DroidBridge

<p align="center"> <img src=".github/assets/icon.png" alt="DroidBridge icon" width="120"> </p> <h1 align="center">DroidBridge</h1> <p align="center"> <b>An on-device MCP server for Android.</b><br> Connect ChatGPT through OpenAI's official secure tunnel, let AI agents operate your phone,<br> and run scheduled automations on the phone itself — no PC, no ADB. </p> <p align="center"> <a href="LICENSE"><img alt="License: Apache-2.0" src="https://img.shields.io/badge/license-Apache--2.0-blue"></a> <img alt="Android 13–17" src="https://img.shields.io/badge/Android-13%E2%80%9317-3DDC84"> <img alt="arm64-v8a, x86_64" src="https://img.shields.io/badge/ABI-arm64--v8a%20%7C%20x86__64-lightgrey"> <img alt="MCP 2026-07-28" src="https://img.shields.io/badge/MCP-2026--07--28-8A2BE2"> <a href="https://github.com/zephyr7030/DroidBridge/releases/latest"><img alt="Latest release" src="https://img.shields.io/github/v/release/zephyr7030/DroidBridge"></a> <a href="https://github.com/zephyr7030/DroidBridge/releases"><img alt="Downloads" src="https://img.shields.io/github/downloads/zephyr7030/DroidBridge/total?label=downloads"></a> <a href="https://t.me/anDroidBridge"><img alt="Telegram group" src="https://img.shields.io/badge/Telegram-group-26A5E4?logo=telegram&logoColor=white"></a> <a href="https://ko-fi.com/zephyr7030"><img alt="Support on Ko-fi" src="https://img.shields.io/badge/Ko--fi-support-FF5E5B?logo=kofi&logoColor=white"></a> </p> <p align="center"> <b>English</b> · <a href="README.zh-CN.md">简体中文</a> </p> <p align="center"> <img src=".github/assets/poster-en.png" alt="DroidBridge: AI that actually uses your phone" width="800"> </p>

Why DroidBridge

• Official ChatGPT tunnel. The phone polls OpenAI's Secure MCP Tunnel over HTTPS: no open port, no public address and no relay of ours in between.
• Runs on the phone. The MCP server and everything it drives live on the device. A computer and ADB are only needed if you want an agent on a computer.
• Automation that outlives the conversation. Ask once; the phone keeps doing it on a schedule or on events. The root edition does it from a backend that starts at boot, with no app involved.
• Exactly the access you grant. No extra remote permission layer, no telemetry, open source (Apache-2.0).

How agents connect

Two ways to connect, side by side:

| Connection | For | How it reaches the phone | |---|---|---| | ChatGPT | ChatGPT on the web (developer mode) | OpenAI's Secure MCP Tunnel. The phone polls OpenAI over HTTPS; no port is opened and no public address is needed. | | Local MCP | Agents on the same device, or on a computer over adb forward | Streamable HTTP on 127.0.0.1:8765/mcp (root edition: port 8766) with a bearer token. |

What an agent can do

| Tool | What it covers | |---|---| | context | DroidBridge status, capabilities and the tool catalog | | visual | Observe the screen (image and UI hierarchy), tap, long-press, swipe, type text, press keys and key combinations; hold typed input to the app that was observed, and take exclusive use of screen input with a lease | | android | Inspect packages, launch apps and intents, clipboard, notifications | | filesystem | Inspect, read, write, edit, move, delete, archive (ZIP) and download files | | command | Run shell commands as the app or shell (Shizuku) identity, or as root in the root edition | | network | Diagnose DNS, TCP and TLS; capture and inject traffic (root edition) | | automation | Create, update, enable, delete and run automations (see below) | | task_control | List, inspect and cancel background tasks |

Every tool carries MCP safety annotations (readOnlyHint, destructiveHint, openWorldHint), so clients such as ChatGPT ask you to confirm actions that change things.

Automation that keeps running without the AI

Ask an agent once and the phone keeps doing it. Automations are saved on the device and run without the agent, a computer or an open conversation.

| | What you can build | |---|---| | Triggers | a point in time · every N minutes (1 minute to 30 days) · calendar rules (RRULE, with a time zone) · events (runtime.ready, network.default_changed) | | Steps | call a tool action (visual interact or element, android launch and clipboard, filesystem manage and download, command run, network diagnose) · sequence · if/else on saved state, trigger data or the previous result · repeat · delay · set state · choose per step whether a failure stops the run | | Element step | finds a control by text, description or resource id when the run happens, then taps, long-presses or types, so a saved automation never holds a stale reference | | Runs | up to one hour each; state is kept between runs; every run is a Task you can list, inspect and cancel | | Root edition | the backend starts at boot with no app, arms a wake-up alarm timer for due runs, and can run steps as root (shell commands) |

An agent saves one with automation → save:

{
  "name": "Morning check",
  "enabled": true,
  "trigger": {
    "type": "rrule",
    "rrule": "DTSTART:20261014T080000\nRRULE:FREQ=DAILY",
    "timezone": "Asia/Shanghai"
  },
  "action": {
    "type": "sequence",
    "children": [
      {"type": "call", "tool": "android", "action": "launch",
       "args": {"operation": "package", "package_name": "com.android.settings"}},
      {"type": "delay", "duration_ms": 3000},
      {"type": "call", "tool": "visual", "action": "element",
       "args": {"operation": "tap", "by": "text", "value": "Network & internet"}}
    ]
  }
}

Choose your edition

DroidBridge comes in two editions:

• DroidBridge is an app that runs everything itself. It works on an ordinary phone and gains the shell identity when Shizuku is running.
• The root edition is a root module. Its backend runs as root on its own, starts at boot and keeps running whatever happens to any app. It installs the DroidBridge Root app, which shows the backend's state and settings but runs nothing itself.

Both editions can run on one phone: DroidBridge serves local MCP on port 8765 and the root edition on port 8766.

| | DroidBridge | DroidBridge + Shizuku | Root edition (Magisk / KernelSU / APatch) | |---|---|---|---| | Screen observe / tap / type | Accessibility service | Observe/tap; typing uses Accessibility | ✓ | | Screen capture | Screen-capture consent | ✓ | ✓ | | Notifications | Notification access | Notification access | ✓ | | Shell commands | App identity | App and shell identity | Root identity | | Network capture / injection | — | — | ✓ | | Stays alive in the background | Battery and autostart settings | Kept alive until the next reboot | Runs on its own, restored after reboot |

In DroidBridge, the Execution & access page walks you through each switch with a button that opens the right system page, and tells you when something is already covered by Shizuku.

Requirements

• Android 13 to 17 on an arm64-v8a device. The DroidBridge app also ships x86_64 libraries, so it runs on x86_64 emulators; the root edition is arm64-v8a only.
• For ChatGPT: a plan with web developer mode (Plus or higher), a Secure MCP Tunnel and a Runtime API key from the OpenAI platform.
• Optional: Shizuku, Magisk, KernelSU or APatch for the root edition.

Install

DroidBridge

1. Download droidbridge-<version>-arm64-v8a.apk from the latest release (tag apk-v<version>) and install it.
2. Open DroidBridge. The first-run guide asks which agent you use and walks through permissions.

The release ships a SHA256SUMS.txt and a signed release.json; the app's Updates page uses the signature to verify its own updates.

Root edition

1. Download droidbridge-magisk-<version>.zip from the newest magisk-v release.
2. Install it in Magisk, KernelSU or APatch. Installing it also installs the DroidBridge Root app.
3. Reboot, then open DroidBridge Root.

Module updates are offered by your root manager.

Connect ChatGPT

1. On platform.openai.com create a Secure MCP Tunnel, and an API key allowed to use it.
2. In DroidBridge open Agent connection → ChatGPT connection, paste the Tunnel ID and the key, and turn the tunnel on. The key is never shown again: DroidBridge encrypts it with the Android Keystore, and the root edition keeps it readable by root only.
3. On a computer browser, turn on Developer mode in ChatGPT security settings (it is still rolling out to Plus accounts). Then on ChatGPT plugins tap Add → Create MCP app, connect it through your tunnel with Authentication set to None. The app page has links to both.
4. Ask ChatGPT to use DroidBridge. The first call shows up in the app.

Connect a local agent

1. In the app open Agent connection → Local MCP, turn it on and copy the token.

2. Point your MCP client at http://127.0.0.1:8765/mcp (root edition: 8766) with Authorization: Bearer <token>. From a computer, forward the port first:

   adb forward tcp:8765 tcp:8765
   

Screenshots

| Home | Execution & access | Agent connection | Settings | |---|---|---|---| | <img src=".github/assets/screenshots/en/home.png" width="200"> | <img src=".github/assets/screenshots/en/capabilities.png" width="200"> | <img src=".github/assets/screenshots/en/agents.png" width="200"> | <img src=".github/assets/screenshots/en/settings.png" width="200"> |

Security and privacy

• Everything runs on the phone. DroidBridge has no server of its own and sends no telemetry.
• An agent gets exactly the access you granted on the device; there is no extra remote permission layer to misconfigure. Only connect agents you trust with that access.
• The ChatGPT tunnel speaks only to api.openai.com over TLS with a pinned WebPKI root store.
• The local MCP endpoint listens on loopback only and requires its bearer token.
• Text that the system input command cannot type (for example Chinese or emoji) is pasted through the clipboard: the clip is marked sensitive and your previous clipboard is restored.

Please report vulnerabilities privately as described in SECURITY.md.

Build from source

Building needs the pinned toolchain (JDK 17, Android SDK 37, NDK 29, Rust 1.98) and is currently scripted for Windows with PowerShell 7:

./gradlew :standalone:assembleDebug :root-frontend:assembleDebugMagiskModule

The exact versions, the libpcap step and the toolchain check are in CONTRIBUTING.md.

Community

Questions, device reports and release news: join the Telegram group. Bugs are best filed as GitHub issues.

Support the project

DroidBridge is built and maintained in spare time. If it is useful to you, you can support it on Ko-fi. Bug reports and device reports help just as much.

License

DroidBridge is licensed under the Apache License 2.0. Third-party components and their licenses are listed in THIRD_PARTY_NOTICES.txt.

DroidBridge is an independent project and is not affiliated with or endorsed by OpenAI, Anthropic, Google, Magisk or Shizuku. Product names are trademarks of their respective owners.