Jadx AI MCP Server

Android APK reverse engineering and vulnerability analysis via LLMs.

Data last scanned today · Reviewed today

5029 tools★ 2,532JavaApache-2.0

Overview

Jadx AI MCP Server functions as a bridge between the Jadx decompiler and LLMs, enabling automated analysis of Android application code. By integrating JADX with the Model Context Protocol, it allows developers to feed decompiled APK source code into AI assistants to uncover potential vulnerabilities and reverse engineer application logic. The server requires Java 11+ and Python 3.10+ environments to operate as part of the Zin MCP suite. It focuses on simplifying the workflow of security research by automating the inspection of APK files through AI-driven insights.

Our verdict

This server carries a high-risk score of 50/100, primarily due to its status as a community-maintained project that has not yet undergone editorial review for its authentication methods or read-only capabilities. While the zero-dependency architecture reduces the potential supply-chain surface, the lack of official vendor maintenance and security vetting suggests that users should exercise caution in sensitive environments.

Zero direct dependencies minimizes supply-chain exposure
Licensed under the permissive Apache-2.0 license
Provides real documentation for APK analysis workflows

Community-maintained with no official vendor backing
Authentication methods have not been editorially reviewed
Read-only operational mode is not currently verified

Tools

Tool	Description	Risk
fetch_current_class()	Get the class name and full source of selected class	low
get_selected_text()	Get currently selected text	low
get_all_classes()	List all classes in the project	low
get_class_source()	Get full source of a given class	low
get_method_by_name()	Fetch a method's source	low
search_method_by_name()	Search method across classes	low
search_classes_by_keyword()	Search for classes whose source code contains a specific keyword (supports pagination)	low
get_methods_of_class()	List methods in a class	low
get_fields_of_class()	List fields in a class	low
get_smali_of_class()	Fetch smali of class	low

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›What software dependencies are required to run this MCP server?

You must have Java 11 or higher and Python 3.10 or higher installed on your system.

›What is the primary function of this tool?

It serves as a plugin for the JADX decompiler that integrates with the Model Context Protocol to facilitate AI-powered static code analysis, code review, and reverse engineering.

›Is this project considered stable?

No, the project is currently in an early stage of development, so users should expect potential bugs, crashes, and logical errors.