1. Conduid
  2. Science
  3. Mira
MCP server · Science

Mira

Mobile runtime detection workbench for AI (iOS and Android)

52Fair

Scored 5 hours ago · breakdown

About Mira

Mira is an MCP server published by vw2x in the Science category: mobile runtime detection workbench for AI (iOS and Android).

The repository has 106 stars and 37 forks, with the last commit 5 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/vw2x/Mira

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mira

Powered by Claude · Grounded in docs

I know everything about Mira. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 3 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.

1 check has not been run yet.

Releases

v1.2.0v1.2.0 · 5 Sep 2026V1.2.0 Frida Flow 👻 <p align="center"> <img src="./docs/mira-readme-icon-round.png" width="160" alt="Mira Icon" /> </p> <h1 align="center">Mira V1.2.0</h1> <p align="center"><em>More reliable Frida analysis with a smaller Android…
v1.1.6v1.1.6 · 21 May 2026V1.1.6 Steady Frame 👻 <p align="center"> <img src="./docs/mira-readme-icon-round.png" width="160" alt="Mira Icon" /> </p> <h1 align="center">Mira V1.1.6</h1> <p align="center"><em>Stabler iOS screen streaming for live analysis.</em></p>…
v1.1.5v1.1.5 · 21 May 2026V1.1.5 Signal Trace 👻 <p align="center"> <img src="./docs/mira-readme-icon-round.png" width="160" alt="Mira Icon" /> </p> <h1 align="center">Mira V1.1.5</h1> <p align="center"><em>Focused iOS logs inside the same relay console.</em></p>…
v1.1.4v1.1.4 · 20 May 2026V1.1.4 Cold Start 👻 <p align="center"> <img src="./docs/mira-readme-icon-round.png" width="160" alt="Mira Icon" /> </p> <h1 align="center">Mira V1.1.4</h1> <p align="center"><em>More reliable Android screen streaming on real…
v1.1.3v1.1.3 · 20 May 2026V1.1.3 Clear Channel 👻 <p align="center"> <img src="./docs/mira-readme-icon-round.png" width="160" alt="Mira Icon" /> </p> <h1 align="center">Mira V1.1.3</h1> <p align="center"><em>LAN-friendly live screens and repeatable mobile relay…

README

Mira

Mobile runtime detection workbench for iOS and Android.

Why follow Mira

Mira turns real runtime cases into reusable workflows, tools, and detection notes.

Research Updates

Features

  • App sandbox tools: Use shell, PTY, screen capture, and file tools inside the Mira host app sandbox on Android and iOS.
  • Frida tasks: Run Java and native hooks with RPC for one-time runtime analysis.
  • Relay and MCP: Connect devices through Relay and let AI work in the same sessions through MCP.

Getting Started

  • Relay: PYTHONPATH=. python3 -m mira.relay.server --host 0.0.0.0 --port 8765 --advertise-url http://<your-lan-ip>:8765
  • Browser: Open http://127.0.0.1:8765 on your desktop.
  • Android: Download the latest APK, install it, then enter http://<your-lan-ip>:8765 in the app.
  • iOS: Verified on a real device running iOS 16.7.10. See docs/GETTING-STARTED.md.
  • AI: PYTHONPATH=. python3 -m mira.mcp.server --relay http://127.0.0.1:8765. MCP config: docs/MCP.md.

The APK's offline Python/Frida runtime requires arm64-v8a and supports Android 10 through 15. Android 16 Java hooks are not supported, and no confirmed official Frida fix is available. See the compatibility notes.

Architecture

Contributing

Mira welcomes issues and pull requests from mobile security researchers, reverse engineers, Frida users, MCP users, and device testers.

  • Read CONTRIBUTING.md before opening a focused pull request.
  • Use the issue templates for bugs, security hardening, detection ideas, and device compatibility reports.
  • For security reports, read SECURITY.md first.
  • Scanner-generated hardening PRs are welcome when they include repository-specific reachability reasoning and verification.

Good starting points include native memory-safety review, Android and iOS device testing, Frida workflow examples, MCP client setup notes, and new reusable detection cases.

Live Discovery Examples

Public Relay Access

Relay exposed through cpolar

With Relay, you can temporarily expose an authorized session beyond the local network for cloud devices, expert review handoff, and fast evidence sharing.

Research Boundaries

  1. Mira observes and interacts with the Mira host app sandbox.
  2. Mira does not control unrelated third-party apps.
  3. Mira does not provide system-wide remote control.
  4. Mira does not provide root or jailbreak bypass capabilities.
  5. Mira is not a production SDK or a silent background control channel.

Acknowledgements

  • lamda: inspiration for the web workbench interaction model.
  • Termux: Android terminal UX and extensible shell ecosystem.
  • iSH: iOS-side Linux shell compatibility and syscall translation path.

License

GPL-3.0-only.

README fetched from the repository 3 hours ago. The original is authoritative.

Questions

About Mira

How do I install Mira?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mira safe to use with an AI agent?

Its trust score is 52 out of 100 (fair). It passes 4 of the 5 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mira still maintained?

Yes — the latest release is v1.2.0 (5 Sep 2026), and the last commit was 5 days ago. The repository has 106 stars and 7 open issues.