MCP SERVER · ANDROID OVER ADB

A real phone.
Driven by your agents.

Android computer use for AI agents, over plain ADB.

One MCP server, nexus-android, shared by Claude Code, Codex and Antigravity: they see the screen and drive a real Android phone.

Explore the code See the tools

No root
No app on the phone
No internet relay

Works with

A foldable Android phone whose numbered elements are linked to three AI agents — Illustration of an exchange: `look` numbers the elements, `act` reports on every gesture.

MCPADBPYTHON 3.14WINDOWSUSB · LOCAL WI-FIMIT

01 / THE TOOLS

Eleven tools.
One server.

The same server for all three agents: one ADB access to maintain, one shared lock and the same safeguards.

phone
Link status, Fold posture, reboot.
look
Screen image and numbered [N] elements.
act
Batched gestures: tap, long press, typing with accents and emoji, clear, keys, scroll, swipe, wait, geo:, tel:, mailto: and https: links.
launch
Opens an app.
messages
SMS and RCS read, attached photos, security codes masked.
draft
SMS, RCS or WhatsApp reply prepared, never sent without an explicit “yes”.
notifications
Notifications shown on the phone.
files
Files in /sdcard, never overwritten or deleted.
info
Location, calls, contacts, calendar, read-only.
settings
Wi-Fi, Bluetooth, mobile data, location, NFC, do not disturb, brightness, volume, read back after each change.
checkup
Health report: system, security patch, battery, storage, memory.

02 / THE SAFEGUARDS

The agent acts.
You stay in control.

The rules live in the tool itself, not only in the instructions given to the agent.

Nothing irreversible without you

Send, pay, delete or confirm: refused without confirm=true, which is set only after the user says yes.

Every gesture checked

The target is read back on screen right before every gesture. Report: ✓ effect read back, ~ sent but not verified, ✗ refused, ? link lost. A gesture is never sent twice.

Sensitive areas are read-only

Banking, payment, crypto and identity stay read-only. No password is ever typed.

Your phone stays yours

Locked phone: no gesture, never a code. No gesture either while you are holding the phone.

One agent at a time, one phone

A shared lock keeps two agents from acting at once. Only the owner’s phone, recognised by its serial number, is driven.

Text read is data

What appears on screen or arrives by message is never an instruction for the agent.

The screen is handed back

Kept awake while working, then handed back and turned off two minutes after the last gesture: the phone locks again.

03 / DELIBERATE CHOICES

Visible.
Local. Nothing added.

The real screen

Gestures go through the phone’s screen: you watch the agent work.

No companion app

Nothing to install on the phone: ADB is enough, over a USB cable or the local Wi-Fi with wireless debugging.

No internet relay

The PC talks to the phone directly. No online service in between.

Accented text and emoji: through Genymobile’s scrcpy server (Apache 2.0), with a pinned version and SHA-256. The clipboard is restored afterwards.

04 / INSTALLATION

One installer.
Three agents ready.

On Windows, install.ps1 registers the server in Claude Code, Codex and Antigravity.

Independent project, not affiliated with Google, Samsung, Anthropic, OpenAI or Genymobile.

Version: 0.3.1
Licence: MIT
Requirements: Windows PC, Python 3.14
Link: USB cable or local Wi-Fi (wireless debugging)
Tested on: Samsung Galaxy Fold (SM-F971B) with a Windows PC. Other Android phones not tested.

05 / SOURCE CODE

Read the code.
Plug in your phone.

The code, documentation and installer are on GitHub, under the MIT licence.

Open the GitHub repository

A real phone.Driven by your agents.

Eleven tools.One server.

The agent acts.You stay in control.