Code-only MCP servers — agent-tools.cloud

MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.

Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.

DexAndroid

github.com/TimeCyber/DexAndroid
active

Android reverse-engineering MCP Server — one-click with Cursor & Codex; powerful unpacking for hardened apps; decompile to smali

MIT ★ 2
docker-reverse-engineer-anything

github.com/psyb0t/docker-reverse-engineer-anything
active

REA (Reverse Engineer Anything) in Docker: Android APK decompilation with JADX, Apktool and adb built in, Ghidra on demand, behind a token-guarded Streamable HTTP MCP endpoint. Also stdio MCP and a CLI.

WTFPL ★ 6
jadx-mcp-server

github.com/Qtty/jadx-mcp-server
active

A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool

★ 34
appunpack

github.com/samalyxx/appunpack
active

Local Android APK decompiler and reverse-engineering CLI. Recover Java/resources with JADX, inspect splits, and connect AI agents via MCP.

MIT ★ 5
delamain

github.com/xjoker/delamain
active

Headless MCP server that gives AI agents the full power of JADX for Android (APK/DEX/AAB) reverse engineering.

Apache-2.0 ★ 9
apktool-mcp-server

github.com/zinja-coder/apktool-mcp-server
updated this year

A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)

Apache-2.0 ★ 710
disrobe

github.com/1-3-7/disrobe
active

Static decompiler, deobfuscator, and unpacker for reverse engineering and malware analysis: Python decompiler (3.8-3.15), PyInstaller extractor, PyArmor unpacker, JavaScript deobfuscator (obfuscator.io, JS-Confuser, webpack), Android APK and Java decompiler, .NET deobfuscator, UPX unpacker, Lua, PHP, WASM, PowerShell. MCP server.

NOASSERTION ★ 172
frida-mcp

github.com/Gindhar2112/frida-mcp
active

Enable AI-driven automated Android dynamic analysis by controlling Frida through the Model Context Protocol for streamlined reverse engineering.

★ 19
mobile-re-mcp

github.com/FlyPhantomFly/mobile-re-mcp
active

MCP servers for Android and iOS reverse engineering: static APK/IPA analysis (npm) and dynamic analysis with adb, Frida and mitmproxy (pip)

MIT ★ 1
apkscope

github.com/suffixing/apkscope
active

Android reverse engineering for humans and AI agents: typed Java in milliseconds, xrefs, API and secret recon, APK diff, re-signing, a native viewer and an MCP server. One Rust executable, no JVM.

Apache-2.0 ★ 20
bla

github.com/qybaihe/bla
active

🛡️ BLA (bla-agents / Blind LLM Agents) — Open-source Blue Defense MCP server & CLI protecting JS/TS, Electron ASAR, WASM, Python, Native Binaries, SQLite, GGUF/Safetensors & Android DEX against AI reverse-engineering agents (REA).

npm MIT ★ 5,718
mcp_reverse_engineering

github.com/ronilowtoned410/mcp_reverse_engineering
active

Analyze binaries with a sandboxed MCP tool that unifies reverse engineering utilities and adds filesystem isolation, timeouts, and input checks

★ 3
android-agent

github.com/Dynaevangelical2652/android-agent
active

Control Android devices through ADB with this Python automation framework for task execution and phone farm scaling.

MIT ★ 4
open-reverselab

github.com/LING71671/open-reverselab
active

Open-source AI reverse-engineering workspace with a desktop app, red / blue / both analysis, parallel Goals, a security knowledge base, and MCP tools for Ghidra, Frida, x64dbg and Rizin.

Apache-2.0 ★ 1,372
dexsql-release

github.com/LSPosed/dexsql-release
active

SQL for Android apk and dex files

NOASSERTION ★ 310
jadx-mcp-server

github.com/zinja-coder/jadx-mcp-server
active

MCP server for JADX-AI Plugin

Apache-2.0 ★ 845
Mira

github.com/vw2x/Mira
active

Mobile runtime detection workbench for AI (iOS and Android)

GPL-3.0 ★ 108
apk-sec-agent

github.com/Inverx/apk-sec-agent
active

面向 Android 应用包（APK）的静态安全分析、反编译源码检索与 MCP 代码审计平台 · Android Static Security Analysis & Code Audit Platform

MIT ★ 4
tracea

github.com/Hisernberg/tracea
active

Trace anything running - dynamic reverse engineering for AI agents. MCP server + CLI with evidence records: hooks, syscalls, memory, network. The dynamic half of REA.

MIT ★ 1
smali-lsp

github.com/surendrajat/smali-lsp
active

Smali language LSP and MCP server

GPL-3.0 ★ 17
re-audit

github.com/TLSRUF/re-audit
active

Static, reverse-engineering-assisted vulnerability triage for AI agents -- CLI + MCP server, no Ghidra required. For files you own or are authorized to test.

MIT ★ 1
apk-index

github.com/wlmosv-png/apk-index
active

零依赖的本地 APK/AAR/DEX 结构索引 + MCP Server。17 个工具，为 Xposed 模块开发提供静态反查。

MIT ★ 16
jadx-mcp

github.com/0xdad0/jadx-mcp
active

MCP (Model Context Protocol) server as a jadx-gui plugin. Lets an AI client (Claude Code, Claude Desktop, or any MCP client) analyze the app currently loaded in jadx-gui.

★ 17
frida-mobile-mcp

github.com/monkeywave/frida-mobile-mcp
active

Mobile Frida MCP Server - AI-powered mobile app exploration and testing via Frida instrumentation; runs next to REA, ReVa (Ghidra) and IDA MCP servers

npm MIT