MobSF MCP Tool

MobSF MCP Tool

MCP-compatible interface for MobSF APK and IPA scanning

15
Stars
4
Forks
15
Watchers
1
Issues
MobSF MCP Tool enables integration of the Mobile Security Framework (MobSF) with the Model Context Protocol, allowing direct scanning and analysis of APK and IPA files through any MCP-capable client, such as Claude or 5ire. It leverages MobSF's REST API to automate file uploads, scan initiation, and report retrieval. The tool optimizes output for AI model contexts by filtering out overly large results and provides example configurations for seamless integration with leading AI desktop apps.

Key Features

MCP-compatible server interface for MobSF integration
APK and IPA file scanning support
Automated file upload and scan triggering via REST API
Optimized output for AI model context limits
Automatic filtering of large result fields (e.g., raw strings, secrets)
Example configuration for Claude and 5ire AI desktop clients
.env-based configuration of MobSF API key and server URL
Easy setup with Typescript and npm dependencies
Supports running both locally and through MCP clients
Detailed troubleshooting and installation guidance

Use Cases

Automated security scanning of mobile applications via MCP clients
Integrating MobSF scanning capabilities into AI-driven workflows
Streamlining mobile app analysis in developer pipelines
Providing real-time scan results to conversational AI platforms like Claude
Simplifying security analysis for APK and IPA files in multi-tool environments
Enabling context-aware result presentation to avoid large payloads
Supporting security teams in continuous integration processes
Facilitating mobile malware detection through standardized interfaces
Building custom automation tools for mobile threat analysis
Reducing manual steps in mobile application security testing

README

🛡MobSF MCP Tool

This is an MCP (Model Context Protocol) compatible tool that allows MobSF (Mobile Security Framework) to scan APK and IPA files directly via Claude, 5ire, or any MCP-capable client.

Prerequisites

  • MobSF should be installed( and running ) on the system.
  • Download the MCP typescript sdk and rename the folder to sdk.
  • npm should be installed on the system

🚀 Features

  • Supports APK and IPA file scanning

  • Uses MobSF's REST API to:

🎞️ Installation

Clone the repo and install dependencies:

Troubleshooting

Go inside mobsf server directory and run 'npx tsx server.ts'. Install any missing npm dependency if any.

🔐 Setup

Copy the .env.example to .env:

cp .env.example .env

Edit .env to include your MobSF API key:

▶️ Run the Server

  • Add the configuration settings shown at the end for claude AI desktop app, it will automatically run the server.

  • Make sure your MobSF server is running locally at http://localhost:8000.

🧲 Example Input

  • The server exposes tool scanFile . So, use any MCP client to try the following prompt scan <FILE>.apk or scan <FILE>.ipa. It will scan the IPA or APK file and will analyze the report(json) for you.

📌 Notes

  • Only .apk and .ipa file types are supported.

  • This tool avoids fetching large fields like raw strings or source code dumps to keep responses fast and compliant with Claude/5ire message limits.

✅ Claude Config file (Example)

✅ 5ire Config file example ( Windows)

Star History

Star History Chart

Repository Owner

pullkitsan
pullkitsan

User

Repository Details

Language TypeScript
Default Branch main
Size 39 KB
Contributors 1
License MIT License
MCP Verified Nov 12, 2025

Programming Languages

TypeScript
100%

Tags

Join Our Newsletter

Stay updated with the latest AI tools, news, and offers by subscribing to our weekly newsletter.

We respect your privacy. Unsubscribe at any time.

Related MCPs

Discover similar Model Context Protocol servers

  • JADX-AI-MCP

    JADX-AI-MCP

    Automated AI-powered APK analysis via Model Context Protocol.

    JADX-AI-MCP is a fully automated server and plugin for integrating Model Context Protocol (MCP) with JADX for the purpose of analyzing Android APKs using large language models such as Claude. It streamlines vulnerability discovery, reverse engineering, and static analysis by leveraging LLMs in conjunction with established tools. The project facilitates real-time code review and efficient collaboration between AI and human analysts.

    • 637
    • MCP
    • zinja-coder/jadx-ai-mcp
  • CipherTrust Manager MCP Server

    CipherTrust Manager MCP Server

    Enables AI assistants to access CipherTrust Manager securely via the Model Context Protocol.

    CipherTrust Manager MCP Server provides an implementation of the Model Context Protocol (MCP), offering AI assistants such as Claude and Cursor a unified interface to interact with CipherTrust Manager resources. Communication is facilitated through JSON-RPC over stdin/stdout, enabling key management, CTE client management, user management, and connection management functionalities. The tool is configurable via environment variables and integrates with existing CipherTrust Manager instances using the ksctl CLI for secure resource access.

    • 7
    • MCP
    • sanyambassi/ciphertrust-manager-mcp-server
  • RAD Security MCP Server

    RAD Security MCP Server

    AI-powered security insights for Kubernetes and cloud environments via the Model Context Protocol.

    RAD Security MCP Server is an implementation of the Model Context Protocol designed to deliver AI-powered security insights and operations for Kubernetes and cloud platforms. It serves as an MCP server for RAD Security, providing a range of toolkits for container, cluster, identity, audit, and threat management. The server is easily configurable via environment variables, allowing for flexible toolkit activation and authentication options. Multiple deployment options are supported, including Node.js, Docker, and integration with development environments like Cursor IDE and Claude Desktop.

    • 5
    • MCP
    • rad-security/mcp-server
  • CyberChef API MCP Server

    CyberChef API MCP Server

    MCP server enabling LLMs to access CyberChef's powerful data analysis and processing tools.

    CyberChef API MCP Server implements the Model Context Protocol (MCP), interfacing with the CyberChef Server API to provide structured tools and resources for LLM/MCP clients. It exposes key CyberChef operations such as executing recipes, batch processing, retrieving operation categories, and utilizing the magic operation for automated data decoding. The server can be configured and managed via standard MCP client workflows and supports context-driven tool invocation for large language models.

    • 29
    • MCP
    • slouchd/cyberchef-api-mcp-server
  • Weblate MCP Server

    Weblate MCP Server

    Seamlessly connect AI assistants to Weblate for translation management via the Model Context Protocol.

    Weblate MCP Server enables AI assistants and clients to directly manage Weblate translation projects through the Model Context Protocol (MCP). It integrates with the Weblate REST API, allowing natural language interaction for project and translation management. The tool offers multiple transport options including HTTP, SSE, and STDIO, and is optimized for large language model workflows. Full support for project, component, and translation operations is provided, with a focus on type safety and flexible environment configuration.

    • 9
    • MCP
    • mmntm/weblate-mcp
  • MCP Server for Cortex

    MCP Server for Cortex

    Bridge Cortex threat analysis capabilities to MCP-compatible clients like Claude.

    MCP Server for Cortex exposes the analysis capabilities of a Cortex instance as tools consumable by Model Context Protocol (MCP) clients, such as large language models. It enables these clients to request threat intelligence analyses via Cortex and receive structured results. The server supports easy configuration, secure authentication, and flexible analyzer selection for integrating threat intelligence tasks into automated AI workflows.

    • 12
    • MCP
    • gbrigandi/mcp-server-cortex
  • Didn't find tool you were looking for?

    Be as detailed as possible for better results