IPhone Mirror README
The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the IPhone Mirror listing page.
iphone-mirror-mcp
Let any LLM drive a real iPhone.
An MCP server that controls a physical iPhone through the built-in macOS iPhone Mirroring app, and automates Xcode development testing — build, test, install, and launch on simulators and devices, then operate the app on the mirrored screen with taps, swipes, typing, and OCR.
No jailbreak. Nothing installed on the phone. No XCUITest target.
63 tools. Works with Claude, GPT, Gemini, local models — anything that speaks MCP over stdio.
Quick start
The installer checks your machine, builds a release binary, verifies permissions end to end, and prints the exact config for your client.
Then, for Claude Code:
Or for any other MCP client:
Ask your model:
Take a screenshot of my iPhone and tell me what app is open.
Or grab the .mcpb bundle from the
latest release
if your client installs MCP bundles and you would rather skip the toolchain
(see the caveats — it is
ad-hoc signed but not notarized).
→ Full getting-started guide · per-client config
Requirements
- macOS 15+ with iPhone Mirroring, paired to an iOS 18+ iPhone (nearby, locked, same Apple Account)
- Xcode — for the
xcode_*,device_*, andsim_*tools - Accessibility and Screen Recording permission, granted to the app that launches the server (your terminal, or the desktop app hosting your client) — details
Check everything at once:
It tests all four permissions, captures a real frame, and confirms macOS is actually delivering synthetic input — rather than just reading permission flags. Run it before you suspect anything else.
What it can do
| Session & health | status, doctor, mirror_launch, mirror_restart |
| See the screen | screenshot, annotated_screenshot (every element boxed + numbered), read_screen (OCR with tappable centers), find_text, find_image, record_screen |
| Wait properly | wait_for_text, wait_for_screen_change, scroll_to |
| Input | tap (with expect verification), double_tap, long_press, swipe, drag, type_text, paste_text (emoji/CJK via clipboard), read_clipboard, press_key, shake, batch |
| Navigate | home, app_switcher, spotlight, launch_app, open_url |
| Notifications | notifications, notification_click |
| Xcode | xcode_list, xcode_build, xcode_test, xcresult_attachments |
| Real devices | run_on_iphone, devices, device_install, device_launch, device_info, device_apps, device_uninstall |
| Simulators | run_on_sim plus the full simctl belt — push, GPS, privacy grants, status bar, appearance, logs, media |
→ Complete tool reference — all 63, with parameters, generated from the server's own catalog so it cannot drift.
Coordinate contract
Every x/y is a pixel position in the most recent screenshot, origin
top-left. At input time the window bounds are re-queried and the pixel maps
proportionally into the current bounds — so a window that moved or was resized
between screenshot and tap still receives the tap in the right place.
Documentation
| Getting started | Install → permissions → first tap |
| Connecting a client | Claude Code, Claude Desktop, Cursor, VS Code, Zed, Codex, Windsurf |
| Tool reference | All 63 tools and their parameters |
| Recipes | Driving an app, the on-device test loop, notifications, batching |
| Troubleshooting | Symptoms → causes → fixes |
| Architecture | How input actually reaches the phone |
| Limitations | What this genuinely cannot do |
Known limitations
Tested, not guessed — the full list explains why.
- Pinch and rotate cannot be synthesized. Trackpad gestures do not travel the CGEvent pipeline; an event tap sees nothing during a physical pinch, so there is nothing to reproduce.
- One phone at a time — device switching has no scriptable menu.
- The session pauses whenever the phone is unlocked or picked up. Apple's design; resuming needs it locked again.
- No accessibility tree — OCR and template matching are the element model. Face ID, Control Center, and hardware buttons are unreachable, and DRM content captures black.
Security
This server can see and control whatever iPhone the Mac is paired with while mirroring is active. Treat it like handing your unlocked phone to the model. Run it only from clients you trust.
The phone locks the session the moment it is picked up or unlocked physically,
which is a real kill switch. paste_text briefly places text on the Mac
clipboard and restores what was there; read_clipboard reads it.
See SECURITY.md for the trust model and how to report a vulnerability.
Contributing
Issues and pull requests welcome — see CONTRIBUTING.md.