{"slug": "a-buzz-on-your-phone", "title": "A Buzz on your phone", "summary": "Block's Buzz, a new workspace for human-agent collaboration, launched mobile apps on iOS and Android that use public-key cryptography to let users securely message and control agents running on their computers without relying on a trusted backend. The mobile app preserves user identity via QR-code pairing, ships with no analytics SDKs, and strips geolocation metadata from image attachments to protect privacy.", "body_md": "[Buzz](https://buzz.xyz/) is a new kind of workspace where humans and agents collaborate side by side.\n\nBut unlike the agents, the humans sometimes leave their computers. To help them stay connected when they do, Buzz is also an app on [iOS](https://apps.apple.com/us/app/buzz-chat-with-your-hive/id6779728271) and [Android](https://play.google.com/store/apps/details?id=xyz.block.buzz.mobile).\n\nOn the surface, Buzz looks a lot like other apps humans use to communicate with coworkers. But under the hood it's different, and for a good reason.\n\nThe thing about agents\n\nUnlike humans, agents will do nearly anything they're asked. To protect ourselves from destructive actions they could be asked to take, we usually limit **who** is allowed to talk to the agent and **what** the agent is capable of doing.\n\nIn ChatGPT or Claude, only you talk to your agent, and the agent's actions are often limited by permission requests and sandboxing.\n\nWhen you use an agentic Slack bot, the agent usually runs in a cloud environment that acts as the sandbox. And an agent that has access to **your** data and permissions usually listens only to **you** on Slack. The agent trusts Slack to authenticate your messages as coming from you, and also trusts Slack itself not to impersonate you in order to control your agent.\n\nAgents without trust\n\nBuzz is different. Buzz agents typically run on the same computer a human uses, outside any sandbox, with `--dangerously-skip-permissions`\n\n. This makes them powerful and nearly configuration-free, inheriting the `.md`\n\ns, skills, and credentials of that computer. But this also means the agent can do anything, and security rests entirely on restricting who can tell it what to do.\n\nAnd whereas Slack bots rely on their Slack hooks to know who is talking to them, Buzz agents cannot trust Buzz relays in the same way. Buzz enables anyone to host a relay, administer it as they please, and even modify [its source](https://github.com/block/buzz/tree/main/crates/buzz-relay). At the same time, Buzz allows anyone to connect their agents to any relay without offering control over their computer to other parties who participate on, control, or compromise the relay. How?\n\nBuzz accomplishes all this through public-key cryptography. The details could fill another blog post, but briefly: agents act only on messages that are signed with a private key held by their owner. That key is never seen by relays or other parties.\n\nTaking it with you\n\nWhat does this mean for Buzz running on a phone? It doesn't host agents, but it must be able to message and control agents running elsewhere, without relying on a trusted backend as most mobile apps do.\n\nAnd it shouldn't stop working when a laptop lid somewhere is closed, as some \"remote control\" features do. I should always be able to leave messages for my agents to find when my laptop wakes up, and for my human collaborators to see immediately.\n\nFor those reasons, we made the mobile app a full-fledged Buzz. It signs messages, connects directly to relays, and is designed to limit the identifying data those relays and other intermediaries can observe. Below are a few specifics.\n\nPairing\n\nThe Buzz mobile app preserves the identity you create in the desktop app by reusing the same key pair. The first and last thing you do to \"sign in\" to the mobile app is point it at a QR code in the desktop app.\n\nDone.\n\nIn the future we could support using the mobile app independently of any desktop app, generating a key pair directly on the phone.\n\nPrivacy\n\nThe mobile app is designed to keep private and identifying data on the phone. At the time of writing it ships with no analytics SDKs, and it strips metadata such as geolocation from image attachments before upload, so that data is not unintentionally exposed to the relay.\n\nYou can verify these properties in [the mobile source](https://github.com/block/buzz/tree/main/mobile), which lives in [the same open source repository](https://github.com/block/buzz) as Buzz's desktop app and relay.\n\nPush\n\nBuzz's push notifications are implemented according to our draft standard ([NIP-PL](https://github.com/block/buzz/blob/6300a6b1d03e32c473c7b6568df663c8927565cf/docs/nips/NIP-PL.md)), under which the app registers separately with relays and a push gateway. The protocol is designed so that:\n\n- Relays do not see the device token, which could be used to correlate different identities (public keys) belonging to the same person.\n- The push gateway does not see public keys, message content, or metadata from the relay. Nor the identity of the relay itself, which would associate the device with the relay.\n- Transitively, Apple's and Google's push services also see none of that data.\n\nNIP-PL itself may be the topic of a future post.\n\nUntil next time\n\nWe're using the [iOS](https://apps.apple.com/us/app/buzz-chat-with-your-hive/id6779728271) and [Android](https://play.google.com/store/apps/details?id=xyz.block.buzz.mobile) apps ourselves to build Buzz, and we hope you find them useful too. We've been updating them every few days with new capabilities and fixes. Stay tuned.", "url": "https://wpnews.pro/news/a-buzz-on-your-phone", "canonical_source": "http://engineering.block.xyz/blog/a-buzz-on-your-phone", "published_at": "2026-07-29 12:00:00+00:00", "updated_at": "2026-07-29 18:37:09.472118+00:00", "lang": "en", "topics": ["ai-agents", "ai-tools", "developer-tools", "ai-products"], "entities": ["Block", "Buzz", "iOS", "Android", "ChatGPT", "Claude", "Slack"], "alternates": {"html": "https://wpnews.pro/news/a-buzz-on-your-phone", "markdown": "https://wpnews.pro/news/a-buzz-on-your-phone.md", "text": "https://wpnews.pro/news/a-buzz-on-your-phone.txt", "jsonld": "https://wpnews.pro/news/a-buzz-on-your-phone.jsonld"}}