# Mobile MCP: Reach MCP Servers on Your Phone | SealGate

How Mobile MCP works: the SealGate Android client is a device daemon that holds one outbound WebSocket to the backend, so cloud agents reach in-process MCP servers on your phone. No inbound port, works behind NAT, with your data and logins kept on the device.

Source: https://sealgate.ai/mobile

---

[Docs](https://sealgate.ai/docs/) [Product](https://sealgate.ai/product)

AI Data Leaks

[Blog](https://sealgate.ai/blog/) [Pricing](https://sealgate.ai/pricing) [Book a demo](https://cal.com/eito80/demo) [Start Free](https://dashboard.sealgate.ai)

Mobile MCP

# Cloud agents reach MCP servers on your phone

[Start Free](https://dashboard.sealgate.ai) [Book a demo](https://cal.com/eito80/demo)

No inbound port

Works behind NAT

Governed and logged

How it works

## One tunnel, SealGate on both ends

Cloud agent

Your phone

In-process, not spawned

Mobile Bash

## One run tool, the whole device CLI

mobilebash_run

$ device info

{
"model": "Pixel 8 Pro",
"manufacturer": "Google",
"os": "Android 15",
"sdk": 35
}

device

battery

wifi

bluetooth

usb

opt-in camera

opt-in computer

Tap a command to see sample output

Mobile Bash just-bash in QuickJS in-memory filesystem created per run, wiped when it ends no host filesystem access Your Android filesystem photos, files, other apps never read or written Powered by [just-bash](https://github.com/vercel-labs/just-bash) .

[View the Android client on GitHub](https://github.com/edison-watch/mobile)

60s call deadline 64 KiB script 1 MiB output 8 MiB per file 32 MiB total FS No host FS or network

Use cases

## What agents do with a phone

### Flipper Zero & RF tools

Automate a handheld radio tool over BLE or USB straight from a cloud agent.

bluetooth usb

### BLE boards & HATs

Read and write GATT and subscribe to notifications on ESP32s, sensors, and Bluetooth HATs.

bluetooth

### Eyes for your agent

Snap a photo and hand the agent the scene back as a native MCP image.

camera

### USB-OTG gear

Enumerate and drive USB peripherals with raw bulk and control transfers.

usb

### Serial & OBD-II

Talk to classic Bluetooth gear over RFCOMM/SPP: printers, scanners, car dongles.

bluetooth

### Cross-app control

Observe and drive other apps through the accessibility tree, on private builds.

computer

Quick start

## Two steps to reach your phone

1

### Install the client on Android

Build and install the SealGate client from the repo onto your Android phone. It runs an always-on background tunnel, so it is Android only.

[Get it on GitHub](https://github.com/edison-watch/mobile)

2

### Add Mobile Bash to your account

Sign up, then open the pre-filled add-server link. It registers Mobile Bash on your dashboard so cloud agents can reach the phone.

[Add Mobile Bash](https://dashboard.sealgate.ai/add-mcp?command=mobile-builtin&name=mobilebash)

## Mobile MCP: FAQ

What is Mobile MCP? Mobile MCP is the SealGate Android client: a device-side daemon that lets cloud agents reach MCP servers running on your phone. It holds one outbound WebSocket to the SealGate backend, so cloud agents can read device state and drive hardware without any inbound port on the phone.

How is it different from the desktop stdio daemon? It speaks the same wire protocol (protocol v2) as the desktop sealgate-stdiod daemon. Where the desktop daemon spawns npx or uvx subprocesses, the phone answers MCP requests from in-process Kotlin modules, because a phone cannot spawn stdio servers.

What is Mobile Bash? Mobile Bash is the single built-in MCP server the app exposes. Its one run tool executes a script inside a restricted just-bash environment, delegating to the same Kotlin capability modules behind commands like device, battery, wifi, bluetooth, usb, and camera. The agent tool is named from the server prefix, for example mobilebash_run.

Do Android permissions still apply? Yes. The CLI delegates to the Kotlin capability modules, so Android runtime permissions and on-device permission dialogs still apply. Camera and cross-app control are off by default and each need an in-app toggle plus the matching Android permission.

Does it modify files on my phone? No. Mobile Bash runs scripts in a just-bash sandbox inside QuickJS with a virtualized in-memory filesystem, the same approach as just-bash on the web. Reads and writes hit that virtual FS only; the phone's Android filesystem is never touched. The virtual FS is shared across calls for one tunnel run and destroyed when that run stops.

What can the sandbox not do? Mobile Bash has no Android filesystem, real process, general network, Python, JavaScript, or SQLite access. It enforces a 60-second deadline, a 64 KiB script limit, a 1 MiB output limit, an 8 MiB per-file limit, and a 32 MiB total virtual filesystem limit. The virtual filesystem is shared across calls for one tunnel run and destroyed when that run stops.

Want your agent to reach messaging apps instead? Set those up from the [connections hub](https://sealgate.ai/connect) , or read the [documentation](https://sealgate.ai/docs/) .

### Contact Us

SealGate (GPU-EVM LTD)

3rd Floor, 86-90 Paul Street

London EC2A 4NE

Email: hello@sealgate.ai

### Legal

[Terms of Service](https://sealgate.ai/terms-of-service) [Privacy Policy](https://sealgate.ai/privacy-policy) [Subprocessors](https://sealgate.ai/subprocessors) [Data Processing Addendum](https://sealgate.ai/dpa)

### Quick Links

[Home](https://sealgate.ai/) [Product](https://sealgate.ai/product) [Pricing](https://sealgate.ai/pricing) [Self-hosting](https://sealgate.ai/self-hosting) [Security](https://sealgate.ai/security) [Comparison](https://sealgate.ai/comparison) [For your team](https://sealgate.ai/for) [About](https://sealgate.ai/about) [Contact](https://sealgate.ai/contact) [Brand](https://sealgate.ai/brand) [Press](https://sealgate.ai/press) [Docs](https://sealgate.ai/docs/) [Developer docs](https://sealgate.ai/docs/developers) [Guides](https://sealgate.ai/guides/) [Blog](https://sealgate.ai/blog/)

### Connect

[Connect AI to messaging](https://sealgate.ai/connect) [WhatsApp](https://sealgate.ai/connect/whatsapp) [iMessage](https://sealgate.ai/connect/imessage) [Telegram](https://sealgate.ai/connect/telegram) [LinkedIn DMs](https://sealgate.ai/connect/linkedin) [Signal](https://sealgate.ai/connect/signal) [Instagram DMs](https://sealgate.ai/connect/instagram) [Messenger](https://sealgate.ai/connect/messenger) [X DMs](https://sealgate.ai/connect/x) [Discord DMs](https://sealgate.ai/connect/discord) [LINE](https://sealgate.ai/connect/line) [Beeper](https://sealgate.ai/beeper)

### Follow Us