USE_HOME.

MCP_ALLOW_NO_AUTH

off

1 allows HTTP without a token. Local testing only.

MCP_CORS_ORIGINS

*

Comma-separated browser origins allowed by CORS.

MCP_TRUST_PROXY

off (on with a tunnel)

Use CF-Connecting-IP / X-Forwarded-For for per-client rate limits.

HTTP_RATE_LIMIT_PER_MIN

600

HTTP requests per client per minute (failed logins: 10/min).

MCP_ENABLE_SSE

on

0 disables the legacy /sse + /messages endpoints.

MCP_JSON_RESPONSE

on

0 streams POST responses as SSE instead of plain JSON.

CLOUDFLARED_PATH

auto

Use this cloudflared instead of the one on PATH / auto-downloaded.

Tools

Tool

What it does

list_devices

Connected devices (filtered by the allowlist)

connect_wifi

adb pair (optional, with code) + adb connect host:port

screenshot

PNG screenshot returned as an MCP image

get_screen_size

Screen resolution (wm size)

tap

Tap at x,y

swipe

Swipe x1,y1 → x2,y2 over ms

long_press

Hold at x,y for ms

type_text

Type into the focused field (printable ASCII, safely quoted)

key_event

home, back, recents, enter, power, volume_up/down, delete, tab, … or a numeric keycode

open_app

Launch an app by package name

list_apps

Installed packages (third-party by default, optional filter)

current_app

Foreground package

ui_dump

uiautomator dump as a compact list of clickable/labelled elements with center coordinates

tap_element

Find an element by text/content-desc or resource-id and tap it

shell

Raw adb shell. Only registered when ALLOW_SHELL=1

Every tool except list_devices and connect_wifi takes an optional serial.

Safety

This gives an AI model remote control of your phone. It could send messages, buy things, change settings, delete data or read anything on screen. Models make mistakes and can be steered by text they see (prompt injection from a web page, email or notification).

Built-in guards:

  • Device allowlist: set ADB_SERIAL and only those devices can be controlled. Requests for other serials are refused.

  • Sensitive-app guard: screenshot, ui_dump, tap, swipe, type_text and most keys are refused while a banking, payment, wallet, messaging or password-manager app is in the foreground, and open_app refuses to launch those apps. Detection uses a built-in package list plus keyword matching (bank, pay, wallet, messag, …). This is a best-effort heuristic, not a security boundary. Home, back, recents and power always work, so the assistant can leave a sensitive app. Override with ALLOW_SENSITIVE=1.

  • No raw shell by default: the shell tool only exists when ALLOW_SHELL=1. All other tools validate their inputs, and adb is invoked with execFile, never through a shell on your computer.

  • Rate limiting: 120 tool calls per minute by default (RATE_LIMIT_PER_MIN).

  • Logging: every tool call is logged to stderr (your MCP client's log). Typed text is logged as a length only.

  • Local by default: in stdio mode the server opens no network ports. HTTP mode is opt-in, binds to 127.0.0.1 by default and refuses to start without a token (see connector security). Screenshots and UI dumps go only to the MCP client that asked for them. Your client may send them to a cloud LLM, so assume screenshots can leave your machine through your AI provider.

Recommendations: use a spare or test device where you can, keep sensitive apps locked, watch the screen while the agent works, and turn off Wireless debugging when you're done.

Run it on a remote computer (Tailscale + ADB)

An AI agent running on a cloud computer or VPS can control your phone by running android-use there:

  1. Install Tailscale on your phone and on the remote computer and join both to the same tailnet. Check that each side can see the other's Tailscale address.

  2. Android only allows wireless-debugging pairing from the same local Wi-Fi, so do a one-time USB setup from any PC:

    adb devices          # accept the prompt on the phone
    adb tcpip 5555

    Then unplug the phone.

  3. On the remote computer, connect:

    adb connect <phone-tailscale-ip>:5555

    and starts the server with the phone allowlisted:

    ADB_SERIAL=<phone-tailscale-ip>:5555 npx -y @ghostfacemodz/android-use
  4. Keep the phone awake on Wi-Fi or mobile data with Tailscale connected. Rebooting the phone turns TCP mode off, so repeat step 2 after a restart.

When you're finished, turn off USB/Wireless debugging and disconnect Tailscale on the phone.

Optional: AI voice calls with Twilio (planned)

Status: planned add-on, not built yet.

ADB can start, answer and hang up calls, but Android won't let an app speak into or listen to a live SIM call without root. The planned add-on uses Twilio instead: a Twilio number that your assistant can call out from and answer, with text-to-speech, live speech-to-text over Twilio Media Streams, and transcripts and summaries of each call.

To get ready: create a Twilio account, buy a voice-capable number (about $1.15 a month plus per-minute charges), and keep the Account SID, Auth Token and number as secrets (TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN, TWILIO_NUMBER). Never commit them. Calls come from the Twilio number, not your SIM. Many jurisdictions (including the UK, US and EU) require you to tell people they're talking to an AI or being recorded, so the bridge will announce this at the start of each call. Don't use it for spam, robocalls or impersonation, and set a spending limit in the Twilio Console.

Development

git clone https://github.com/GhostFaceModz/android-adb-mcp
cd android-adb-mcp
npm install
npm test             # builds, then runs stdio + HTTP/auth + setup tests against a mocked adb (no phone needed)
node dist/index.js   # run the server from source

Test the published package with the MCP Inspector:

npx @modelcontextprotocol/inspector npx -y @ghostfacemodz/android-use

Roadmap

  • Live screen streaming via scrcpy

  • Scroll-until-found and wait-for-element helpers

  • Unicode text input (via an ADB keyboard IME)

  • Per-tool confirmation prompts (MCP elicitation)

  • iOS is not supported and not planned (there is no ADB equivalent)

License

MIT. See LICENSE.

Available Tools

14 tools
connect_wifiA

Connect to a device over Wi-Fi. For Android 11+ wireless debugging, pass pairing_code and pair_port (from 'Pair device with pairing code') to pair first.

NameRequiredDescriptionDefault
hostYes
portNo
pair_portNo
pairing_codeNo

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full disclosure burden. It does reveal a non-obvious behavioral trait — that supplying pairing_code/pair_port triggers a pairing step before connecting, with the values sourced from a specific device UI screen. However, it says nothing about authentication requirements, timeouts, retry behavior, or whether pairing persists across connections.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, and the primary action is front-loaded before the conditional pairing detail. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No annotations and no output schema, so the description must cover safety and result behavior on its own. It handles the complex pairing path well but omits failure modes, whether pairing is one-time, and what a successful or failed connection returns, which leaves an agent under-informed for a network-mutating call.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does explain the two least obvious parameters (pairing_code, pair_port) and their origin. It adds nothing about host format (IP vs hostname), port, or what happens when pairing fields are omitted alongside a non-5555 port, leaving roughly half the parameters thinly specified.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Connect to a device over Wi-Fi'), which is unambiguous against the sibling set of device-control tools like tap, swipe, and screenshot. It does not explicitly contrast itself with any alternative connection method (e.g., USB), but none exists in the sibling list, so the gap is minor.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear conditional: for Android 11+ wireless debugging, pass pairing_code and pair_port to pair first. That is actionable when-to-use guidance tied to a specific platform and flow. No when-not guidance or mention of prerequisites such as same-network reachability.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

current_appC

Get the foreground app package

NameRequiredDescriptionDefault
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full disclosure burden and it says nothing beyond the one-line purpose. It does not state that this is a read-only query, what happens when no device is connected, or whether it errors versus returning empty — all relevant for an ADB-backed tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single, front-loaded sentence with zero filler — exactly the right size for a one-parameter query tool. It is terse but not vague, so brevity does not cost it here.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read tool with a fully documented parameter, the description is minimally sufficient. With no output schema, though, it should at least characterize the return value (e.g., package name string, null when unknown) and the no-device case, which it omits.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single optional 'serial' parameter is fully documented in the schema, including its default-resolution behavior. The description adds no parameter detail, which is acceptable at this coverage level but earns no bonus.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Get') and resource ('the foreground app package'), so an agent immediately knows the tool returns the currently-active package. It does not, however, reference related siblings like list_apps or ui_dump to disambiguate in a crowded toolset.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this versus list_apps, ui_dump, or open_app, nor any stated prerequisites (e.g., that a connected device is required). The agent must infer usage entirely from the name and schema.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_screen_sizeC

Get screen resolution in pixels

NameRequiredDescriptionDefault
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It does not disclose whether the value is physical vs. usable resolution, how rotation/orientation affects the result, or the shape of the return value, so an agent cannot anticipate the output beyond 'some number in pixels'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single short sentence with no filler, front-loaded with the verb and resource. Nothing is wasted, though there is also nothing beyond the minimum.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only getter with 100% parameter coverage and no output schema, the definition is minimally viable. It still leaves open what the return value looks like (e.g., width/height pair) and which resolution (physical, usable, orientation-adjusted) is reported.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single 'serial' parameter is fully documented in the schema (100% coverage), including its default behavior when omitted. The description adds nothing about the parameter, but per the baseline rule full schema coverage justifies a 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Get screen resolution') plus the unit ('in pixels'), so the operation is unambiguous. It does not reference any sibling, but none of the siblings (tap, swipe, screenshot, etc.) overlap with this retrieval, so the risk of misselection is low.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to call this versus alternatives such as screenshot or ui_dump, and no prerequisites or context (e.g., before computing tap coordinates). Usage is only implied by the tool name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

key_eventB

Send a key event. Names: home, back, call, endcall, up, down, left, right, center, volume_up, volume_down, power, camera, tab, enter, delete, menu, search, play_pause, mute, recents, app_switch, wakeup, sleep; or a numeric keycode

NameRequiredDescriptionDefault
keyYes
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must carry the full behavioral burden, and it does disclose the accepted key vocabulary and the numeric-keycode fallback, which is meaningful. It says nothing about error behavior for unknown keys, whether the event is blocking, or device-state requirements, so the disclosure is partial.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first four words, and the long value list that follows is functional rather than filler. The semicolon-heavy enumeration reads slightly like a dump, but every token earns its place as valid input.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter device command with no output schema, the description plus schema covers what an agent needs to construct a call. The remaining gap is behavioral (invalid-key handling, device prerequisites), which matters somewhat given the absence of annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 50%, and the undocumented parameter is `key` — the description compensates by enumerating 25 valid names plus the numeric keycode option, information absent from the schema (no enum). It does not add anything about `serial`, but the schema already documents that one.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Send a key event") and enumerates the accepted key identifiers, which makes the tool's scope unambiguous against siblings like tap, swipe, and type_text. It stops short of explicitly naming or contrasting an alternative, so it is clear rather than sibling-differentiating.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to prefer this tool over tap, type_text, or swipe, and no prerequisites (device connected, active app) are mentioned. The key-name list hints at remote-control navigation, but that is value guidance rather than usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_appsC

List installed packages (third-party by default)

NameRequiredDescriptionDefault
filterNo
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)
include_systemNo

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It does disclose one real behavioral fact — that third-party packages are returned by default, so system apps are excluded unless requested — which is useful and not derivable from the schema. However, it says nothing about the requirement for an ADB-connected device, output format, ordering, or pagination.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler; the scoping detail is placed immediately after the action. It is efficiently sized, though brevity here edges toward under-specification rather than true conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a three-parameter, zero-annotation, no-output-schema tool, the description is too thin. It omits any explanation of the 'filter' parameter, the ADB device dependency implied by 'serial', and what the listing actually returns.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 33%: 'serial' is documented in the schema, while 'filter' and 'include_system' have no descriptions. The parenthetical '(third-party by default)' does explain include_system's default behavior, but 'filter' remains completely unexplained in both schema and description, so the description only partially compensates for the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a clear verb+resource ('List installed packages') and clarifies the default scope with '(third-party by default)'. It reads distinctly from siblings like list_devices or current_app, though 'packages' versus the tool name 'apps' is a minor terminology wobble.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance, no exclusions, and no mention of alternatives such as open_app (to launch) or current_app (to inspect the foreground app). The agent must infer the context entirely from the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_devicesA

List connected ADB devices (filtered by ADB_SERIAL allowlist if set)

NameRequiredDescriptionDefault

No parameters

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It does disclose one non-obvious behavioral trait — results are filtered by the ADB_SERIAL allowlist when that variable is set — but says nothing about return shape, error behavior, or whether device state (offline/unauthorized) is included.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One tight sentence with the core action front-loaded and the conditional filtering caveat parenthetically appended. No padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-param, no-annotation, no-output-schema discovery tool, the description covers what is listed and the one environment-dependent modifier. The only gap is the absence of any hint about returned fields, which is minor for this tool type.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is nothing for the description to clarify; the baseline for a 0-param schema applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: listing connected ADB devices. No sibling tool (list_apps, current_app, ui_dump, etc.) shares this resource, so an agent can route to it without ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: you call this to discover which devices are targetable before running tap/swipe/open_app. There is no explicit when-to-use statement, no mention of alternatives, and no note about behavior when no devices are connected.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

long_pressC

Long-press at coordinates

NameRequiredDescriptionDefault
xYes
yYes
msNo
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It discloses nothing about the default 800ms hold, whether the call blocks until the gesture completes, or what side effects (context menus, drag start, selection) the press triggers.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single clause is front-loaded and free of filler, so nothing is wasted. But at four words it is under-specified rather than truly concise, leaving essential context for the caller to infer.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 4-parameter interaction tool with no annotations and no output schema, the description omits the gesture's effect, duration semantics, and device targeting. An agent has to fall back entirely on the schema and prior knowledge of ADB-style long presses.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 25%: x and y have no descriptions at all. The phrase 'at coordinates' weakly implies x/y are screen coordinates, but the description adds no units, coordinate origin, or range information to compensate for the gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (long-press) and target (coordinates), so the basic action is identifiable. However, it does little to distinguish itself from the sibling tap or tap_element beyond the word 'long', and gives no indication of what a long-press accomplishes on this device.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use long_press instead of tap, swipe, or tap_element. There is no mention of prerequisites (e.g., needing a connected device) or of the conditions that make a long press the right gesture.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

open_appC

Launch an app by package name

NameRequiredDescriptionDefault
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)
packageYes

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden, yet it says nothing about what 'launch' entails (foregrounding an installed app, waiting for startup, behavior on failure, error returned if the package is missing). Only the surface action is disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler, which is appropriate in shape. It is arguably too terse for a tool with unannotated side effects, but there is no wasted text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, no annotations, and an undocumented 'package' parameter leave significant gaps: return value, failure modes, device-selection defaults, and whether the call blocks are all unstated. The one-line description is insufficient for this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%: 'serial' is documented in the schema while 'package' is not. The description partially compensates by clarifying that 'package' means the Android package identifier rather than a display name, but it adds no format examples or constraints, so it is only baseline-plus.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('Launch an app') plus the identifier type ('by package name'), which clearly separates it from siblings like list_apps and current_app. It does not explicitly name those alternatives, but the action is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this versus current_app or list_apps, and no stated preconditions such as the app needing to be installed or a device being connected. The agent must infer all usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

screenshotC

Take a screenshot (PNG)

NameRequiredDescriptionDefault
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It discloses only the PNG format; it does not say whether the image is returned inline, written to a path, or how large/complex screens are handled, nor whether any permissions or a connected device are required.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two words plus a parenthetical — front-loaded and free of padding. It is arguably under-specified rather than bloated, but as pure conciseness it is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple, likely read-only capture tool with one optional well-documented parameter, the description is minimally adequate. The PNG hint is useful, but with no output schema the description should clarify the return shape (inline image vs. file path), which it omits.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single optional 'serial' parameter is fully documented in the schema (100% coverage, including the default-resolution behavior), so the baseline of 3 applies. The description adds nothing about parameter meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource combination ('Take a screenshot') and adds the output format (PNG). No sibling tool covers screenshots, so no explicit differentiation is needed, but the description never mentions the device-targeting dimension the sibling set (serial-based ADB tools) implies.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool, no prerequisites (e.g., an active device connection), and no mention of alternatives such as ui_dump for structured UI inspection. The agent must infer usage entirely.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

swipeC

Swipe from (x1,y1) to (x2,y2) over ms milliseconds

NameRequiredDescriptionDefault
msNo
x1Yes
x2Yes
y1Yes
y2Yes
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It discloses that the gesture takes ms milliseconds, but says nothing about whether the call blocks until completion, how duration influences fling/scroll momentum, what happens with out-of-bounds coordinates, or what is returned.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single tight sentence that front-loads the gesture and parameter mapping with zero filler. It is arguably under-specified rather than verbose, which is not a conciseness failure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 6-parameter device-input tool with no annotations and no output schema, the description leaves the coordinate system, timing behavior, error cases, and return behavior entirely to guesswork. Only the most literal parameter mapping is covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 17% (just serial), but the description compensates by naming x1,y1 as the start point, x2,y2 as the end point, and ms as the duration. It still omits coordinate units, the valid range for coordinates, and that ms defaults to 300 with a 1-10000 bound.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (swipe) and resource (a gesture between two coordinates) with the duration parameter folded in. It is distinguishable from siblings like tap and long_press, though it never names them, and the coordinate space (pixels vs normalized) is left unstated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to prefer swipe over tap, long_press, or a sequence of taps, nor any prerequisite or context about the target screen state. The agent must infer usage entirely from the tool name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

tapB

Tap at pixel coordinates

NameRequiredDescriptionDefault
xYes
yYes
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries full burden. It doesn't disclose whether the tap is synchronous, what happens if coordinates are out of bounds, whether serial selection falls back, or what response is returned. Only the coordinate-based nature is conveyed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Extremely concise and front-loaded: a single clause that states the action and its operand. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Adequate minimum for a simple 3-param gesture tool with no annotations and no output schema. However, for a device-interaction tool it should mention coordinate space, device targeting, and synchronous behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 33%; only 'serial' is documented in the schema. The description adds no meaning beyond the schema for x/y, but the schema itself already constrains x/y as integers with minimum 0 and documents serial. Baseline 3 for partial coverage where the schema does most of the work.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clear verb+resource: 'Tap' at 'pixel coordinates'. Distinguishes from sibling tap_element (which likely taps by element selector rather than coordinates), though it doesn't explicitly say so.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use tap vs tap_element, long_press, or swipe. The sibling tap_element is the obvious alternative and isn't mentioned. Usage is only implied by the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

tap_elementA

Find an element by text/content-desc (substring, case-insensitive) or resource-id and tap its center

NameRequiredDescriptionDefault
textNo
indexNoWhich match to tap if several
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)
resource_idNo

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are supplied, so the description carries the full behavioral burden. It usefully discloses matching semantics (substring, case-insensitive) and where the tap lands (element center), but is silent on failure behavior when nothing matches, whether it waits/retries for the element, and whether it scrolls to find off-screen elements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler; the lookup criteria precede the action, which is the right ordering for an agent deciding whether it can use this tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a side-effecting UI interaction tool with no annotations and no output schema, the description covers the happy path only. Missing failure/ambiguity semantics (no match, multiple matches beyond the schema's `index` hint, off-screen elements) leave an agent guessing about edge cases.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%: `index` (match selector) and `serial` (device routing) are documented in the schema, while `text` and `resource_id` are bare. The description compensates for `text` by specifying substring/case-insensitive matching, but leaves `resource_id` matching semantics (exact vs substring) undefined and never explains that `text` and `resource_id` are alternative selectors.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb pair (find + tap), the resource (element), and the two lookup keys (text/content-desc or resource-id), plus the tap target (center). It implicitly separates itself from the coordinate-based `tap` sibling but never names it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent can infer this tool is chosen when it knows the element's text or resource-id rather than its coordinates, but the description never says when to prefer `tap`, `long_press`, or `ui_dump` instead, nor any prerequisite like the app already being on screen.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

type_textB

Type text into the focused field (printable ASCII)

NameRequiredDescriptionDefault
textYes
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and adds one genuine behavioral constraint: '(printable ASCII)'. That usefully caps accepted input beyond the schema. However, it omits failure behavior, whether the field is cleared first, and permission/device requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single tight sentence with the actionable resource front-loaded and no wasted words. It is efficient, though slightly under-specified rather than optimally informative.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple input-mutation tool with no annotations and no output schema, the definition is minimally adequate. It covers what the tool does and an input constraint, but leaves prerequisites (field focus) and error handling unaddressed given the absence of structured safety signals.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50% (serial is documented, text is not). The description partly compensates by characterizing the text parameter as printable ASCII, adding meaning beyond the schema, but says nothing about the 1000-char maxLength or the serial parameter's role.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clear specific verb+resource: 'Type text into the focused field'. The 'focused field' scope distinguishes it from tap/tap_element, but it never names those siblings or key_event explicitly, so sibling differentiation is only implied.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'focused field' softly implies a prerequisite (something must already be focused) but the description never states when to use this over key_event or tap_element, nor what to do if no field is focused. Usage is inferable but not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ui_dumpB

Dump the UI hierarchy as a compact list of clickable/labelled elements with bounds and center coordinates

NameRequiredDescriptionDefault
serialNoDevice serial (optional; defaults to first ADB_SERIAL entry or the only connected device)

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It usefully describes the return shape (clickable/labelled elements with bounds and center coordinates), which is genuine behavioral information. However, it omits whether this is a read-only operation, any performance/pagination characteristics, or device-selection behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence that leads with the verb and progressively narrows to the output format. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-annotation, no-output-schema tool, the description covers the essential return content (element names, bounds, center coordinates) that an agent needs to use the result. It leaves gaps on device-selection and read-only semantics, but is largely sufficient for a simple dump operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

One optional parameter (serial) with 100% schema description coverage, so the schema already documents the default-device fallback behavior. The description adds no parameter meaning beyond the schema. Baseline 3 is appropriate when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Dump) and resource (UI hierarchy), then further specifies the output content: clickable/labelled elements with bounds and center coordinates. This clearly distinguishes it from screenshot (visual capture) and the interaction tools like tap_element, though no sibling is named explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use or when-not-to-use guidance is provided. The description never explains how this relates to alternatives like screenshot or tap_element, nor the workflow context (e.g., inspect-then-act). Usage is only inferable from the purpose statement.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 14 tool updatesv0.1.0
    • First observedconnect_wifi
    • First observedcurrent_app
    • First observedget_screen_size
    • First observedkey_event
    • First observedlist_apps
    • First observedlist_devices
    • First observedlong_press
    • First observedopen_app
    • First observedscreenshot
    • First observedswipe
    • First observedtap
    • First observedtap_element
    • First observedtype_text
    • First observedui_dump

TDQS

B3.3/5.0

Scored across 14 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: device listing, app inspection, input actions, screen capture, and UI element interaction are well separated. tap vs tap_element and open_app vs current_app are unambiguous, so an agent can select correctly without confusion.

Naming Consistency3/5

All names use snake_case, which is readable, but the verb/noun convention is inconsistent: list_devices and get_screen_size follow verb_noun, while screenshot, current_app, key_event, and ui_dump use noun or mixed forms. The set is understandable but not predictably patterned.

Tool Count5/5

14 tools is well-scoped for an ADB/UI-automation server. Each tool covers a distinct operation, and there is no obvious redundancy or filler.

Completeness4/5

The surface covers device discovery, app inspection, input gestures, text entry, key events, screenshots, and UI hierarchy dumping. Minor gaps exist for app install/uninstall, file transfer, shell commands, and reboot, but core UI automation workflows are supported.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • F
    license
    A
    quality
    C
    maintenance
    A MCP server that enables AI assistants to control Android devices via ADB, supporting device info, screen control, input simulation, app management, shell execution, file transfer, and UI parsing.
    20
    -
  • A
    license
    A
    quality
    A
    maintenance
    MCP server that gives AI agents full vision and control over Android devices via ADB and scrcpy. Supports screenshots, input, apps, UI automation, shell, files, and clipboard.
    38
    365 npm
    125
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to control a physical Android device or Docker-hosted emulator over ADB by taking screenshots and performing taps, swipes, key presses, text input, shell commands, app launches, and device info queries. It runs as a local MCP stdio server alongside a web UI and REST API for remote access.
    1
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables MCP-compatible AI assistants to see and control Android devices through ADB and a fast device-control protocol, including screenshots, touch input, typing, app management, UI inspection, file transfer, shell commands, and audio/video streaming.
    365 npm
    MIT