Skip to content

Published

Connect an AI client (MCP) ​

AI clients such as Claude Code, Codex or any other MCP client (an AI app that can use outside tools through the Model Context Protocol) can use your phones through BenchFleet. They get the Hub's tools, never the phones themselves, and the Hub checks every call. AI clients are part of the Pro and Team plans; the client's AI usage is paid to its own provider.

Connect a client ​

  1. In BenchFleet, open Settings → AI clients and choose Connect an AI client….
  2. Name it, for example "Claude Code on this PC", and choose where it may work (every phone, a group or one phone) and its access level:
    • Look only: see the phones, their screens and their apps.
    • Look and operate: also tap, type, open and stop apps, read logs, run published workflows and pause a phone.
    • Choose capabilities: pick them one by one.
  3. Copy what BenchFleet prints for your client: a line to run once for Claude Code, a block for Codex's ~/.codex/config.toml, a JSON entry for other MCP clients, or an address with a token for clients that connect over HTTP (that address changes when the app restarts). The token sits in a file of its own, never in the client's settings.
  4. Start the client and ask it to list the phones: it sees only the phones and tools you allowed.

Setup… next to a client shows its lines again; Disconnect revokes it at once.

What a client can and cannot do ​

The tools read the screen and its interface, tap, type, open and stop apps, read logs and run the workflows you published. There is no shell, no file transfer, no installing or removing apps, no clipboard and no reboot.

  • A phone in Manual mode, or one someone is controlling, can be looked at but not operated. So can a paused phone.
  • Approvals: typing a saved password, payments, account-security changes and requests that reach more than ten phones at once wait for a person (Approvals page). The AI never sees a saved password.
  • Human-only checks: at a CAPTCHA, a sign-in check or another step meant for people, the Hub blocks the action and holds that app until a person deals with it.
  • Limits: each client has a number of tool calls per minute.
  • Audit: every call is in the audit log under the client's name, with the phone and the result. Typed text is recorded only as its length, and a saved password only by its name.

More about the tools and the safety layer: Android MCP server.