# Mobile MCP: Reach MCP Servers on Your Phone | SealGate

How Mobile MCP works: the SealGate Android client is a device daemon that holds one outbound WebSocket to the backend, so cloud agents reach in-process MCP servers on your phone. No inbound port, works behind NAT, with your data and logins kept on the device.

Source: https://sealgate.ai/mobile

---

[Docs](https://sealgate.ai/docs/) [Product](https://sealgate.ai/product) By role

[Security teams See every agent, prove control](https://sealgate.ai/product#for-security-leaders) [IT & platform Kill shadow MCP, clear the ticket queue](https://sealgate.ai/product#for-it-teams) [Engineering teams Keep your agents, skip the blocks](https://sealgate.ai/product#for-developers) [Compliance & enterprise Govern to the standards you answer to](https://sealgate.ai/product#for-compliance)

By feature

[Discovery Find and quarantine shadow MCP](https://sealgate.ai/product#discovery) [MCP gateway One enforcement point for every call](https://sealgate.ai/product#mcp-gateway) [Supply chain security Pin tools, catch silent changes](https://sealgate.ai/product#supply-chain) [Detection and Response Stop data leaving in real time](https://sealgate.ai/product#detection-response) [Risk scoring Score every session Low to High](https://sealgate.ai/product#risk-scoring) [Agent inventory & records One control plane for the fleet](https://sealgate.ai/product#system-of-actions) [Audit-ready Forensic trail for every action](https://sealgate.ai/product#audit-ready) [Chrome extension Track ChatGPT and Claude tool calls](https://sealgate.ai/chrome) [Self-hosting Run it in your own VPC or air-gapped](https://sealgate.ai/self-hosting)

[Developers](https://sealgate.ai/dev) AI Data Leaks [Cursor/VSCode Data Leak](https://www.linkedin.com/posts/eito-miyamura-157305121_cursor-github-mcp-can-lead-to-private-keys-activity-7383899320326160384-tMCX) [ChatGPT Gmail/Outlook Data Leak](https://www.linkedin.com/feed/update/urn:li:activity:7372306174253256704/) [Perplexity Comet Bankruptcy](https://www.linkedin.com/feed/update/urn:li:activity:7386434090901671936/) [Postgres Data Exfiltration](https://www.youtube.com/watch?v=cqvC7hGXy8Y) [Claude Desktop Data Leak](https://gatlingx.notion.site/Calendar-only-exfiltration-23e89dcc2f088029ade9e81e7d1c275f) [Claude Code Outlook Data Leak](https://www.youtube.com/watch?v=Wldae7-SN5E) [Confluence Insider Threat](https://www.youtube.com/watch?v=SpXUPto90IA)

[Blog](https://sealgate.ai/blog/) [Pricing](https://sealgate.ai/pricing) [Book a demo](https://cal.com/eito80/demo) [Start Free](https://dashboard.sealgate.ai/?utm_source=sealgate.ai&utm_campaign=seo-site&utm_content=mobile)

[Docs](https://sealgate.ai/docs/) [Product](https://sealgate.ai/product) [Developers](https://sealgate.ai/dev) [Pricing](https://sealgate.ai/pricing) [Self-hosting](https://sealgate.ai/self-hosting) AI Data Leaks [Cursor/VSCode Data Leak](https://www.linkedin.com/posts/eito-miyamura-157305121_cursor-github-mcp-can-lead-to-private-keys-activity-7383899320326160384-tMCX) [ChatGPT Gmail/Outlook Data Leak](https://www.linkedin.com/feed/update/urn:li:activity:7372306174253256704/) [Perplexity Comet Bankruptcy](https://www.linkedin.com/feed/update/urn:li:activity:7386434090901671936/) [Postgres Data Exfiltration](https://www.youtube.com/watch?v=cqvC7hGXy8Y) [Claude Desktop Data Leak](https://gatlingx.notion.site/Calendar-only-exfiltration-23e89dcc2f088029ade9e81e7d1c275f) [Claude Code Outlook Data Leak](https://www.youtube.com/watch?v=Wldae7-SN5E) [Confluence Insider Threat](https://www.youtube.com/watch?v=SpXUPto90IA)

[Blog](https://sealgate.ai/blog/) [Book a demo](https://cal.com/eito80/demo)

Mobile MCP

# Cloud agents reach MCP servers on your phone

[Start Free](https://dashboard.sealgate.ai/?utm_source=sealgate.ai&utm_campaign=seo-site&utm_content=mobile) [Book a demo](https://cal.com/eito80/demo)

No inbound port

Works behind NAT

Governed and logged

How it works

## One tunnel, SealGate on both ends

Cloud agent

Your phone

In-process, not spawned

Mobile Bash

## One run tool, the whole device CLI

mobilebash_run

$ device info

{
"model": "Pixel 8 Pro",
"manufacturer": "Google",
"os": "Android 15",
"sdk": 35
}

device

battery

wifi

bluetooth

usb

opt-in camera

opt-in computer

Tap a command to see sample output

Mobile Bash just-bash in QuickJS in-memory filesystem created per run, wiped when it ends no host filesystem access Your Android filesystem photos, files, other apps never read or written Powered by [just-bash](https://github.com/vercel-labs/just-bash) .

[View the Android client on GitHub](https://github.com/edison-watch/mobile)

60s call deadline 64 KiB script 1 MiB output 8 MiB per file 32 MiB total FS No host FS or network

Use cases

## What agents do with a phone

### Flipper Zero & RF tools

Automate a handheld radio tool over BLE or USB straight from a cloud agent.

bluetooth usb

### BLE boards & HATs

Read and write GATT and subscribe to notifications on ESP32s, sensors, and Bluetooth HATs.

bluetooth

### Eyes for your agent

Snap a photo and hand the agent the scene back as a native MCP image.

camera

### USB-OTG gear

Enumerate and drive USB peripherals with raw bulk and control transfers.

usb

### Serial & OBD-II

Talk to classic Bluetooth gear over RFCOMM/SPP: printers, scanners, car dongles.

bluetooth

### Cross-app control

Observe and drive other apps through the accessibility tree, on private builds.

computer

Quick start

## Two steps to reach your phone

1

### Install the client on Android

Build and install the SealGate client from the repo onto your Android phone. It runs an always-on background tunnel, so it is Android only.

[Get it on GitHub](https://github.com/edison-watch/mobile)

2

### Add Mobile Bash to your account

Sign up, then open the pre-filled add-server link. It registers Mobile Bash on your dashboard so cloud agents can reach the phone.

[Add Mobile Bash](https://dashboard.sealgate.ai/add-mcp?command=mobile-builtin&name=mobilebash&utm_source=sealgate.ai&utm_campaign=seo-site&utm_content=mobile)

## Mobile MCP: FAQ

What is Mobile MCP? Mobile MCP is the SealGate Android client: a device-side daemon that lets cloud agents reach MCP servers running on your phone. It holds one outbound WebSocket to the SealGate backend, so cloud agents can read device state and drive hardware without any inbound port on the phone.

How is it different from the desktop stdio daemon? It speaks the same wire protocol (protocol v2) as the desktop sealgate-stdiod daemon. Where the desktop daemon spawns npx or uvx subprocesses, the phone answers MCP requests from in-process Kotlin modules, because a phone cannot spawn stdio servers.

What is Mobile Bash? Mobile Bash is the single built-in MCP server the app exposes. Its one run tool executes a script inside a restricted just-bash environment, delegating to the same Kotlin capability modules behind commands like device, battery, wifi, bluetooth, usb, and camera. The agent tool is named from the server prefix, for example mobilebash_run.

Do Android permissions still apply? Yes. The CLI delegates to the Kotlin capability modules, so Android runtime permissions and on-device permission dialogs still apply. Camera and cross-app control are off by default and each need an in-app toggle plus the matching Android permission.

Does it modify files on my phone? No. Mobile Bash runs scripts in a just-bash sandbox inside QuickJS with a virtualized in-memory filesystem, the same approach as just-bash on the web. Reads and writes hit that virtual FS only; the phone's Android filesystem is never touched. The virtual FS is shared across calls for one tunnel run and destroyed when that run stops.

What can the sandbox not do? Mobile Bash has no Android filesystem, real process, general network, Python, JavaScript, or SQLite access. It enforces a 60-second deadline, a 64 KiB script limit, a 1 MiB output limit, an 8 MiB per-file limit, and a 32 MiB total virtual filesystem limit. The virtual filesystem is shared across calls for one tunnel run and destroyed when that run stops.

Want your agent to reach messaging apps instead? Set those up from the [connections hub](https://sealgate.ai/connect) , or read the [documentation](https://sealgate.ai/docs/) .

### Contact Us

SealGate (GPU-EVM LTD)

3rd Floor, 86-90 Paul Street

London EC2A 4NE

Email: hello@sealgate.ai

### Legal

[Terms of Service](https://sealgate.ai/terms-of-service) [Privacy Policy](https://sealgate.ai/privacy-policy) [Subprocessors](https://sealgate.ai/subprocessors) [Delete your account](https://sealgate.ai/account-deletion) [Data Processing Addendum](https://sealgate.ai/dpa)

### Quick Links

[Home](https://sealgate.ai/) [Product](https://sealgate.ai/product) [Pricing](https://sealgate.ai/pricing) [For developers](https://sealgate.ai/dev) [Self-hosting](https://sealgate.ai/self-hosting) [Chrome extension](https://sealgate.ai/chrome) [Security](https://sealgate.ai/security) [Comparison](https://sealgate.ai/comparison) [For your team](https://sealgate.ai/for) [About](https://sealgate.ai/about) [Contact](https://sealgate.ai/contact) [Brand](https://sealgate.ai/brand) [Press](https://sealgate.ai/press) [Docs](https://sealgate.ai/docs/) [Developer docs](https://sealgate.ai/docs/developers) [Guides](https://sealgate.ai/guides/) [MCP gateway guide](https://sealgate.ai/guides/mcp-gateway) [Blog](https://sealgate.ai/blog/)

### Connect

[Connect AI to messaging](https://sealgate.ai/connect) [WhatsApp](https://sealgate.ai/connect/whatsapp) [iMessage](https://sealgate.ai/connect/imessage) [Telegram](https://sealgate.ai/connect/telegram) [LinkedIn DMs](https://sealgate.ai/connect/linkedin) [Signal](https://sealgate.ai/connect/signal) [Instagram DMs](https://sealgate.ai/connect/instagram) [Messenger](https://sealgate.ai/connect/messenger) [X DMs](https://sealgate.ai/connect/x) [Discord DMs](https://sealgate.ai/connect/discord) [LINE](https://sealgate.ai/connect/line) [Beeper](https://sealgate.ai/beeper)

### Follow Us