android-use runs on your own machine — the client starts it, so there is no endpoint to ping. 10 installs a week from npm. Last commit 21 Oct 2026.
Let AI agents see and control an Android phone over ADB, with safety guards.
What the code does
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
execFile(ADB, args, { encoding: "buffer", maxBuffer: 64 * 1024 * 1024, timeout: opts.timeoutMs ?? 30000 }, (err, stdout, stderr) => {
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add android-use -- npx -y @ghostfacemodz/android-use{
"mcpServers": {
"android-use": {
"command": "npx",
"args": [
"-y",
"@ghostfacemodz/android-use"
]
}
}
}[mcp_servers.android-use]
command = "npx"
args = ["-y", "@ghostfacemodz/android-use"]{
"mcpServers": {
"android-use": {
"command": "npx",
"args": [
"-y",
"@ghostfacemodz/android-use"
]
}
}
}{
"servers": {
"android-use": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@ghostfacemodz/android-use"
]
}
}
}Optional settings from the registry entry, left out of the block above:
ADB_SERIAL (Comma-separated allowlist of device serials (from `adb devices`). Recommended), ALLOW_SHELL (Set to 1 to register the raw `shell` tool (off by default)), ALLOW_SENSITIVE (Set to 1 to disable the banking/payments/messaging app guard (off by default)), SENSITIVE_PACKAGES (Extra comma-separated package names to treat as sensitive), RATE_LIMIT_PER_MIN (Maximum tool calls per minute (default 120)), ADB_PATH (Path to the adb binary if it is not on PATH).
Alternatives to android-use
same job, measured the same wayLet an AI agent see and use a real Android phone over Wi-Fi, without ADB or root.
Control Android devices over ADB from AI agents — safe-by-default, read-only by default, audited.
Let AI agents use your real Android phones safely, with permissions, approvals and an audit log.
Let your AI agent see, use and control the apps on your phone: screen as text, tap by label.
Safety-gated computer use for AI agents: screen OCR and vision, mouse, keyboard, window control.
Let an AI agent buy gift cards with USDC over x402, within limits the wallet owner sets.
User-approved phone calls, speech, transcription and voice agents with PyAI OAuth.
Search, play, and control Stremio on Android TV over native ADB.
android-use — questions
Answers built from our own checks of this server.