Mirroir Mcp

[mirroir-mcp]

mirroir-mcp

[npm version] [Build] [License] [macOS 15+] [Discord]

Let your agent use your real iPhone, then replay what it did without an LLM.

[An agent reads the commute time in Waze on a real iPhone, then posts it in a Slack channel]

A real run on a real iPhone, sped up: the agent reads the ETA in Waze, then posts it in Slack.

No Developer Mode, no Xcode, no WebDriverAgent, no jailbreak. mirroir-mcp works through macOS iPhone Mirroring, so it reaches any app on your phone, including App Store apps you could never build. It works from any MCP client, with 39 tools.

Quick start

You need macOS 15 or later and an iPhone connected through iPhone Mirroring. Paste this into your coding agent (Claude Code, Codex, Cursor, OpenClaw, …):

Set up mirroir-mcp so you can drive my iPhone: follow https://github.com/jfarcand/mirroir-mcp/blob/main/docs/onboarding.md step by step, and finish by reading back what my iPhone screen shows.

Or install it yourself:

npx -y mirroir-mcp install    # or: brew tap jfarcand/tap && brew install mirroir-mcpnpx -y mirroir-mcp doctor     # names anything left to fix

OpenClaw, Claude Desktop, Cursor, VS Code and the other clients: Install.

Then ask for something:

Open Calendar, create a new event called "Dentist" next Tuesday at 2pm.

Open my Expo Go app, tap "LoginDemo", test the login screen with[email protected] / password123. Screenshot after each step.

Start recording, open Instagram, scroll the feed and open my profile, stop recording.

Why mirroir

• Nothing to install on the phone. The iPhone stays stock: no signing, no provisioning profile, no on-device agent. If iPhone Mirroring shows it, mirroir can drive it.

• Your Mac stays yours. Taps, typing and swipes reach the mirror without bringing it to the front, so you can keep working. Drags and two-finger gestures bring it forward for a moment, then hand your app back.

• Explore once, replay without an LLM. generate_skill explores an app and writes SKILL.md files. A compiled skill replays from the CLI with no AI in the loop (mirroir test), so CI runs are deterministic and cost no tokens.

• One test across phone, web and backend. mirroir-run is our companion test runner, a separate binary. One YAML scenario can drive the iPhone, a browser, HTTP endpoints and subprocesses, then compare what the page and the phone showed. See Web and iOS in one scenario.

• Drift fails loudly. mirroir-run has a third verdict beside pass and fail: DRIFT, exit code 65, when every assertion held but the output moved past its baseline. Your CI lane decides whether drift blocks a merge.

• It plays games, too. A scene: step plays a turn-based or tap-driven game, frame by frame, under a hard budget. See Games.

  [The console and a real iPhone side by side during a full chess game: each move is logged as it is played, ending in checkmate against the Maximum bot on Chess.com]

  A real game on a real iPhone: the model reads the board, Stockfish picks the moves, mirroir plays them against Chess.com's strongest bot. The opening runs at 2.5×, the middle game at 45×, the finish at 2×.

How it compares

phone-harness is the closest tool here: it also drives a stock iPhone through iPhone Mirroring, and it adds Android and hosted phones, which mirroir doesn't have. mobile-mcp and Appium cover Android and simulators too. mirroir goes further after the agent's first run: that run becomes a replay that needs no LLM, and a test that tells you when the output moves.

Safety

Giving an AI access to your phone demands defense in depth, so mirroir-mcp is fail-closed.

• Read-only until you say otherwise. Without a config file, only the 12 read-only tools are exposed. Every tool that changes something stays hidden from the client until you allow it in permissions.json.
• Sensitive apps can be blocked. blockedApps keeps the AI out of apps like Wallet or Banking, even when other tools are allowed.
• Passwords stay yours. mirroir never presses a sheet that asks for a password or Touch ID, and it tells agents to ask you before sending, buying, deleting or changing a setting.
• No root, no daemon, no telemetry. It runs as your user with Screen Recording and Accessibility. The one network call it makes by default is a once-a-day version check against npm (updateCheck: false turns it off). What your agent reads from the screen goes to whichever model your client uses.
• Kill switch. Close iPhone Mirroring to stop all input instantly.

See Security for the full threat model.

Documentation

Community

Join the Discord server to ask questions, share skills, and discuss ideas. Contributions are welcome: see CONTRIBUTING.md. By submitting a patch, you agree to the Contributor License Agreement; your Git commit metadata serves as your electronic signature.

Why "mirroir"? — It's the old French spelling of miroir (mirror). A nod to the author's roots, not a typo.