Apktool MCP Server

Apktool MCP Server wraps the popular Apktool reverse engineering tool and exposes it through MCP, letting your AI agent decompile Android APK files, inspect their contents, analyze manifests, and explore smali code. If you do Android security research, malware analysis, or mobile app auditing, this server gives your agent the ability to pull apart APKs conversationally. The typical workflow involves feeding an APK to the agent, which then uses Apktool to decompile it and examine the AndroidManifest.xml, resources, and bytecode. Your agent can identify permissions, find hardcoded strings (potential API keys or secrets), map out activities and services, and flag suspicious patterns — tasks that normally require manual terminal work with Apktool. With 301 stars and zero open issues, the project is stable and focused. It was last updated in September 2025, so it is not in rapid development, but Apktool itself is mature and the MCP wrapper is straightforward. The niche audience (Android security researchers) means community size is small, but the tool does its job well for those who need it.