zinja-coder/jadx-ai-mcp

Download jadx-ai-<version>.zip from GitHub Releases and unzip (contains jadx_mcp_server/ and jadx-ai-plugin*.jar)
Install the jadx-ai-plugin jar into JADX-GUI
cd jadx_mcp_server; curl -LsSf https://astral.sh/uv/install.sh | sh; uv venv; source .venv/bin/activate; uv pip install httpx fastmcp

Usage

• •Configure ~/.config/Claude/claude_desktop_config.json with command uv, args [--directory, /path/to/jadx_mcp_server/, run, jadx_mcp.py]
• •Run jadx-gui, load an .apk, start Claude Desktop, and click the hammer symbol to connect
• •Prompt examples: "fetch currently selected class and perform quick sast on it", "Explain what this class does in one paragraph", "Are there any insecure API usages in this method?"

Key features

• ✓MCP server baked into JADX-GUI; exposes the currently selected class/source via HTTP
• ✓MCP tools: fetch_current_class, get_selected_text, get_all_classes, get_class_source, get_method_by_name, search_method_by_name, get_methods_of_class, get_fields_of_class, get_smali_of_class
• ✓Built-in Claude Desktop integration; beta support for real-time code review
• ✓MCP client interoperability via local loopback; allows automated Claude analysis with inline suggestions

Best for

Reverse engineers and security researchers analyzing Android APKs inside JADX with LLM assistance (vulnerability triage, deobfuscation, static analysis).

Caveats

• ⚠Explicitly early stage of development — expect bugs, crashes, and logical errors; developer beta
• ⚠Tested on Claude Desktop; support for other LLMs may come in the future
• ⚠Requires the modified JADX-GUI build plus the separate Python MCP server; legal disclaimer limits use to authorized environments