Is Apktool Mcp Server safe to use?

Apktool Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Apktool Mcp Server?

Apktool Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Apktool Mcp Server do?

Apktool Mcp Server provides 13 tools: build_apk, get_manifest, get_apktool_yml, list_smali_directories, list_smali_files and 8 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Apktool Mcp Server?

Apktool Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Apktool Mcp Server actively maintained?

Apktool Mcp Server is recently maintained — last commit was 65 days ago. It has 514 GitHub stars.

Apktool Mcp Server

Name: Apktool Mcp Server
Author: zinja-coder

httpx · by zinja-coder

A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)

514 13 tools GitHub PyPI

No known CVEs

Apache-2.0 license

Maintained

Last commit 65d ago

Works with most clients

Transport: stdio, sse, http

13 tools · ~603 tok

Grade B · 0.3% of 200K ctx

Edit this pageView history

Security Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "apktool-mcp-server": {
      "args": [
        "--directory",
        "</PATH/TO/>apktool-mcp-server/",
        "run",
        "apktool_mcp_server.py"
      ],
      "command": "/<path>/<to>/uv"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/apktool-mcp-server)](https://mcppedia.org/s/apktool-mcp-server)

Read me

What Apktool Mcp Server does

⚡ Fully automated MCP server built on top of apktool to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, parse manifests, and reverse engineer effortlessly.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'httpx' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2021-41945info · fixed

PYSEC-2022-183

Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

Affected: >= 0Fixed in 0.20.0source →

Inventory

Tools (13)

Click any tool to inspect its schema.

~603 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Apktool Mcp Server safe to use?: Apktool Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Apktool Mcp Server?: Apktool Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Apktool Mcp Server do?: Apktool Mcp Server provides 13 tools: build_apk, get_manifest, get_apktool_yml, list_smali_directories, list_smali_files and 8 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Apktool Mcp Server?: Apktool Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Apktool Mcp Server actively maintained?: Apktool Mcp Server is recently maintained — last commit was 65 days ago. It has 514 GitHub stars.

Similar servers

Others in security / developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

58.3k 2

Jscpd97

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1

MCP Security Weekly

Get CVE alerts and security updates for Apktool Mcp Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "apktool-mcp-server": {
      "args": [
        "--directory",
        "</PATH/TO/>apktool-mcp-server/",
        "run",
        "apktool_mcp_server.py"
      ],
      "command": "/<path>/<to>/uv"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/apktool-mcp-server)](https://mcppedia.org/s/apktool-mcp-server)

Read me

What Apktool Mcp Server does

⚡ Fully automated MCP server built on top of apktool to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, parse manifests, and reverse engineer effortlessly.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'httpx' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

apktool-mcp-server (Part of Zin's Reverse Engineering MCP Suite)

⚡ Fully automated MCP server built on top of apktool to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, parse manifests, and reverse engineer effortlessly.

Image generated using AI tools.

🤖 What is apktool-mcp-server?

apktool-mcp-server is a MCP server for the Apk Tool that integrates directly with Model Context Protocol (MCP) to provide live reverse engineering support with LLMs like Claude.

Think: "Decompile → Context-Aware Code Review → AI Recommendations" — all in real time.

Watch the demo!

https://github.com/user-attachments/assets/d50251b8-6b1c-4341-b18e-ae54eb24a847

Solving the CTFs

https://github.com/user-attachments/assets/c783a604-a636-4e70-9fa8-37e3d219b20b

Other projects in Zin MCP Suite

Current MCP Tools

The following MCP tools are available:

build_apk() — Build an APK from a decoded APKTool Project.
get_manifest() — Get the AndroidManifest.xml content from a decoded APK project.
get_apktool_yml() — Get apktool.yml information from a decoded APK project.
list_smali_directories() — List all smali directories in a project.
list_smali_files() — List smali files in a specific smali directory, optinally filtered by package prefix.
get_smali_file() — Get content of a specific smali file by class name.
modify_smali_file() — Modify the content of a specific smali file.
list_resources() — List resources in a project, optionally filtered by resource type.
get_resource_file() — Get Content of a specific resource file.
modify_resource_file() — Modify the content of a specific resource file.
search_in_file() — Search for a pattern in files with specified extensions.
clean_project() — Clean a project directory to prepare for rebuilding.
decode_apk() — Decode an APK file using APKTool, extracting resources and smali code.

🗒️ Sample Prompts

🔍 Basic Code Understanding

“List all smali directories for the dvac project.”
“Show me all the smali files under the package prefix com.vulnerable.component in the dvac project.”
“Get the smali code for the class com.vulnerable.component.MainActivity.”
“Compare MainActivity.smali with its previous version and show differences.”
“Search for usage of startActivity in smali files of dvac project.”

🛡️ Vulnerability Detection

“Analyze declared permissions in the dvac AndroidManifest.xml and flag dangerous ones.”
“Search for hardcoded URLs or IPs in all .xml and .smali files in the project.”
“Find all uses of PendingIntent.getActivity in smali files.”
“Check for exported activities or receivers in dvac’s

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2021-41945info · fixed

PYSEC-2022-183

Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

Affected: >= 0Fixed in 0.20.0source →

Inventory

Tools (13)

Click any tool to inspect its schema.

~603 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Apktool Mcp Server safe to use?: Apktool Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Apktool Mcp Server?: Apktool Mcp Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Apktool Mcp Server do?: Apktool Mcp Server provides 13 tools: build_apk, get_manifest, get_apktool_yml, list_smali_directories, list_smali_files and 8 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Apktool Mcp Server?: Apktool Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Apktool Mcp Server actively maintained?: Apktool Mcp Server is recently maintained — last commit was 65 days ago. It has 514 GitHub stars.