HYPE OR FACT? · CHECKED 4 NOVEMBER 2026
Can Phone Harness really let any AI agent use a real phone?
OUR VERDICT
Partly factOur original verdict: “Mostly yes. The code and the 14 phone-control tools are public and do what the README says, and the setup is just a URL plus a sign-in. But the open-source part is only a client for a paid cloud. "Real iPhones" is the company's own claim, and nobody has independently tested it yet. We haven't tested it hands-on.”
THE CLAIM
“Phone Harness says any MCP agent can get "a real iPhone or an Android emulator in the cloud" with "nothing to set up".”
What’s actually true
- The repo phone-harness/mcp is MIT-licensed Python with tests. It has 628 stars and 43 forks. It was created on 23 Oct 2026, last pushed on 2 Nov, and all 13 commits are by one developer (Shawn Pana).
- It has 14 tools: list, start and stop phones; screenshot; read on-screen text (the accessibility tree on Android, text recognition on iPhone); tap, long-press and swipe; type; buttons; list, launch and identify apps. There's no tool to open a URL.
- The SECURITY.md says the server is a thin HTTPS client: it holds no phone, runs no shell, and doesn't log screenshots. Everything goes through Phone Harness Cloud.
- Pricing (company's own figures): Android emulators cost 5¢ per minute; a cloud iPhone is $80/mo, or $100/mo with an eSIM.
- Security: OAuth grants the agent the phone:drive scope, which means full control of whatever is signed in on that phone. Text on screen can inject instructions into the agent. An eSIM phone can receive SMS 2FA codes the agent could read. Screenshots of personal data pass through both Phone Harness and your AI provider.
- Many apps' terms ban automated or bot access, so check before pointing an agent at banking, social or marketplace apps.
Sources
Cost
Free to start on Android, then 5¢ per phone-minute. A cloud iPhone is $80-100/mo (company's figures).
USE IT IF
Developers and small teams testing mobile apps, or building agents that need phone-only apps.
SKIP IT IF
Anyone wanting an agent on their personal phone with banking or 2FA, or teams that can't send screen data to a third-party cloud.
How we knowChecked on 4 November 2026. Verdicts: Fact = the claim holds up; Partly fact = real, but with caveats or overstated parts; Hype = the headline claim isn't supported. Products change quickly, so check the maker's site before you buy. Our methods & sources ↗