ERIUS PHONE
PYPI · ERIUS-PHONE-MCP
Drive a hosted ERIUS PHONE Android device: read the screen, tap, type, install APKs, get crash logs.
Available components
Last scanned (6 hours ago)
Scores higher than 58% of PyPI servers
Category Testing and QA
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security50
- Malware scan not yet available for this package.Unverified
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised build step with no custom scripting around it. View diagnostics → Pass
- 1 of 22 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 25 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability65
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 1745 tokens (~83/item across 21 items; 21 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
- Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
- Structured output schemas are declared (95% of tools); any adoption earns full credit.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "send_intent" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 −15
- Malware scan: pass → unverified ▼ security
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 +16
- Malware scan: unverified → pass ▲ security
- Security disclosure: unverified → fail ▼ functional
- 28 Oct 26 0
- Security disclosure: fail → unverified ▼ functional
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.
- 24 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed pypi/erius-phone-mcp@0.2.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 22 packages
| Packages resolved | 22 |
|---|---|
| Stale | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
foreground Foreground ~43
Get just the foreground app: package, activity, and whether a crash dialog is showing. Cheaper than a full snapshot when you only need this.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
get_crash_log Get Crash Log ~54
Read the device's crash log buffer (logcat -b crash) — use this after an app crashes during QA testing to see the real stack trace.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| lines | integer | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
get_device Get Device ~47
Get full status of one device: boot state, Android version, screen size, and the app currently in the foreground. Omit `device` to use the default.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
install_apk Install Apk ~104
Install an APK from a local file path on the machine running this MCP server (not on the phone) onto the device. Use this for APK QA testing — the real use case ERIUS PHONE is built for. Returns the parsed package info (name, version) and whether the install actually succeeded.
| Name | Type | Req | Description |
|---|---|---|---|
| allow_downgrade | boolean | – | – |
| apk_path | string | yes | – |
| device | – | – | – |
| grant_permissions | boolean | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
launch_app Launch App ~57
Launch an installed app by package name (e.g. com.android.chrome). Pass `activity` only if the app has no launcher activity resolvable automatically.
| Name | Type | Req | Description |
|---|---|---|---|
| activity | – | – | – |
| device | – | – | – |
| package | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
list_apps List Apps ~48
List installed apps on the device. Set third_party_only=True to skip pre-installed system apps and see only user-installed ones.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| third_party_only | boolean | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
list_devices List Devices ~40
List every Android device your API key can access, with live status (booted, Android version, screen size). Call this first to get device ids.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
long_press Long Press ~135
Long-press an element (e.g. to open a context menu or start a drag). Targets work like tap(): `ref`, `text`/`content_desc`, or raw `x`,`y` (with `image_width`/`image_height` when they come from a scaled screenshot). `ms` (hold time, default 800) only applies to the x,y form.
| Name | Type | Req | Description |
|---|---|---|---|
| content_desc | – | – | – |
| device | – | – | – |
| image_height | – | – | – |
| image_width | – | – | – |
| ms | – | – | – |
| ref | – | – | – |
| text | – | – | – |
| x | – | – | – |
| y | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
open_url Open Url ~59
Open a URL (http/https/market) on the device, optionally forcing it into a specific app package (e.g. open a link in Chrome specifically).
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| package | – | – | – |
| url | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
press_key Press Key ~63
Press a hardware/navigation key: back, home, enter, delete, tab, escape, up, down, left, right, space, power, volup, voldown, recent, menu, wakeup.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| key | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
screenshot Screenshot ~264
Take a screenshot of the device screen right now and return it as an image you can look at, plus one line of text with the image size and the device's real screen size. The default is a JPEG whose longest side is 1024 px (tens of KB). A full-size PNG of a 1440x3120 phone is about 3 MB, which is more than many MCP clients accept in a tool result, so ask for it only when you need it: format="png", max_side=None. `format` is "jpeg", "webp" or "png"; `quality` is 1-100 (jpeg/webp); `max_side` caps the longest side in pixels (64-8192); `scale` (0.1-1) shrinks by a factor instead. When the image is smaller than the screen, pass its size as image_width/image_height to tap(), long_press() or swipe() so x,y are read in the image's pixels. Prefer snapshot() when you only need text and refs: it's far smaller.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| format | string | – | – |
| max_side | – | – | – |
| quality | integer | – | – |
| scale | – | – | – |
No output schema declared.
No examples provided.
scroll Scroll ~91
Scroll a list/container up, down, left, or right. `ref` must be the ref of the scrollable container itself (a ScrollView or List line in the snapshot), not of a row inside it: scrolling a single row does nothing. If the container has no ref, use swipe() instead.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| direction | string | yes | – |
| ref | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
send_intent Send Intent ~109
Start an activity with an arbitrary Android intent (`am start -a ACTION`), e.g. action="android.settings.WIFI_SETTINGS" to jump straight to a settings page. `component` is "package/.Activity"; `extras` values become string, int or boolean extras by their type. Returns ok plus the new foreground app.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| component | – | – | – |
| data | – | – | – |
| device | – | – | – |
| extras | – | – | – |
| package | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
snapshot Snapshot ~92
Get an accessibility-tree snapshot of the current screen: every visible element with its text, role, and a `ref` id you can pass to tap/type/scroll. This is how the agent 'sees' the phone — read it before acting, and take a fresh one after any action since refs reset on every snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| max_depth | – | – | – |
| max_nodes | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
stop_app Stop App ~29
Force-stop a running app by package name.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| package | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
swipe Swipe ~98
Swipe from one point to another: in device pixel coordinates, or, with `image_width` and `image_height`, in the pixels of a screenshot of that size.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| image_height | – | – | – |
| image_width | – | – | – |
| ms | integer | – | – |
| x1 | integer | yes | – |
| x2 | integer | yes | – |
| y1 | integer | yes | – |
| y2 | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
tap Tap ~126
Tap an element. Prefer `ref` from a snapshot(), or `text`/`content_desc` to tap by visible label. Falls back to raw `x`,`y` pixel coordinates: in device pixels, or, with `image_width` and `image_height`, in the pixels of a screenshot of that size (the API maps the point to the screen).
| Name | Type | Req | Description |
|---|---|---|---|
| content_desc | – | – | – |
| device | – | – | – |
| image_height | – | – | – |
| image_width | – | – | – |
| ref | – | – | – |
| text | – | – | – |
| x | – | – | – |
| y | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
type_text Type Text ~152
Type text into a field. Optionally tap a `ref` or `text_target` label first to focus the field, `clear` the existing value, or press Enter after. Keystrokes sent while the field is still opening are lost, so if tapping the field opens a new screen (e.g. a search page), tap it first, wait for it with snapshot() or wait_for_text(), then type with no target. Check the result with snapshot(). Only printable ASCII is supported (adb limitation).
| Name | Type | Req | Description |
|---|---|---|---|
| clear | boolean | – | – |
| device | – | – | – |
| enter | boolean | – | – |
| ref | – | – | – |
| text | string | yes | – |
| text_target | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
uninstall_app Uninstall App ~28
Uninstall an app by package name.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| package | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
wait_for_text Wait For Text ~64
Wait until `text` appears somewhere on screen (e.g. after a slow screen transition), up to timeout_ms (max 120000). Returns the settled snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| device | – | – | – |
| text | string | yes | – |
| timeout_ms | integer | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
whoami Whoami ~42
Show which ERIUS PHONE account (tenant) and key id this server is using, and the device ids it can access. Handy to check the API key works.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the ERIUS PHONE MCP server?
ERIUS PHONE runs locally as a PyPI package, launched with uvx erius-phone-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · erius-phone-mcp
claude mcp add protremix-erius-phone-mcp -- uvx erius-phone-mcp
What is the ERIUS PHONE MCP server?
ERIUS PHONE is an MCP server listed in the public MCP registry as io.github.Protremix/erius-phone-mcp. Drive a hosted ERIUS PHONE Android device: read the screen, tap, type, install APKs, get crash logs. This page covers its PyPI package (erius-phone-mcp).
Is the ERIUS PHONE MCP server safe to use?
ERIUS PHONE scores 60 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ERIUS PHONE MCP server expose?
ERIUS PHONE exposes 21 tools: list_devices, whoami, get_device, snapshot, screenshot, and 16 more. Their descriptions and schemas cost roughly 1,745 tokens of context every time the server is loaded.
Is the ERIUS PHONE MCP server still maintained?
ERIUS PHONE is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the ERIUS PHONE MCP server under?
ERIUS PHONE declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.