apktool-mcp-server (Part of Zin's Reverse Engineering MCP Suite)

Name: apktool-mcp-server (Part of Zin's Reverse Engineering MCP Suite)
Author: zinja-coder

@zinja-coder

Repository

About apktool-mcp-server (Part of Zin's Reverse Engineering MCP Suite)

A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)

#android #mobile #ai #mcp #reverse-engineering #apktool #vapt #llm #mcp-server

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "apktool-mcp-server": {
      "command": "uv",
      "args": [
        "venv"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is apktool-mcp-server?

apktool-mcp-server is a fully automated MCP server built on top of ApkTool that integrates with the Model Context Protocol (MCP) to provide live reverse engineering support with LLMs like Claude. It targets reverse engineers, security researchers, and CTF players by enabling tasks such as vulnerability detection, manifest parsing, and AI-driven code modification.

How to use apktool-mcp-server?

Download the latest release from GitHub, install apktool and ensure it is in your PATH, then install uv for dependency management. Configure your MCP client (e.g., Claude Desktop or Cherry Studio) with a stdio command pointing to the uv executable with arguments --directory /path/to/apktool-mcp-server/ run apktool_mcp_server.py. The server exposes tools such as decode_apk(), get_manifest(), get_smali_file(), modify_smali_file(), and search_in_file() through the MCP interface.

Key features of apktool-mcp-server

Decode APK files and extract resources and smali code.
Retrieve AndroidManifest.xml and apktool.yml content.
List and read smali directories and files.
Modify smali and resource files programmatically.
Search for patterns across all project files.
Build an APK from a decoded project.
Clean a project directory before rebuilding.

Use cases of apktool-mcp-server

Vulnerability detection: analyze permissions, hardcoded URLs, and exported activities.
AI code modification: patch smali methods or resource files automatically.
Static analysis: review metadata, manifests, and resource configurations.
Reverse engineering helpers: decode APKs, extract DEX files, and create test projects.
CTF solving: interactively analyze and modify APK components in real time.

FAQ from apktool-mcp-server

What is the difference between apktool-mcp-server and apktool alone?

apktool-mcp-server is an MCP server that wraps ApkTool, adding a standardized interface for AI assistants to call apktool operations and provide context-aware code reviews, vulnerability analysis, and modification suggestions.

What runtime dependencies does apktool-mcp-server require?

The server requires Python 3.10 or newer, apktool installed and configured in the system PATH, uv for dependency management, and the Python packages httpx and fastmcp.