JADX-MCP-SERVER (Part of Zin's Reverse Engineering MCP Suite)

What is JADX-MCP-SERVER?

JADX-MCP-SERVER is a standalone Python server that uses the Model Context Protocol (MCP) to connect LLMs like Claude with a modified version of jadx-gui (via the JADX-AI-MCP plugin), enabling live reverse engineering and analysis of decompiled Android APKs. It is part of Zin’s Reverse Engineering MCP Suite.

How to use JADX-MCP-SERVER?

Install and configure the server and the JADX-AI-MCP plugin as described in the linked “Getting Started” guide. Run the server; it exposes MCP tools that an LLM client can invoke to interact with the decompiled app context. The server communicates with the plugin over HTTP and with the LLM client via the MCP protocol.

Key features of JADX-MCP-SERVER

• Provides over 20 MCP tools for code and resource analysis
• Enables live vulnerability detection and code review
• Supports debugger integration (stack frames, threads, variables)
• Allows cross-reference searches (xrefs) for methods, fields, and classes
• Can rename variables and retrieve manifest, resources, and smali

Use cases of JADX-MCP-SERVER

• Understanding decompiled code with AI-powered explanations
• Detecting security vulnerabilities and hardcoded secrets in APKs
• Reverse engineering obfuscated Android apps
• Performing static analysis on network calls, file I/O, and permissions
• Generating documentation, refactoring code, and debugging with AI assistance

FAQ from JADX-MCP-SERVER

What runtime dependencies does JADX-MCP-SERVER require?

Java 11+ (for jadx-gui) and Python 3.10+ (for the server).

How does JADX-MCP-SERVER communicate with the LLM?

It uses the Model Context Protocol (MCP) to interface with LLM clients such as Claude Desktop. The server in turn communicates with the JADX-AI-MCP plugin via HTTP requests.

Is JADX-MCP-SERVER production-ready?

The project is in early development; users should expect bugs, crashes, and logical errors.

Which LLMs are supported?

The server has been tested with Claude Desktop. Support for other LLMs may be added in the future.

How does the server interact with JADX?

The server sends HTTP requests to the JADX-AI-MCP plugin, which runs inside a modified jadx-gui instance. The plugin performs actions (e.g., fetching source, selecting text) and returns data.