iPhone simulation
Three alerts, answered from the phone
What happened
- Answer on the MacWhen you need to read a long diff or type in the terminal without rushing.
- Answer on the iPhoneWhen the question is a decision: yes, option 2, do not push, here is the screenshot.
Pair the phone once
On the Mac, Settings → Remote turns access on and shows a code. The iPhone scans it. The one-time code expires after ten minutes and is exchanged for a per-device token, stored as a hash. A new phone does not walk in: it stays pending until you approve it on the Mac.
The token lasts 90 days. You can remove a device from the account. On Android there is no store app: you open the page, install it on the home screen, and use the same Inbox.
Three network paths
At home, the iPhone talks to the Mac over the local network. Away from home, it can use a direct UDP link or doki’s public HTTPS link. You do not pick a tunnel by hand each time.
On the local network, traffic to the Mac goes over unencrypted HTTP. Leave remote access off on a shared network, such as an office or a café, until local TLS exists. The public link and the bridge between machines are a different channel.
What you can do from the phone
See the list and the detail, pick 1, 2, or 3, type, dictate, attach photos, files, and voice notes, and change the thread’s model. Notifications carry an inline reply and, when Guard steps in, buttons to allow or refuse.
That is enough for “use the three plans” or “do not touch .env”. It is not enough for an architecture review. For that you go back to the Mac, where the diff and the terminal also are. On the Mac, O opens the agent’s session.
Approve a command without sitting down
If Claude wants a force push, sudo, or to read a secret, Guard can hold it and explain the risk on the notification. You approve or refuse from the phone. The rules and the per-project exceptions are edited on the Mac.
Autopilot does not use the phone for what is dangerous: reversible things can continue, and anything that deletes, spends, deploys, or touches credentials escalates to you. More in permissions.
What does not travel to the phone
Transcripts stay on the Mac, or on the server where the agent runs. The phone asks for status and sends the reply. The cloud account stores the license and the push token, not the repository.
If the agent is on a Mac mini rather than the laptop, the iPhone still sees it, because the Inbox already collected that machine. The SSH path is in remote agents.
Frequently asked questions
Do I have to open a port on the router?
Not for normal use. The local network, the direct link, and the server link cover the phone. The bridge to other machines does not ask for an inbound port either.
Can I use only the iPhone, with no Mac?
No. The Mac is the hub: it discovers the agents and delivers the replies. The iPhone is the remote. Without a Mac holding the sessions, there is no Inbox to show.
Does Android work?
Yes, from the browser, installable on the home screen. It has the same Inbox: reply, options, files, voice notes, and model.
Does the alert include the diff?
It includes the question, the options, or the approval. A long diff is read on the Mac. The phone is for the decision, not a replacement for the editor.
