AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Home/
Security & Safety/
jadx-ai-mcp
jadx-ai-mcp logo

jadx-ai-mcp

Active·★ 2.9k·Apache-2.0·Updated 2026-10-19
★ Trending

JADX-AI-MCP is a plugin for the JADX decompiler together with a Python MCP server, so an LLM such as Claude can inspect an Android APK that is open in JADX. The README describes the flow as decompile, context-aware code review, then AI recommendations, aimed at finding vulnerabilities and reverse engineering. It is part of the author's Zin MCP Suite, and documentation is on Read the Docs.

The tool list is large: fetch the selected class or text, list all classes, get a class's source, smali, methods and fields, search methods by name and classes by keyword (with pagination), read AndroidManifest.xml, the main activity and application classes, strings.xml and other resource files, and rename classes, methods and fields. Setup has two parts: install the plugin with `jadx plugins --install "github:zinja-coder:jadx-ai-mcp"` (or through JADX-GUI), then set up the `jadx-mcp-server` folder with uv and add it to the client config (the README uses Claude Desktop on Kali Linux as an example). It is Apache licensed.

This write-up is based on the project's README and public repository data. We have not hand-tested the tool. Data as of 2026-10-25.

License
Apache-2.0
Latest release
v6.5.0 · 2026-10-19
Last commit
2026-10-19
Contributors
9
Forks
277
Open issues and PRs
4
First published
2025-04-07

Source: GitHub, npm and PyPI public APIs.

#JADX#Android#Reverse Engineering#LLM#MCP
$ Install
$ jadx plugins --install "github:zinja-coder:jadx-ai-mcp"
↗ Visit site★ GitHub
01

Features

01Automated LLM communication for Android APK analysis.
02Real-time vulnerability detection and reverse engineering assistance.
03Integration with JADX decompiler via Model Context Protocol (MCP).
04Support for various LLM clients like Claude, LM Studio, and Cherry Studio.
05Extensive set of MCP tools to interact with decompiled code, resources, and debugger.
02

Why choose it

+Works inside a live JADX session, so the model sees the same classes and selection you do
+Wide tool set: sources, smali, manifest, resources, search, and renaming
+Plugin installs with a single `jadx plugins --install` command
+Documentation hosted on Read the Docs, with demos and sample prompts
03

Trade-offs

!Setup spans three pieces (JADX, the plugin and a Python MCP server), so it takes longer than a single package
!Decompiled code is sent to an LLM; do not use a cloud model on APKs you are not allowed to share
!LLM findings are suggestions, so verify any claimed vulnerability yourself
!Use it only on apps you are authorized to analyze
04

Maintenance check

ActiveChecked: 2026-10-27
Last commit
2026-10-19
Commits, last 90 days
20
Releases, last 90 days
2
Latest release
v6.5.0 (2026-10-19)
Open issues
4
Recent issues with at least one comment
19/24
Commits per week, last 12 weeks
Commits per week, last 12 weeks: 0, 0, 0, 2, 0, 1, 0, 0, 0, 0, 5, 0

Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.

Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.

Most discussed open issues

  • #67 [FEATURE] refactor and enhance tools8 comments · 2025-12-12
  • #116 [BUG] {'error': '[WinError 10061] 由于目标计算机积极拒绝,无法连接。'}2 comments · 2026-08-28
  • #127 [BUG] Unauthenticated GET refactoring endpoints permit CSRF in JADX AI MCP1 comments · 2026-10-21

Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.

05

Compatibility

JADX
Native
Verified via docs
Claude Desktop
Supported
Verified via docs
Cherry Studio
Supported
Verified via docs
LM Studio
Supported
Verified via docs
06

Quick start

1
$ jadx plugins --install "github:zinja-coder:jadx-ai-mcp"
07

Use cases

↳Basic Code Understanding (e.g., explaining class functionality, summarizing method responsibilities).
↳Vulnerability Detection (e.g., checking for hardcoded secrets, insecure API usages).
↳Reverse Engineering Helpers (e.g., code deobfuscation and renaming, inferring original purpose of smali methods).
08

Alternatives

⚡Top VS:
VSida-pro-mcp★13.2k→VSGhidraMCP★11.6k→VStoolbox★43→VSrea★396.9k→
ida-pro-mcp logo
ida-pro-mcp★ 13.2k
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
VSCompare→
GhidraMCP logo
GhidraMCP★ 11.6k
MCP Server for Ghidra
VSCompare→
toolbox logo
toolbox★ 43
Collaborative application security testing between humans and agents via CLI and MCP
VSCompare→
rea logo
rea★ 396.9k
Reverse engineer anything with agents: one CLI and MCP server to inspect any app, understand it fully down to the binary level.
VSCompare→
agentic_security logo
agentic_security★ 2.0k
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
VSCompare→
CyberStrike logo
CyberStrike★ 3.3k
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
VSCompare→
redamon logo
redamon★ 3.2k
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
VSCompare→
quark-engine logo
quark-engine★ 1.7k
Quark Agent - Your AI-powered Android APK Analyst
VSCompare→
See all alternatives →

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Maintenance check05Compatibility06Quick start07Use cases08Alternatives
zinja-coder /
jadx-ai-mcp
↗

JADX plugin plus MCP server for LLM-assisted Android APK analysis

2.9k277Apache-2.0
Last commit1w ago
StatusActive
CategorySecurity & Safety
Contributors9
Latest releasev6.5.0
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.