An agent holds your phone; Pinky holds the agent

What it does

Pinky is a native desktop app (macOS, Windows, Linux) that exposes your real phone to AI agents over MCP — Claude Code, Codex, Cursor, or anything that speaks MCP, locally or over HTTP. The agent taps, types and navigates while you watch a live mirror on your computer and can grab control at any moment. It handles Android 10–17 and iOS 17.4+, including unlocking a locked phone from your desk (the PIN is stored once and agents never see it).

The interesting bit

The safety rules run in Pinky’s gateway, not in prompts. Payments, sends, deletions and similar risky buttons wait for your click — enforced in code, so an agent can’t approve itself even when on-screen text tries to talk it into it. Banking, wallet and password-manager apps are invisible to agents by default, and agents can’t type into password or OTP fields.

Key highlights

• Approvals enforced at the gateway level; risky buttons detected in 10 languages
• Hidden second screen on Android 13+, so your phone’s actual screen stays yours
• Every run recorded: plain-word steps, screenshots, screen recording, exportable HTML report — all local
• Tiny native app: 16–22 MB download, ~70 MB idle memory, no Electron or webview
• Brings its own adb; Wi-Fi pairing with a verification mark so another device can’t impersonate your phone

Caveats

• Pre-alpha: end-to-end runs are confirmed with Claude Code, but the README admits some features “still wait for a person to try it”
• iOS 17.4–26 needs a helper app installed from Xcode; the Windows installer is unsigned
• On older Android and iPhones, agents use the main screen — no hidden second screen

Verdict

Worth a look if you want agents doing real phone tasks without handing them the keys. If you were hoping for a fully polished, battle-tested tool, the pre-alpha label is doing honest work here.