Root My Android for AI agents

Root My Android is built to be driven by software, not just visited by people. A public REST API and aModel Context Protocol (MCP)server expose every customer-facing service β€” Mullvad-style accounts, Guardian Angel subscriptions, card & crypto checkout, vouchers, payment status, and human support β€” to any agent. No API key, no registration, no email or conventional signup identity required anywhere.

Why Root My Android is agent-friendly

  • Accounts without identity. Accounts are Mullvad-style 16-digit numbers β€” there is no email, password, phone, or KYC step anywhere in the flow. Those identity gates are exactly where agents usually get stuck; here they do not exist. An agent can create an account for its user and act on it with just the number β€” revocable, scoped sessions for AI features are on the roadmap.
  • Public by design. No API keys, no OAuth apps, no approval waitlists for the API itself β€” the exposed services are public, and an account number is the only credential where one is needed.
  • MCP-native. One well-known URL speaks the Model Context Protocol; any MCP-capable client (Claude, Cursor, or a custom agent) connects by adding the server to its config.
  • Money rails agents can actually use. The card rail returns a hosted invoice URL to hand to the user, and the crypto rail settles without a bank account β€” 15% off listed prices, enforced server-side.
  • Self-healing payments. Payment status is reconciled authoritatively on the server, so a missed webhook never strands a user's credit.

Connect your agent (MCP server)

The endpoint is POST https://rootmyandroid.com/mcp(a plain GET returns the human-readable catalog). Add the server to any MCP-capable client:

{
  "mcpServers": {
    "rootmyandroid": {
      "type": "http",
      "url": "https://rootmyandroid.com/mcp"
    }
  }
}

Or drive it by hand β€” every message is one POST with a JSON-RPC 2.0 body, and responses are single application/jsondocuments: no SSE streams, no session headers, no batching.

curl -sS https://rootmyandroid.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{
        "protocolVersion":"2025-06-18","capabilities":{},
        "clientInfo":{"name":"my-agent","version":"1.0.0"}}}'

Protocol facts: the server is rootmyandroid-mcpv0.1.0; protocol versions 2025-06-18, 2025-03-26, and 2024-11-05 are negotiated on initialize; the transport is stateless β€” no Mcp-Session-Id is issued; capabilities are tools only (no resources, no prompts). The/mcp pageitself is the always-current reference β€” its tools table is generated from the same catalog as tools/list.

What agents can do

14 tools at the time of writing (November 2026). This is a capability map β€” the exact, machine-generated reference lives at/mcp.

  • Accounts & entitlements:create_account, get_account,get_entitlements, and verify_feature β€” the gate every tier feature checks: is feature X unlocked for this account right now?
  • Plans & checkout:list_subscription_plans (flat prepaid Guardian Angel tiers with full-fiat and 15%-discounted crypto prices),create_card_checkout (hosted invoice URL),create_crypto_checkout (whitelabel deposit address, amount, and currency), and get_payment_status.
  • Vouchers: redeem_voucher β€” a single-use code that credits its days of Guardian Angel PRO to an account.
  • Human support:open_support_conversation(realtime = anonymous live chat;message = asynchronous, requires an email),send_support_message, andpoll_support_messages. Conversations opened via MCP share one 5/day quota, because all MCP calls originate from the same Worker.
  • Diagnostics & discovery:get_network_identity (your egress IP, user agent, ASN, TLS version, and geolocation echoed from Cloudflare edge metadata β€” nothing is stored) and get_api_index(every public REST endpoint).

The REST API behind it

Every MCP tool is a thin proxy of the public REST API atrootmyandroid.com/v1, which owns all validation and business logic. Device-facing endpoints (encrypted backups, Guardian Angel pairing, audit snapshots) remain REST-only for now β€” they need an on-device context an agent cannot fabricate.

What agents sell or manage: Guardian Angel monitoring for up to 5 devices per account β€” Lite at $5 / 30 days, Pro at $15 / 30 days; subscribers can switch between Lite and Pro anytime, and crypto payments save 15%. Full details on ourpricing page.

Live capability matrix

Labels: LIVE works today; PLANNED is in development and not part of anything purchasable;LABS is experimental. Nothing AI-facing is LIVE yet β€” every planned capability is labeled as such.

Agent-facing capabilities, their release status, where data goes, and who is in charge.
CapabilityStatusData destinationYour authority
Accounts, plans and entitlementsLIVERoot My Android APIAccount/session dependent
Checkout and payment statusLIVEExisting payment railsExplicit checkout review
MCP support conversationsLIVERoot My Android supportMessage review required
Local ADB device scanLIVEBrowser only, by defaultPhysical device and ADB authorization
AI scan explanationPLANNED (beta at launch)Named inference providerSeparate payload consent
Live read-only agent sessionPLANNED (beta at launch)Local device bridge plus approved evidenceYou can stop at any time
Hardware-backed agent identityLABS (when shipped)Attestation metadata onlyDevice eligibility required
Guardian activity summariesPLANNEDAggregated data by defaultPer-category opt-in
State-changing rooting operationsLABS / futureLocal operation brokerExact operation approval

Frequently asked questions

Does Root My Android have an MCP server?

Yes. The server speaks the Model Context Protocol β€” JSON-RPC 2.0 over the Streamable HTTP transport β€” at https://rootmyandroid.com/mcp. It is stateless, requires no API key, and its tools cover accounts, subscription plans, card and crypto checkout, vouchers, payment status, and human support.

Can an AI agent create an account without a human?

Yes. The create_account tool (or POST /v1/accounts on the REST API) creates a Mullvad-style 16-digit account with no email, no password, and no conventional signup identity. The account number itself is the credential, so an agent can onboard a user end-to-end and hand them just the number.

Can an agent take payments on behalf of a user?

Yes, on two rails. create_card_checkout returns a hosted invoice URL to hand to the user at the full fiat price; create_crypto_checkout returns a deposit address, amount, and currency with a 15% discount on listed prices. get_payment_status then reconciles the payment authoritatively, even if the webhook never arrives.

Do I need an API key or registration to call the API?

No. Both the MCP server and the REST API at rootmyandroid.com/v1 are public: no API key, no signup, no OAuth. Where an operation acts on an account, the account number is the credential.

Where is the full MCP tool reference?

At https://rootmyandroid.com/mcp. A GET request returns a human-readable page whose tools table is generated from the same catalog as the MCP tools/list method, so it always matches what the server actually exposes.

Android is a trademark of Google LLC. All other product names mentioned (including Claude and Cursor) are the property of their respective owners and are referenced here for identification and informational purposes only. Last updated: November 2026.