iPhone voice client
Your voice becomes text on the phone. The agent runs wherever you decided it runs. Its answer comes back as speech — in the foreground, in your pocket, or on the lock screen.
single-user dogfood · not on the App Store · nothing to sign up for
Reading this origin…
What happens when you press call
You choose both ends. AgentCall never hands your speech to a recognizer you did not pick, and never sends a turn to an agent you did not enroll.
On the iPhone
Speech becomes text on the device. Apple's SpeechAnalyzer for English, Whisper Small for Russian and English, or T-one for Russian telephony. All three run locally, and none of them quietly falls back to a server.
Wherever your agent runs
The turn goes to the agent you enrolled — your own backend, a reference agent on a laptop, or a hosted realtime provider that executes its own remote tools. AgentCall speaks a published protocol, not one vendor's API.
Back on the iPhone
The reply arrives as audio through one duplex voice-processing graph, so the agent never hears itself. Calls keep running in the background and with the screen locked.
963 ms
From the last audible word to a stable final transcript, on an iPhone 12. The cloud batch recognizer this replaced measured 2.0 s at the median and 3.7 s at the 95th percentile, before counting endpointing.
Enrollment
There is no directory and no store. You enroll an agent by pasting the address of its Agent Card. The app fetches it without credentials, shows you what the agent declares — where it runs, who produces the voice, what authentication it wants — and enrolls nothing until you agree.
This origin serves the cards below. Each one is fetched live, so what you see on the left is what your phone would receive.
Access
An enrolled agent starts with access to nothing. This is the complete list of what one can be granted, separately, per agent. Each is read only when the agent asks for it mid-call — none of it rides along with your turns.
Face templates and photos never leave the phone. Provider keys live in the Keychain and are never written to a card or a log. Removing an agent deletes its stored credentials with it.
Authorization
When an agent needs a human to authorize something, the request arrives on your phone as a summary of exactly what will happen. A Secure Enclave key gated on Face ID — used for this and nothing else, never the key that talks to the agent — signs the grant. A denial or a timeout is returned unsigned, and a grant can be spent once.
Where this is
AgentCall is built against a protocol written in the open, tested on real hardware rather than a simulator, and used every day by the person who writes it. It is not a product you can buy yet, and this page will say so until that changes. What this origin does today is serve the cards above.