Ghosthand vs Glasshand: 3 Ways to Give Your AI Agent an iPhone

Quick answer

• Ghosthand turns your own Mac into a Bluetooth mouse and keyboard for your iPhone — free for one iPhone, $99 a month per Mac for unlimited iPhones.
• Glasshand rents you a hosted iPhone or Mac dedicated to your agent — $60 a month per iPhone, $90 a month per Mac, cancel anytime.
• esp32-iphone-agent is the open-source DIY route: a roughly $7 ESP32 board gives any vision model eyes and hands on a real iPhone, no Mac required.

Every AI agent is a mind without hands. It can write poetry, plan your week and draft your code — and then it hits a wall the moment a task lives inside an iPhone app. TikTok has no usable posting API. Bank apps do not take webhooks. App verification codes arrive in apps, not endpoints.

Agents have worked around this for years with hacks that mostly required a jailbroken phone, a Mac running Xcode, or both. In the last week, three products attacked the problem from three different directions, and their names are so close you might think they are one company. They are not. Ghosthand makes your Mac the agent's hands. Glasshand, built by Codapt Inc, rents you a phone that lives in someone else's data center. And esp32-iphone-agent, an MIT-licensed open-source project, does the whole trick with about $7 of hardware and no Mac at all.

All three are live products you can use today. Here is what each one does, what it really costs, and which fits your setup.

Why the iPhone is the hard case

On Android, an agent can drive a phone through ADB and accessibility services with minimal fuss. On iOS, Apple does not let one app control another, period. The traditional routes — WebDriverAgent and XCUITest — need a connected Mac, code signing and developer mode. So most agent builders simply ignored the iPhone, which is where the users are.

All three tools here exploit the same loophole: iOS already accepts certain accessories and system features as legitimate input. A Bluetooth mouse paired to an iPhone may tap things when AssistiveTouch is on; an AirPlay receiver may mirror the screen. No jailbreak, no developer account, no app on the phone. None of the three claims Apple's endorsement, and none has published independent testing, so treat every performance claim below as vendor-reported unless stated otherwise.

Ghosthand: bring your own hardware

Ghosthand, built by the Holocron team, takes the route of least magic: your agent runs on your Mac, and your Mac pretends to be a Bluetooth mouse and keyboard for your iPhone. Screenshots come back over USB in about 0.3 seconds; taps go out over Bluetooth. The phone needs no jailbreak, no Xcode, and no app installed — Ghosthand works through AssistiveTouch, the same accessibility feature a physical mouse uses. That means the agent can reach every iOS app: App Store apps, Settings, the lock screen, even the passcode pad (Ghosthand says it can unlock a locked iPhone with its passcode, no touch required).

For agent developers, the interface is three-fold: a CLI (npx ghosthand setup, then screenshot, tap, type, scroll), a remote MCP server that plugs into Claude, ChatGPT or Grok from a chat app, and an HTTP API described by OpenAPI for anything else. On-device OCR means the agent can say tap --text "Settings" instead of guessing pixel positions, and screenshots use a coordinate system sized for LLM vision. You can run several iPhones at once, with leases enforcing one agent per iPhone at a time.

The pricing, read from the official page

Ghosthand's pricing page is one of the clearest I have read this month. The plan is:

• Free — $0: one iPhone, with every core feature and no time limit. CLI, MCP server, HTTP API, screenshots, OCR, taps, typing, screen recording, remote MCP, the control plane app and phone tasks are all included.
• Pro — $99 per month per Mac: every iPhone plugged into a paid Mac works. A company with three Macs full of iPhones pays $297 a month. Prices are in USD, or the same amount in EUR. Billing runs on Stripe; a canceled plan stays active until the end of the paid month.

The fine print is refreshingly mechanical. Devices bind on their first lease, and Ghosthand only checks the plan when an agent takes a lease — running work is never cut off mid-task. On Free, the first iPhone your agents lease becomes your free iPhone; a second one fails with a subscription-required error naming your free device. On Pro, the subscription quantity is simply the number of paid Macs. If Ghosthand's servers are unreachable, an already-allowed iPhone keeps working — 7 days on Free, until 3 days after the paid period on Pro.

Two extras worth knowing: Pro subscribers get read-only access to the daemon's Swift source on GitHub (the rest is already open source), and the roadmap — event logging, a secrets manager for passcodes and app logins, hosted ready-made skills — ships to Pro first "with no price change for existing subscriptions."

The privacy story

Ghosthand's strongest claim is architectural: your screenshots, screen text and typed text never reach ghosthand.dev. The Mac sends only the plan check — a one-way hash of the iPhone and Mac IDs, never the IDs themselves. That matters because this tool will type your passcodes and read your messages. Verification caveat: I read this on their pricing page; I could not independently audit the daemon binary's network behavior. But the design is the right one, and it is stated plainly instead of buried.

The catch

You need a Mac — macOS 14 or later, Apple silicon or Intel — and a real iPhone. Windows, Linux and the iOS Simulator are not supported. The Bluetooth Classic private API is tested on macOS 26.3 only, per the docs. And "free for one iPhone" still assumes you already own a Mac and an iPhone; the $0 tier is generous, not magic.

Glasshand: rent the hardware instead

Glasshand starts from the opposite premise: what if you do not own a spare iPhone, or any iPhone at all? The company hosts real iPhones, Android phones and Mac minis in its own facility, each dedicated to one customer — not shared, factory-reset when you start, wiped clean when you release it. Your agent connects through MCP or the Glasshand API, sees the screen, and taps and types. The marketing line is literal: "Tell your agent to rent" — you paste a prompt into your agent's chat, and the device is provisioned.

The dedicated-device model solves the awkward questions hosted fleets usually fumble. You install your own apps and sign into your own accounts; the device keeps your setup between tasks until you release it. Phones can take an eSIM plan for a carrier connection, so your agent can receive SMS verification codes and, on an iPhone, use the number for iMessage — plus read WhatsApp verification codes that only appear on the account's primary phone. Mac minis come with Xcode, for agents that build and test native apps.

The pricing, read from the official page

Glasshand's pricing page is short:

• iPhone — $60 per month: a real iPhone, dedicated to you. eSIM plan is extra (your own carrier plan).
• Mac — $90 per month: a real Mac, dedicated to you.
• Month to month, cancel anytime; the device stays available until the end of your current billing period. Prices are in USD, plus applicable taxes. No hourly or daily rental — monthly only.

That makes Glasshand the cheapest published hosted-device option I have seen: a comparable hosted-iPhone service, AIO Phones, starts at $100 a month — aimed at humans in a browser, with agent and API access still in beta, while Glasshand is built for agents first.

The catch

You are signing into your Apple ID, your apps and your accounts on hardware you do not own. Glasshand's answer — dedicated device, you set the password, wiped and factory-reset on release — is the correct architecture, but it is still a trust decision: your agent's phone lives in Codapt Inc's facility. There is also no free tier and no trial visible on the pricing page, so the cheapest way to evaluate it is one $60 month. And month-to-month-only billing means a one-afternoon experiment costs the same as a 30-day project.

The $7 DIY route: esp32-iphone-agent

If Ghosthand is "bring your own hardware" and Glasshand is "rent the hardware," esp32-iphone-agent is "build the hardware from parts." Published by Henry Yuan on October 11, 2026, the project had about 4,133 stars and 551 forks when I checked on October 31 — up from roughly 2,785 stars in its first five days, which makes it one of the fastest-moving hardware-agent projects of the month. (Stars measure attention, not quality — but the commit history shows real maintenance, with pushes through October 28.)

The trick, as a detailed build write-up on Medium explains, is splitting the computer-use agent into three parts: eyes (the iPhone mirrors its screen over AirPlay to an ESP32-S3 board's own Wi-Fi hotspot), hands (the board presents itself to the iPhone as a plain USB mouse and keyboard — which iOS accepts without question), and brain (any OpenAI-compatible vision endpoint). No Mac, no developer account, no jailbreak, no computer turned on while the agent works.

The practical numbers: the XIAO ESP32-S3 board costs about $7. The brain can be anything — Yuan's demo used a Qwen3.8-Flash model served on two DGX Sparks, while the Medium author rebuilt it on one consumer GPU with Ollama and a 7B vision model. Your ongoing cost is whatever your vision model charges; the hardware is nearly free and the software is MIT-licensed.

The honest framing comes from the Medium piece itself: what you just built is "literally a Wi-Fi-controlled USB HID implant." It works because iOS trusts USB mice — which is also the security model. Anyone on the board's network with the firmware's credentials can drive your phone. And this is a maker project, not a product: you flash firmware, configure hotspots and debug yourself. If you want a polished version of the same idea, Handsy is building a $7-board product with an iPhone app and CLI — but as of October 31, the app is "coming soon" and the CLI is "in preparation," so it is not a shippable option yet.

The comparison: Ghosthand vs Glasshand vs the DIY route

Which one should you pick?

You own a Mac and an iPhone: Ghosthand

This is the obvious default. The free tier covers one iPhone with every feature and no expiry, setup is a guided npx ghosthand setup walkthrough rather than firmware flashing, and the privacy architecture — your phone's pixels never leave your Mac — is the strongest of the three. The $99-per-Mac Pro tier only matters when you graduate to multi-iPhone fleets: QA teams testing their own app across devices, or builders running parallel social accounts.

You own no spare hardware: Glasshand

A rented iPhone at $60 a month is cheaper than buying one, and it is the only option here that also covers Android and hosted Macs. It is purpose-built for the case the other two handle awkwardly: agents that need phone numbers — SMS codes, iMessage, WhatsApp verification — on a device that is not your personal phone. Go in with eyes open about signing into your accounts on rented hardware, and note the monthly-only billing: a one-afternoon experiment still costs $60.

You want the cheapest possible stack: the DIY route

About $7 in parts, MIT-licensed code, no Mac, and any vision model you like. The price is your time: this is a GitHub project with 16 open issues, not a product with support. But it is also the only option with no vendor in the loop at all — no account, no plan check, no hosted device. For tinkerers and for anyone whose threat model excludes third-party servers, that is a feature worth more than $60 a month.

The security catches, stated plainly

Giving an agent hands on a phone means giving it the keys to everything on that phone. Three things to think about before you lease, rent, or flash anything:

1. The agent can do anything you can do. Ghosthand supports unlocking a locked iPhone with its passcode and typing secrets through a pipe that keeps them out of command history. That is the point — but a prompt-injected or misbehaving agent on your phone is a device-compromise problem, not a chatbot problem. Use the leases and per-agent isolation the docs describe. If your workflow has the agent typing passwords, read our 1Password for Agents piece on keeping credentials out of agent context first.

2. Rented hardware is someone else's hardware. Glasshand's dedicated-device-plus-wipe architecture is the right answer, and "cancel anytime" limits your exposure window. But your Apple ID, your signed-in apps and your message history live on a device in Codapt Inc's facility for as long as you rent it. Do not rent one and sign into your bank.

3. The DIY board is an implant by design. The Medium build guide's phrasing is worth repeating: a Wi-Fi-controlled USB HID implant. The ESP32 board opens its own hotspot, receives AirPlay, and types as a trusted keyboard. Anyone who can reach that board can drive your phone. Keep it on an isolated network, change defaults, and do not leave it plugged into your daily driver unattended.

One more note: none of the three has published third-party security review, and all three are young — Ghosthand's docs are thorough, Glasshand's site is new, and the open-source project is three weeks old. Budget accordingly.

FAQ

Is it legal — does Apple allow an AI agent to control an iPhone?

None of the three requires a jailbreak, which is the line that would void warranties and break Apple's terms in the obvious way. They use interfaces iOS already accepts: Bluetooth mice via AssistiveTouch, USB HID accessories, AirPlay mirroring. None of the three claims Apple's blessing, and Apple has not commented on any of them. You are operating in a gray area that is currently tolerated, not an endorsed one.

Do I need my own iPhone and Mac for Ghosthand?

Yes. The CLI runs only on macOS (14 or later), and the iPhone must be connected over USB and paired over Bluetooth. Windows, Linux and the iOS Simulator are not supported. The free tier covers one iPhone on any Mac with no time limit.

Can my agent receive SMS verification codes?

On Glasshand, yes — add an eSIM plan to the rented phone and the agent can receive texts, use the number for iMessage, and read WhatsApp codes. On Ghosthand or the DIY route, the agent sees whatever your own iPhone shows, so a code arriving in Messages is readable — but it arrives on your phone number, on your device.

Which is cheapest for a solo builder?

If you already own a Mac and an iPhone, Ghosthand's free tier costs $0 — that is the cheapest shippable option. The DIY route costs about $7 in parts plus your time and whatever your vision model charges per run. Glasshand costs $60 a month per iPhone with no free tier, so it only wins when you lack the hardware.

Should I wait for Handsy instead?

Handsy is building the same $7-board idea as a polished product with an iPhone app and a CLI, but as of October 31, 2026 the app is "coming soon" and the CLI is "in preparation." If you want the DIY approach today, the open-source esp32-iphone-agent is the shippable version; if you want polish today, Ghosthand's free tier is.

Key takeaways

• Three live tools now give AI agents hands on a real iPhone: Ghosthand (your hardware), Glasshand (rented hardware) and the open-source esp32-iphone-agent (a $7 board).
• Ghosthand is free for one iPhone with no time limit, or $99 a month per Mac for unlimited iPhones — the best deal if you already own a Mac and an iPhone.
• Glasshand rents dedicated iPhones at $60 a month and Macs at $90 a month, month-to-month — the only option here with Android support and hosted phone numbers for SMS verification.
• The DIY route costs about $7 in parts under an MIT license with no Mac required, but it is a maker project: you flash it, secure it and debug it yourself.
• Every option hands the agent real device control, so treat it like device access: isolate agents, keep credentials out of agent context, and never sign a rented or shared device into your bank.

Agents spent 2026 learning to think. The last week of October is when they started growing hands — and the iPhone, of all things, turned out to be the place they grew them first.