apktool-mcp-server
An MCP server integrated with apktool that leverages Large Language Models like Claude for live reverse engineering, vulnerability detection, manifest parsing, and resource analysis in Android APK files.
Added on:
Created by:
Apr 26 2025
An MCP server integrated with apktool that leverages Large Language Models like Claude for live reverse engineering, vulnerability detection, manifest parsing, and resource analysis in Android APK files.
Added on:
Created by:
Apr 26 2025
Jafar Pathan
Featured
What is apktool-mcp-server?
The apktool-mcp-server is an automated MCP server designed for reverse engineering Android APKs. Built on top of apktool, it utilizes AI models such as Claude to provide real-time analysis, vulnerability detection, and resource parsing. The server supports decoding APKs, analyzing permissions, extracting resources, and modifying smali code through a set of functions. It facilitates dynamic inspection and reverse engineering workflows, making it easier for developers, security researchers, and reverse engineers to understand app structures, identify security issues, and perform code reviews efficiently using AI-powered insights.
Who will use apktool-mcp-server?
- Android reverse engineers
- Security researchers
- Mobile app developers
- Penetration testers
- AI developers working on reverse engineering tools
How to use the apktool-mcp-server?
- Step 1: Download the MCP server from the GitHub releases page.
- Step 2: Unzip the downloaded file and navigate to the directory.
- Step 3: Install dependencies using uv and pip as per instructions.
- Step 4: Decode an APK using the 'decode_apk()' function or CLI to extract resources and smali code.
- Step 5: Analyze manifest, permissions, and resources via provided functions.
- Step 6: Use AI features to review code, detect vulnerabilities, or modify code.
- Step 7: Rebuild or package the APK after modifications if needed.
- Step 8: Use MCP client or Claude desktop setup for interaction and analysis.
apktool-mcp-server's Core Features & Benefits
The Core Features
- decode_apk()
- get_manifest()
- list_smali_directories()
- list_smali_files()
- get_smali_file()
- modify_smali_file()
- list_resources()
- get_resource_file()
- modify_resource_file()
- analyze_permissions()
The Benefits
- Automates APK reverse engineering tasks
- Integrates AI models for real-time analysis and security assessment
- Supports resource parsing and modification
- Facilitates vulnerability detection and code review
- Simplifies reverse engineering workflows
apktool-mcp-server's Main Use Cases & Applications
- Reverse engineering Android applications for security analysis
- Automated vulnerability detection in mobile apps
- Modifying APK resources and code for testing
- Creating automated workflows for APK analysis
- AI-assisted code review and resource extraction
FAQs of apktool-mcp-server
Developer
You may also like:
Developer Tools
A desktop application for managing server and client interactions with comprehensive functionalities.
A Model Context Protocol server for Eagle that manages data exchange between Eagle app and data sources.
A chat-based client that integrates and uses various MCP tools directly within a chat environment for enhanced productivity.
A Docker image hosting multiple MCP servers accessible through a unified entry point with supergateway integration.
Provides access to YNAB account balances, transactions, and transaction creation through MCP protocol.
A fast, scalable MCP server for managing real-time multi-client Zerodha trading operations.
A remote SSH client facilitating secure, proxy-based access to MCP servers for remote tool utilization.
A Spring-based MCP server integrating AI capabilities for managing and processing Minecraft mod communication protocols.
A minimalistic MCP client with essential chat features, supporting multiple models and contextual interactions.
A secure MCP server enabling AI agents to interact with Authenticator App for 2FA codes and passwords.
Research And Data
A server implementation supporting Model Context Protocol, integrating CRIC's industrial AI capabilities.
Provides real-time traffic, air quality, weather, and bike-sharing data for Valencia city in a unified platform.
A React application demonstrating integration with Supabase via MCP tools and Tambo for UI component registration.
A MCP client integrating Brave Search API for web searches, utilizing MCP protocol for efficient communication.
A protocol server enabling seamless communication between Umbraco CMS and external applications.
NOL integrates LangChain and Open Router to create a multi-client MCP server using Next.js
Connects LLMs to Firebolt Data Warehouse for autonomous querying, data access, and insight generation.
A client framework for connecting AI agents to MCP servers, enabling tool discovery and integration.
Spring Link facilitates linking and managing multiple Spring Boot applications efficiently within a unified environment.
An open-source client to interact with multiple MCP servers, enabling seamless tool access for Claude.
Security
A Python-based MCP server enabling secure management and automation of OPNsense firewalls via API.
Enables interaction with SharePoint Online via REST API, supporting site, list, and user management functions.
A MCP server wrapper enabling full protocol utilization without tool limits or context overload.
A wrapper around MCP server to select which tools to expose to mcp clients, enhancing control and safety.
Securely run MCP servers without modifying configs by managing secrets safely through the launcher.
An advanced SSH client supporting MCP with security checks, session management, and confidential logging features.
Provides secure, relative filesystem access for AI agents with batch operations and detailed error reporting.
A client for connecting to MCP servers, enabling AI agents to discover and utilize tools via MCP protocol.
A server for sending notifications to self-hosted ntfy servers with secure token authentication support.
A client application for secure quantum-safe interactions with MCP environments using post-quantum cryptography.