apktool-mcp-server

Why we included this project

Anyone who does Android security work knows the drill: pull an APK apart with apktool, dig through the smali, rebuild. This server wraps that whole loop into Model Context Protocol tools, so an LLM like Claude can decode an APK, read the AndroidManifest.xml and apktool.yml, list and inspect smali files, edit smali or resources, and rebuild. Instead of typing commands yourself, you can ask Claude to flag dangerous permissions, hunt for hardcoded secrets, or trace exported components, and it works from the actual decoded project. The README demonstrates the workflow on CTF challenges, which is a natural fit, and it connects to any MCP client, from Claude Desktop to a local Ollama setup. The project is still early-stage, so expect rough edges, but for anyone who reverse engineers Android apps regularly, it is a practical way to keep an LLM in the loop.