zinja-coder/jadx-mcp-server

Python 3.10+ with uv: uv venv; uv pip install httpx fastmcp
Download from GitHub Releases (jadx-ai-mcp releases) — pairing with the JADX-AI-MCP plugin is required

Usage

• •uv run jadx_mcp_server.py --http # default: MCP server listens on 127.0.0.1:8651, connects to JADX plugin on 127.0.0.1:8650
• •Flags: --http (HTTP transport instead of stdio), --host/--port (MCP listener), --jadx-host/--jadx-port (where the JADX plugin is)
• •Remote setup example: uv run jadx_mcp_server.py --http --host 0.0.0.0 --port 9999 --jadx-host 192.168.1.100 --jadx-port 8652
• •Prompt ideas: 'Fetch stack frames, variables and threads from debugger and provide summary', 'Find vulnerabilities in this class'

Key features

• ✓20+ MCP tools: fetch_current_class, get_selected_text, get_all_classes, get_class_source, get_method_by_name, search_method_by_name, search_classes_by_keyword, get_smali_of_class, get_main_activity_class, get_android_manifest, get_strings, get_resource_file, rename_variable, xrefs_to_class/method/field
• ✓Debugger assistant tools: debug_get_stack_frames, debug_get_threads, debug_get_variables from the jadx debugger
• ✓Manifest-aware tools: main activity and main application classes from AndroidManifest.xml
• ✓Stdio and HTTP transports; supports remote JADX-GUI setups and multiple AI agents
• ✓Part of the Zin MCP Suite alongside APKTool-MCP-Server and ZIN-MCP-Client

Best for

LLM-assisted static analysis and reverse engineering of Android APKs inside JADX, including manifest inspection, xref mapping, deobfuscation, and debugger-assisted analysis.

Caveats

• ⚠Early stage of development — expect bugs, crashes, and logical errors
• ⚠Tested on Claude Desktop; support for other LLMs may be tested in the future
• ⚠Security warning: binding --host 0.0.0.0 exposes an unauthenticated, plain-HTTP (no TLS) MCP server on all interfaces — anyone on the network can invoke all tools; use trusted networks, firewalls, or SSH tunnels
• ⚠Requires the JADX-AI-MCP plugin running in JADX-GUI; legal disclaimer limits use to authorized environments