Jadx MCP Server
Android APK analysis and reverse engineering via JADX-AI-MCP integration.
Data last scanned yesterday · Reviewed 3 weeks ago
Overview
Jadx MCP Server provides a bridge between your local AI environment and the JADX reverse engineering framework. It works specifically with the JADX-AI-MCP plugin to allow LLMs to ingest, parse, and analyze Android application packages, including manifest files and code structures. This tool is designed to automate the manual toil of reverse engineering by enabling AI to assist in identifying potential vulnerabilities and structural patterns within APKs. It requires Java 11+ and Python 3.10+ to operate as part of the broader reverse engineering suite.
Our verdict
With a security score of 45/100, this server is classified as high-risk. The primary concern is that the current implementation provides full write access by default, lacking a constrained read-only mode for safety. It is recommended primarily for users operating in isolated, sandboxed environments who are comfortable with the risks of community-maintained tooling that lacks standardized OAuth authentication.
- Zero direct dependencies minimizes supply chain attack surface
- Active development with a recent commit history
- Supported by a team of 13 independent contributors
- Licensed under Apache-2.0 for flexible usage
- High security risk due to default full write access
- Lacks support for OAuth-based authentication
- Community-maintained without official vendor oversight
Tools
| Tool | Description | Risk |
|---|---|---|
| fetch_current_class | Get the class name and full source of selected class | low |
| get_selected_text | Get currently selected text | low |
| get_all_classes | List all classes in the project | low |
| get_class_source | Get full source of a given class | low |
| get_method_by_name | Fetch a method’s source | low |
| search_method_by_name | Search method across classes | low |
| search_classes_by_keyword | Search for classes whose source code contains a specific keyword (supports pagination) | low |
| get_methods_of_class | List methods in a class | low |
| get_fields_of_class | List fields in a class | low |
| get_smali_of_class | Fetch smali of class | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What are the software prerequisites for running this MCP server?
You must have Java 11 or higher and Python 3.10 or higher installed on your system.
›What is the primary function of this server?
The server is designed to communicate with the JADX-AI-MCP Plugin to enable automated analysis of Android APK files using LLMs, including tasks like manifest parsing and vulnerability discovery.
Badge
Maintain this server? Add the live badge to your README.