<div align="center">

JADX-AI-MCP (Part of Zin MCP Suite)

⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly.

⭐ Contributors

Thanks to these wonderful people for their contributions ⭐

<table> <tr align="center"> <td> <a href="https://github.com/ljt270864457"> <img src="https://avatars.githubusercontent.com/u/8609890?v=4" width="30px;" alt=""/> <br />_{<b>ljt270864457</b>} </a> </td> <td> <a href="https://github.com/p0px"> <img src="https://avatars.githubusercontent.com/u/161268024?v=4" width="30px;" alt=""/> <br />_<b>p0px</b> </a> </td> <td> <a href="https://github.com/bx33661"> <img src="https://avatars.githubusercontent.com/u/138348615?v=4" width="30px;" alt=""/> <br />_{<b>bx33661</b>} </a> </td> <td> <a href="https://github.com/Haicaji"> <img src="https://avatars.githubusercontent.com/u/132796021?v=4" width="30px;" alt=""/> <br />_{<b>Haicaji</b>} </a> </td> <td> <a href="https://github.com/mostafaNazari702"> <img src="https://avatars.githubusercontent.com/u/93077724?v=4" width="30px;" alt=""/> <br />_{<b>Mostafa Nazari</b>} </a> </td> <td> <a href="https://github.com/ChineseAStar"> <img src="https://avatars.githubusercontent.com/u/24355243?v=4" width="30px;" alt=""/> <br />_{<b>ChineseAStar</b>} </a> </td> <td> <a href="https://github.com/cyal1r"> <img src="https://avatars.githubusercontent.com/u/33282478?v=4" width="30px;" alt=""/> <br />_<b>cyal1</b> </a> </td> <td> <a href="https://github.com/badmonkey7"> <img src="https://avatars.githubusercontent.com/u/41368882?v=4" width="30px;" alt=""/> <br />_{<b>badmonkey7</b>} </a> </td> <td> <a href="https://github.com/tiann"> <img src="https://avatars.githubusercontent.com/u/4233744?v=4" width="30px;" alt=""/> <br />_<b>tiann</b> </a> </td> <td> <a href="https://github.com/ZERO-A-ONE"> <img src="https://avatars.githubusercontent.com/u/18625356?v=4" width="30px;" alt=""/> <br />_{<b>ZERO-A-ONE</b>} </a> </td> <td> <a href="https://github.com/neoz"> <img src="https://avatars.githubusercontent.com/u/360582?v=4" width="30px;" alt=""/> <br />_<b>neoz</b> </a> </td> <td> <a href="https://github.com/SamadiPour"> <img src="https://avatars.githubusercontent.com/u/24422125?v=4" width="30px;" alt=""/> <br />_{<b>SamadiPour</b>} </a> </td> <td> <a href="https://github.com/wuseluosi"> <img src="https://avatars.githubusercontent.com/u/192840340?v=4" width="30px;" alt=""/> <br />_{<b>wuseluosi</b>} </a> </td> <td> <a href="https://github.com/CainYzb"> <img src="https://avatars.githubusercontent.com/u/50669073?v=4" width="30px;" alt=""/> <br />_{<b>CainYzb</b>} </a> </td> <td> <a href="https://github.com/tbodt"> <img src="https://avatars.githubusercontent.com/u/5678977?v=4" width="30px;" alt=""/> <br />_<b>tbodt</b> </a> </td> <td> <a href="https://github.com/LilNick0101"> <img src="https://avatars.githubusercontent.com/u/100995805?v=4" width="30px;" alt=""/> <br />_{<b>LilNick0101</b>} </a> </td> <td> <a href="https://github.com/lwsinclair"> <img src="https://avatars.githubusercontent.com/u/2829939?v=4" width="30px;" alt=""/> <br />_{<b>lwsinclair</b>} </a> </td> </tr> <tr align="center"> <td> <a href="https://github.com/LYC-Android"> <img src="https://avatars.githubusercontent.com/u/18358825?v=4" width="30px;" alt=""/> <br />_{<b>LYC-Android</b>} </a> </td> <td> <a href="https://github.com/zbhello"> <img src="https://avatars.githubusercontent.com/u/122980705?v=4" width="30px;" alt=""/> <br />_{<b>zbhello</b>} </a> </td> <td> <a href="https://github.com/1yearning1"> <img src="https://avatars.githubusercontent.com/u/297883149?v=4" width="30px;" alt=""/> <br />_{<b>1yearning1</b>} </a> </td> <td> <a href="https://github.com/mhsjzsq"> <img src="https://avatars.githubusercontent.com/u/116739454?v=4" width="30px;" alt=""/> <br />_{<b>mhsjzsq</b>} </a> </td> <td> <a href="https://github.com/darkblack1234"> <img src="https://avatars.githubusercontent.com/u/139411545?v=4" width="30px;" alt=""/> <br />_{<b>darkblack1234</b>} </a> </td> <td> <a href="https://github.com/Merrg1n"> <img src="https://avatars.githubusercontent.com/u/22628584?v=4" width="30px;" alt=""/> <br />_{<b>Merrg1n</b>} </a> </td> </tr> </table> </div> <!-- It is a still in early stage of development, so expects bugs, crashes and logical erros.--> <!-- Standalone Plugin for [JADX](https://github.com/skylot/jadx) (Started as Fork) with Model Context Protocol (MCP) integration for AI-powered static code analysis and real-time code review and reverse engineering tasks using Claude.--> <div align="center"> <img alt="banner" height="480px" widht="620px" src="docs/assets/img.png"> </div> <!--  Image generated using AI tools. -->

Read The Docs

• Read The Docs is now live: https://jadx-ai-mcp.readthedocs.io/en/latest/

---

🤖 What is JADX-AI-MCP?

JADX-AI-MCP is a plugin for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live reverse engineering support with LLMs like Claude.

Think: "Decompile → Context-Aware Code Review → AI Recommendations" — all in real time.

High Level Sequence Diagram

sequenceDiagram
LLM CLIENT->>JADX MCP SERVER: INVOKE MCP TOOL
JADX MCP SERVER->>JADX AI MCP PLUGIN: INVOKE HTTP REQUEST
JADX AI MCP PLUGIN->>REQUEST HANDLERS: INVOKE HTTP REQUEST HANDLER
REQUEST HANDLERS->>JADX GUI: PERFORM ACTION/GATHER DATA
JADX GUI->>REQUEST HANDLERS: ACTION PERFORMED/DATA GATHERED
REQUEST HANDLERS->>JADX AI MCP PLUGIN: CRAFT HTTP RESPONSE
JADX AI MCP PLUGIN->>JADX MCP SERVER:HTTP RESPONSE
JADX MCP SERVER->>LLM CLIENT: MCP TOOL RESULT

Watch the demos!

• Perform quick analysis

https://github.com/user-attachments/assets/b65c3041-fde3-4803-8d99-45ca77dbe30a

• Quickly find vulnerabilities

https://github.com/user-attachments/assets/c184afae-3713-4bc0-a1d0-546c1f4eb57f

• Multiple AI Agents Support

https://github.com/user-attachments/assets/6342ea0f-fa8f-44e6-9b3a-4ceb8919a5b0

• Run with your favorite LLM Client

https://github.com/user-attachments/assets/b4a6b280-5aa9-4e76-ac72-a0abec73b809

• Analyze The APK Resources

https://github.com/user-attachments/assets/f42d8072-0e3e-4f03-93ea-121af4e66eb1

• Your AI Assistant during debugging of APK using JADX

https://github.com/user-attachments/assets/2b0bd9b1-95c1-4f32-9b0c-38b864dd6aec

It is combination of two tools:

1. JADX-AI-MCP
2. JADX MCP SERVER

🤖 What is JADX-MCP-SERVER?

JADX MCP Server is a standalone Python server that interacts with a JADX-AI-MCP plugin (see: jadx-ai-mcp) via MCP (Model Context Protocol). It lets LLMs communicate with the decompiled Android app context live.

---

Other projects in Zin MCP Suite

• APKTool-MCP-Server
• JADX-MCP-Server
• ZIN-MCP-Client

Current MCP Tools

The following MCP tools are available:

• fetch_current_class() — Get the class name and full source of selected class
• get_selected_text() — Get currently selected text
• get_all_classes() — List all classes in the project
• get_class_source() — Get full source of a given class
• get_method_by_name() — Fetch a method's source
• search_method_by_name() — Search method across classes
• search_classes_by_keyword() — Search for classes whose source code contains a specific keyword (supports pagination)
• get_methods_of_class() — List methods in a class
• get_fields_of_class() — List fields in a class
• get_smali_of_class() — Fetch smali of class
• get_main_activity_class() — Fetch main activity from jadx mentioned in AndroidManifest.xml file.
• get_main_application_classes_code() — Fetch all the main application classes' code based on the package name defined in the AndroidManifest.xml.
• get_main_application_classes_names() — Fetch all the main application classes' names based on the package name defined in the AndroidManifest.xml.
• get_android_manifest() — Retrieve and return the AndroidManifest.xml content.
• get_manifest_component - Retrieve specific manifest component instead of whole manifest file
• get_strings() : Fetches the strings.xml file
• get_all_resource_file_names() : Retrieve all resource files names that exists in application
• get_resource_file() : Retrieve resource file content
• rename_class() : Renames the class name
• rename_method() : Renames the method
• rename_field() : Renames the field
• rename_package() : Renames whole package
• rename_variable() : Renames the variable within a method
• add_comment() : Adds a comment to a class, method, field, or a single code line (line=, the 1-based line number of the decompiled source), shown in JADX-GUI and saved with the project (re-commenting the same target updates it, an empty comment removes it)
• list_comments() : Lists the comments stored in the project, optionally filtered to one class
• debug_get_stack_frames() : Get the stack frames from jadx debugger
• debug_get_threads() : Get the insights of threads from jadx debugger
• debug_get_variables() : Get the variables from jadx debugger
• xrefs_to_class() : Find all references to a class (returns method-level and class-level references, supports pagination)
• xrefs_to_method() : Find all references to a method (includes override-related methods, supports pagination)
• xrefs_to_field() : Find all references to a field (returns methods that access the field, supports pagination)

---

🗒️ Sample Prompts

🔍 Basic Code Understanding

"Explain what this class does in one paragraph."

"Summarize the responsibilities of this method."

"Is there any obfuscation in this class?"

"List all Android permissions this class might require."

🛡️ Vulnerability Detection

"Are there any insecure API usages in this method?"

"Chec