DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to connect MCP servers to a ReAct agent on your phone with Pocket Strike

Add a Model Context Protocol server and let the agent use its tools with confirmation gates.

Authorization notice. Pocket Strike is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Credentials. MCP servers such as GitHub may need API keys, so only add keys for services you trust and rotate them if the phone is lost.

Who it is forA researcher or power user who wants an agent on their phone to search the web or query a service through MCP tools.

The problemPhone agents are limited unless they can reach outside tools. You want to add those tools while keeping control over destructive actions.

The outcomeAn agent that calls an MCP tool step by step, with reasoning logs and a confirmation prompt before any irreversible file action.

What you need first

  • Flutter SDK >= 3.29.0 and Dart SDK >= 3.12.0
  • Android SDK and NDK with compileSdk 37 and minSdk 26
  • A physical Android device connected over USB/ADB, or an emulator
  • Enough free phone storage and RAM for the GGUF model you choose, as listed in the model table

Steps

  1. Install Pocket Strike and open Settings, then the MCP area.
  2. Open the MCP marketplace and add a built-in server such as Brave Search or GitHub, using Streamable HTTP or SSE transport.
  3. Store any required API key in the app. Keys are kept in hardware-backed platform storage through flutter_secure_storage.
  4. Set the confirmation policy to Always Ask under Security settings for the first runs.
  5. Start an agent task and review each step in the reasoning log before approving file changes.

Prompt for your agent

In the PocketStrike repo, add the Brave Search MCP server from the marketplace and ask the ReAct agent to find three recent sources on <topic>. Expected output: a list of sources with the agent steps shown in the log. Verify that each tool call appears in the log before the final answer is given.

Caveat. The README does not list the exact confirmation policy names in settings beyond Destructive Only, Always Ask, and Autonomous, so check the app screens before relying on a specific label.

Share: X LinkedIn Hacker News Email Copy link

Disclaimer

Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page