AI agents on mobile.
OpenClaw Releases iOS and Android Apps, Turning Smartphones into AI Agent Companions.
Key Points
Android companion app supports QR-code pairing, real-time Talk mode, action approvals, and device-aware automation, and connects to a running OpenClaw Gateway via WebSocket discovery or wss endpoints (including TailScale/public setups). Early reports note a rough start with mixed reviews on pairing and stability.
The iOS app is now available for free on the App Store and can be used alongside a local gateway to enable chat, voice approvals, sharing, and device-aware automation; it requires pairing with the gateway via QR code or a setup code and can access device features such as camera, screen, location, photos, contacts, calendar, and reminders.
Security and governance concerns persist around OpenClaw, including risks of prompt injection and the need for broad system permissions; observers note the importance of secure WebSocket connections and the scrutiny Apple applies to agentful tools during app review.
OpenClaw's governance has shifted to a foundation after founder Peter Steinberger left to join OpenAI; the project is open source and now supported by a foundation with some unspecified backing from OpenAI, signaling a move from a niche project to a broader platform.
OpenClaw launched official iOS and Android apps on June 29, 2026, bringing its AI agent system to the App Store and Google Play for the first time Engadget. The apps turn smartphones into companion nodes for the OpenClaw Gateway, a local hub that runs the AI agent while the phone handles voice, camera, location, and action approvals Let's Data Science.
The launch marks a major shift for OpenClaw, which now has over 200,000 GitHub stars and 2 million weekly visitors Kilo Blog. The project started in November 2025 as a hobbyist tool called Clawdbot and has grown into what some are calling the fastest-growing open-source project in history Pulse2.
How the Gateway and Mobile Node System Works
OpenClaw splits its work between two parts. The Gateway runs on a Mac, PC, or server and acts as the brain. The mobile app is the node — it connects to the gateway via a QR code or setup code and opens a secure WebSocket channel Let's Data Science. From there, users can chat, approve actions, or talk to their agent hands-free using Talk mode.
The apps can access a wide range of phone features: camera, screen, location, photos, contacts, calendar, and reminders MacRumors. A key safety feature called Action Approvals sends a push notification to the phone before the agent does anything sensitive, like sending an email or deleting a file. Users must tap to confirm before the agent acts.
Android App Stumbles Out of the Gate with 2.2 Stars
The Android app launched with a companion-node model that supports QR-code pairing, real-time Talk mode, and device-aware automation Let's Data Science. But early user reviews were harsh. The app hovered at just 2.2 stars on the Play Store, with complaints about pairing failures and stability problems. Some reviews noted the app's layout overlaps with the status bar.
The iOS version fared better in early impressions. It is free on the App Store and was described as more polished than its Android counterpart TechMyMoney. Getting Apple's approval was itself a challenge — the company applies heavy scrutiny to apps with broad device permissions and agentic features, meaning tools that act on a user's behalf without constant input Engadget.
Security Researchers Warn of Exposed Gateways and Prompt Injection
Security experts raised alarms shortly after launch. Researchers found over 30,000 OpenClaw gateway instances exposed to the open internet without proper authentication Eye Security. CrowdStrike red teamers called a misconfigured OpenClaw setup an "AI backdoor," noting that agents often run with high-level access to files and the terminal CrowdStrike.
Prompt injection is another major risk. An attacker could embed a hidden instruction in an email or webpage. When the agent reads it, the instruction could trigger actions like booking flights or exfiltrating data — all without the user knowing Zenity. The broad phone permissions the app requires make this worse. A compromised node gives an attacker access to photos, location history, and contacts.
OpenAI Connection and the Foundation Governance Debate
OpenClaw founder Peter Steinberger announced in February 2026 that he was joining OpenAI to lead its next generation of personal agents. At the same time, he handed the project to the newly formed OpenClaw Foundation, co-led by Dave Morin, former founder of Path OpenClaw Foundation Wiki. OpenAI CEO Sam Altman pledged unspecified support for the Foundation.
Not everyone sees the Foundation as truly independent. Critics on Reddit dubbed the project "ClosedClaw," arguing that with Steinberger at OpenAI and OpenAI as the primary backer, the open-source project is effectively a pipeline for OpenAI's commercial agent products Kilo Blog. Supporters counter that the Foundation structure gives the community real control and that OpenAI's resources provide the scale the project needs to compete.
Sentiment
Mostly PositivePublishers
10
Articles
4
Reach
14
