Agent Mobile Control — Communication skill for Claude Code

agent-mobile-control

A self-hosted, mobile-friendly web UI for driving your local coding agents like a chat app. Each chat room is one agent session, and opening a room resumes that conversation. Typical setup: run it on your desktop/workstation, reach it from your phone over [Tailscale](https://tailscale.com/) or another private VPN.

Supported engines:

Engine	Type	Status
Claude Code	local agent (reads/writes files, runs commands)	tested
Codex	local agent (reads/writes files, runs commands)	tested
Grok / Gemini / ChatGPT / DeepSeek / OpenRouter	chat only, via OpenAI-compatible API	wired up but never exercised — see Limitations

Rooms for Claude Code and Codex read the transcripts those tools already write on disk, so your phone and your desktop see the same conversation.

Security warning — read this before you run it

This tool can hand an AI agent full control of your computer. The defaults are deliberately locked down; **you** decide how far to open them.

**Defaults out of the box:** binds to `127.0.0.1` only (nothing else on your network can reach it), the agent runs in `plan` mode (read-only — it can look and talk, never change anything), and `GET /api/file` can only read the folder this app uploads into. In that state it is roughly as dangerous as a local text editor.

Everything below is about what happens when you loosen those.

1. Private network only, never the public internet. Setting bind_tailscale puts the server on your tailnet. That is fine for a VPN only you are on. Do not port-forward it, do not give it a public IP, do not run it on a cloud box with an open port, and do not put it behind Tailscale Funnel (Funnel publishes to the whole internet; plain tailscale serve stays inside your tailnet). Treat "someone can reach this port" as equivalent to "someone is sitting at your keyboard."