|
| 1 | +<div align="center"> |
| 2 | + |
| 3 | +# apktool-mcp-server (Part of Zin's Android Rerverse Engineering MCP Suite) |
| 4 | + |
| 5 | + |
| 6 | + |
| 7 | + |
| 8 | + |
| 9 | + |
| 10 | + |
| 11 | +[](http://www.apache.org/licenses/LICENSE-2.0.html) |
| 12 | + |
| 13 | +</div> |
| 14 | + |
| 15 | +<!-- It is a still in early stage of development, so expects bugs, crashes and logical erros.--> |
| 16 | + |
| 17 | +<!-- Standalone Plugin for [JADX](https://github.com/skylot/jadx) (Started as Fork) with Model Context Protocol (MCP) integration for AI-powered static code analysis and real-time code review and reverse engineering tasks using Claude.--> |
| 18 | + |
| 19 | + Image generated using AI tools. |
| 20 | + |
| 21 | +--- |
| 22 | + |
| 23 | +## 🤖 What is apktool-mcp-server? |
| 24 | + |
| 25 | +**apktool-mcp-server** is a plugin for the [JADX decompiler](https://github.com/skylot/jadx) that integrates directly with [Model Context Protocol (MCP)](https://github.com/anthropic/mcp) to provide **live reverse engineering support with LLMs like Claude**. |
| 26 | + |
| 27 | +Think: "Decompile → Context-Aware Code Review → AI Recommendations" — all in real time. |
| 28 | + |
| 29 | +Watch the demo! |
| 30 | +**TODO** |
| 31 | + |
| 32 | +<!-- Place youtube video --> |
| 33 | + |
| 34 | +## 🤖 What is apktool-mcp-server? |
| 35 | + |
| 36 | +**JADX MCP Server** is a standalone Python server that interacts with a `apktool-mcp-server` plugin (see: [apktool-mcp-server](https://github.com/zinja-coder/apktool-mcp-server)) via MCP (Model Context Protocol). It lets LLMs communicate with the decompiled Android app context live. |
| 37 | + |
| 38 | +## Current MCP Tools |
| 39 | + |
| 40 | +The following MCP tools are available: |
| 41 | + |
| 42 | +**TODO** |
| 43 | + |
| 44 | +--- |
| 45 | + |
| 46 | +## 🗒️ Sample Prompts |
| 47 | + |
| 48 | +**TODO** |
| 49 | + |
| 50 | +🔍 Basic Code Understanding |
| 51 | + |
| 52 | +🛡️ Vulnerability Detection |
| 53 | + |
| 54 | +🛠️ Reverse Engineering Helpers |
| 55 | + |
| 56 | +📦 Static Analysis |
| 57 | + |
| 58 | +🤖 AI Code Modification |
| 59 | + |
| 60 | +📄 Documentation & Metadata |
| 61 | + |
| 62 | +--- |
| 63 | + |
| 64 | +## 📦 Features |
| 65 | + |
| 66 | +--- |
| 67 | + |
| 68 | +## 🛠️ Getting Started |
| 69 | + |
| 70 | +### 1. Downlaod from Releases: https://github.com/zinja-coder/apktool-mcp-server/releases |
| 71 | + |
| 72 | + |
| 73 | + |
| 74 | +```bash |
| 75 | +# 0. Download the apktool-mcp-server-<version>.zip |
| 76 | +https://github.com/zinja-coder/apktool-mcp-server/releases |
| 77 | + |
| 78 | +# 1. |
| 79 | +unzip apktool-mcp-server-<version>.zip |
| 80 | + |
| 81 | +├apktool-mcp-server/ |
| 82 | + ├── apktool_mcp_server.py |
| 83 | + ├── requirements.txt |
| 84 | + ├── README.md |
| 85 | + ├── LICENSE |
| 86 | +```bash |
| 87 | +
|
| 88 | +# 2. Navigate to apktool-mcp-server directory |
| 89 | +cd apktool-mcp-server |
| 90 | +
|
| 91 | +# 3. This project uses uv - https://github.com/astral-sh/uv instead of pip for dependency management. |
| 92 | + ## a. Install uv (if you dont have it yet) |
| 93 | +curl -LsSf https://astral.sh/uv/install.sh | sh |
| 94 | + ## b. OPTIONAL, if for any reasons, you get dependecy errors in apktool-mcp-server, Set up the environment |
| 95 | +uv venv |
| 96 | +source .venv/bin/activate # or .venv\Scripts\activate on Windows |
| 97 | + ## c. OPTIONAL Install dependencies |
| 98 | +uv pip install httpx fastmcp |
| 99 | +
|
| 100 | +# The setup for apktool-mcp-server is done. |
| 101 | +``` |
| 102 | + |
| 103 | +## 🤖 2. Claude Desktop Setup |
| 104 | + |
| 105 | +Make sure Claude Desktop is running with MCP enabled. |
| 106 | + |
| 107 | +For instance, I have used following for Kali Linux: https://github.com/aaddrick/claude-desktop-debian |
| 108 | + |
| 109 | +Configure and add MCP server to LLM file: |
| 110 | +```bash |
| 111 | +nano ~/.config/Claude/claude_desktop_config.json |
| 112 | +``` |
| 113 | +And following content in it: |
| 114 | +```json |
| 115 | +{ |
| 116 | + "mcpServers": { |
| 117 | + "apktool-mcp-server": { |
| 118 | + "command": "/<path>/<to>/uv", |
| 119 | + "args": [ |
| 120 | + "--directory", |
| 121 | + "</PATH/TO/>apktool-mcp-server/", |
| 122 | + "run", |
| 123 | + "apktool_mcp_server.py" |
| 124 | + ] |
| 125 | + } |
| 126 | + } |
| 127 | +} |
| 128 | +``` |
| 129 | + |
| 130 | +Then, navigate code and interact via real-time code review prompts using the built-in integration. |
| 131 | + |
| 132 | +## To report bugs, issues, feature suggestion, Performance issue, general question, Documentation issue. |
| 133 | + - Kindly open an issue with respective template. |
| 134 | + |
| 135 | + - Tested on Claude Desktop Client, support for other AI will be tested soon! |
| 136 | + |
| 137 | +## 🙏 Credits |
| 138 | + |
| 139 | +This project is a MCP Server for [Apktool](https://github.com/iBotPeaches/apktool), an amazing open-source Android reverse engineering tool created and maintained by [@iBotPeaches](https://github.com/iBotPeaches). All core APK decoding and resource processing logic belongs to them. I have only extended it to support my MCP server with AI capabilities. |
| 140 | + |
| 141 | +[📎 Original README (Apktool)](https://github.com/iBotPeaches/apktool) |
| 142 | + |
| 143 | +The original README.md from Apktool is included here in this repository for reference and credit. |
| 144 | + |
| 145 | +Also huge thanks to [@aaddrick](https://github.com/aaddrick) for developing Claude desktop for Debian based Linux. |
| 146 | + |
| 147 | +And in last, thanks to [@anthropics](https://github.com/anthropics) for developing the Model Context Protocol and @FastMCP team. |
| 148 | + |
| 149 | +## 📄 License |
| 150 | + |
| 151 | +apktool-mcp-server and all related projects inherits the Apache 2.0 |
| 152 | + |
| 153 | +## ⚖️ Legal Warning |
| 154 | + |
| 155 | +**Disclaimer** |
| 156 | + |
| 157 | +The tools `apktool-mcp-server` and all related tools under this project are intended strictly for educational, research, and ethical security assessment purposes. They are provided "as-is" without any warranties, expressed or implied. Users are solely responsible for ensuring that their use of these tools complies with all applicable laws, regulations, and ethical guidelines. |
| 158 | + |
| 159 | +By using `apktool-mcp-server`, you agree to use them only in environments you are authorized to test, such as applications you own or have explicit permission to analyze. Any misuse of these tools for unauthorized reverse engineering, infringement of intellectual property rights, or malicious activity is strictly prohibited. |
| 160 | + |
| 161 | +The developers of `apktool-mcp-server` shall not be held liable for any damage, data loss, legal consequences, or other consequences resulting from the use or misuse of these tools. Users assume full responsibility for their actions and any impact caused by their usage. |
| 162 | + |
| 163 | +Use responsibly. Respect intellectual property. Follow ethical hacking practices. |
| 164 | + |
| 165 | +--- |
| 166 | + |
| 167 | +Built with ❤️ for the reverse engineering and AI communities. |
0 commit comments