Mobile Approval for Copilot, Codex & Claude
Approve or decline risky GitHub Copilot, Codex, and Claude Code actions from
your phone - a terminal command, a file edit, a delete - without walking back
to your desk. Answer on a VS Code notification or on the paired phone,
whichever you reach first.
What it does
- Approvals on your phone. When an agent wants to run a command, write or
delete a file, or read something outside your workspace, a card appears on
your paired phone with the exact command/diff/path - not a summary of it.
- Review real changes. Approved edits show a line-by-line diff (added,
removed, and the full file before/after), not just "it worked."
- Keep the agent going from your phone. Send a follow-up instruction into
the same chat after approving something, so "also add X" doesn't have to
wait until you're back at the keyboard.
- Works with Copilot, Codex, and Claude Code. The extension installs
Copilot's user-level approval hook automatically. Codex and Claude are
separate CLIs with their own hook systems - this extension checks whether
they're wired up and offers to fix them automatically (see
Mobile Approval: Check Codex/Claude Setup).
- Reaches your phone from anywhere. A direct address on your home Wi-Fi,
plus an optional secure tunnel (via
cloudflared) for when you've left the
house.
Getting started
- Run Mobile Approval: Start Relay & Pair Phone from the Command Palette.
- Scan the QR code with the Mobile Approval phone app.
- That's it for Copilot. If Codex or Claude Code are also installed, a
notification will appear if either needs its config wired up - click
Configure automatically.
Requirements
- A
python (or python3) on PATH. The cross-agent approval hooks are Python
scripts; setup reports clearly when no working interpreter is available.
cloudflared
if you want approvals to reach your phone away from your home network.
Without it, approvals still work on the same Wi-Fi.
The automatic setup uses a Cloudflare quick tunnel. Its random hostname can
change whenever the relay restarts; push notifications carry the replacement
address so the phone can recover. For a permanently stable remote address,
run the relay behind a named Cloudflare tunnel
with your own hostname, set mobileApproval.serverUrl to that HTTPS URL, and
use Mobile Approval: Pair Device (existing relay).
Privacy and permissions
This extension can, once you approve an action:
- Run shell commands, on your workspace or elsewhere on your machine.
- Create, edit, or delete files, on your workspace or elsewhere on your
machine.
- Read files outside your workspace, when an agent asks and you approve it.
- Run a small local network server (loopback-only, or bound to your LAN only
if you enable a direct Wi-Fi connection to your phone) so your paired phone
can reach it.
Every one of the above requires an explicit approval - yours, on the phone or
in VS Code - before it happens. Nothing here is silent or automatic. See the
mobileApproval.* settings for what's configurable, including whether this
computer stays awake while a phone is paired.
License
MIT
| |
