Can AI change my iPhone home screen? What an agent can and cannot do

In a Reddit thread on r/mcp about letting an AI agent arrange a home screen (181 comments in our snapshot), readers asked whether the agent pushes moves straight to the phone or stages a layout to approve first, what stops it from installing a malicious app disguised with a trusted app's icon, and how hard full control of an iPhone through MCP would be. The last one was asked in two separate comments.

Draft first, and only you press Apply

TidyGrid's MCP server gives the agent five tools: get_layout, get_icons, evaluate_layout, propose_layout and list_backups. Four of them only read. propose_layout replaces the draft shown in the TidyGrid window, and that change can be undone like any edit you make by hand.

There is no tool that writes to the device, and there is no tool that presses Apply. The agent cannot reach your iPhone through TidyGrid at all. When it is done, the most it can do is tell you the draft is ready.

You and the agent share the same draft and the same undo history. If you move an app while the agent is working, its next proposal replaces the draft, and your version is one undo away.

What the agent can and cannot touch

• It can move apps, folders and web shortcuts that are already on your home screen, make and rename folders, add or remove pages, and move apps between the home screen and the App Library, all in the draft.
• It cannot install apps or delete them. TidyGrid has no way to do either, for you or for the agent.
• It cannot change any icon, name or app. It places the icons iOS already shows.
• It cannot add widgets or change a widget's settings.
• It cannot open apps, read messages, change settings or do anything else on the phone. TidyGrid only reads and writes the home screen layout.

The look-alike app question

One worry from the thread was that an agent could install a harmful app and give it a trusted app's icon. Through TidyGrid it cannot: installing an app is not something TidyGrid does, and icons come from the apps themselves, so nothing can be renamed or re-skinned.

If you ever see an icon you do not recognise in the draft, it is already on your phone. TidyGrid's search finds it by name, and you can deal with it on the phone in Settings or the App Store.

If you apply and do not like the result

1. Open TidyGrid with the phone connected.
2. Open the list of backups. TidyGrid keeps the last 10 layouts for each device, one saved before every Apply.
3. Choose the one from before the change and restore it. Restoring is also a write, so it works on the same versions where applying is tested.

Who this works for

• Agents that support MCP, including Claude Code, Codex and Cursor, running on the same Mac as TidyGrid.
• Reading a layout is tested on iPadOS 15, iOS 16, iOS 17 and iOS 27.
• Applying and restoring are tested on iPadOS 15.3.1 and iOS 27.2. iOS 16, iOS 17, iOS 18 and iOS 26 are still in testing, and on those TidyGrid opens the layout read-only and says why.

What it cannot do

• There is no setting that lets the agent apply on its own. That is by design.
• TidyGrid cannot give an agent full control of the iPhone. It only works with the home screen layout.
• TidyGrid cannot check whether an app on your phone is safe. It only moves icons that are already there.
• What the agent reads, such as app names, is sent to the AI service it uses. TidyGrid stores your layout, app list and icons only on your Mac, but it cannot control what the agent's service does with what it reads.

Questions