apktool-mcp-server
An MCP server on top of apktool: the agent decodes APKs, reads the manifest and smali, searches the code and patches it for Android reverse engineering
- 709 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- Reads and modifies decoded Android app code and resources
- A reverse engineering tool; use only on your own or authorized apps
- Aimed at finding vulnerabilities and secrets, which requires authorization
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/apktool-mcp-serverDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Reads and modifies decoded Android app code and resources
- A reverse engineering tool; use only on your own or authorized apps
- Aimed at finding vulnerabilities and secrets, which requires authorization
This is third-party code. Review the repository files before installing.
What it does
The server wraps apktool and gives an AI agent a set of tools for a decoded APK project. They include decoding an APK, building it back, reading AndroidManifest.xml and apktool.yml, listing and reading smali files and resources, pattern search, and editing smali and resource files. This supports reviewing permissions, hunting hardcoded endpoints and secrets, finding exported components and making targeted code changes. The server is written in Python with fastmcp and runs through uv.
Who it is for. For mobile app security specialists and reverse engineers who analyze their own or authorized APKs.
Good fit when
- You review the permissions and components of an Android app from its manifest
- You hunt for hardcoded endpoints or secrets in smali and resources
- You need a targeted smali patch and a rebuild of the APK
Not a fit when
- You have no right to analyze the app or the owner's consent
- The target is someone else's app without authorization
- You need runtime dynamic analysis rather than static work
Example request
Decode my APK and show the dangerous permissions from AndroidManifest.xmlMCP
- Transport
- stdio
- Authentication
- not required
Limitations
It needs apktool on PATH and the uv manager. The server works on the static view of an APK: smali, resources, manifest. Some tools modify project files, and a rebuild depends on the edits being correct. The authors note the project is early stage, so bugs and crashes are possible.
How to disable. Remove the apktool-mcp-server entry from the MCP client config and delete the project folder. The installed apktool can be removed separately if desired.
FAQ
Do I need a separate apktool?
Yes. The server wraps apktool, so install it and add it to the environment; verify with apktool -version.
Can it modify code?
Yes. There are tools to edit smali and resources and rebuild the APK, but the result depends on the edits being correct.
How is apktool-mcp-server different from using apktool on the command line?
The server wraps apktool and gives the agent tools: decode and rebuild APKs, read AndroidManifest.xml and apktool.yml, search smali and resources and make edits. You do not type apktool commands yourself.
Do I need a separate apktool and how do I connect the server?
Yes, apktool must be installed on the machine. Add the apktool-mcp-server with the project path to the Claude Desktop config, as in the install block. Risk is high, use it only on apps you are allowed to analyze.
Discussion
No questions or reviews yet.
Related
MCP serversJADX MCP Server
JADX-MCP-SERVER
MCP server for analyzing Android apps through JADX: the agent reads decompiled code, the manifest and hunts for vulnerabilities
A JADX plugin and MCP server: the agent explores decompiled Android app code, finds vulnerabilities and helps with reverse engineering
An MCP server built on jadx-core analyses APKs without the JADX GUI: 26 tools for classes, smali, manifest and cross-references.
Security scanner for MCP servers that looks for hardcoded keys, tool poisoning and injection flaws in repository code.
A native MCP plugin for the x64dbg debugger: the agent drives debugging over HTTP, sets breakpoints, steps through code, reads and patches memory
DexSQL gives an agent SQL over APK and DEX files: classes, methods, strings, call references and smali through built-in MCP.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| apktool-mcp-server (this card) | no | not required | 709 | |
| kubectl-mcp-server | no | not required | 972 | reads cluster state and diagnoses pod failures |
| Unreal Engine MCP Server | no | not required | 1,032 | Unreal Engine assets, actors and blueprints |
| Android MCP | no | not required | 924 | controls an Android device through ADB |
README in short
The README describes the server toolset and sample prompts for code understanding, vulnerability detection, reverse engineering and static analysis. Install goes through a release archive, uv and fastmcp, with config for Claude Desktop and Cherry Studio using the uv command. The project is part of the Zin Reverse Engineering MCP Suite and builds on apktool by iBotPeaches, licensed Apache 2.0. A legal warning limits use to authorized targets.