- Conduid
- Marketplace
- #mobile-security
MCP servers tagged mobile-security
22 live MCP servers tagged "mobile-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with mobile-security.
Dexcalibur
Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embe…
Android Agent
Control Android devices through ADB with this Python automation framework for task execution and phone farm scaling.
MobileRE Skill
AI Agent 驱动的移动端逆向技能集：Frida hook、一键脱壳、反检测绕过、内存 DEX dump、Ghidra MCP 符号/结构恢复。AI-agent skill system for mobile reverse engineering.
Claude Code Reverse Engineering
Explore reverse engineering specs for Claude Code CLI, with implementation-ready design docs from source map analysis of the npm package
Droidasc MCP
Safe, structured MCP server for the Droid ASC Android decompiler
Mobile Security MCP
Mobile app security analysis MCP server for Android APK and iOS IPA files
Harmonyos Reverse Skill
HarmonyOS NEXT (ArkTS/ArkBytecode .abc) reverse-engineering toolkit — Claude Code plugin: fingerprint→unpack→strings→classes→decompile→NAPI-bridge-trace→repack. Wraps abcde + dayu…
MobileRE Skill
AI Agent 驱动的移动端逆向技能集：Frida hook、一键脱壳、反检测绕过、内存 DEX dump、Ghidra MCP 符号/结构恢复。AI-agent skill system for mobile reverse engineering.
tatavarthitarun/nowsecure-mcp-server
server`
Mobix
Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traffic capture with automatic IDOR flagging, full MCP control plane, web dashboard.
Corellium MCP
Code-mode Model Context Protocol (MCP) server for Corellium: the full 206-operation mobile-security API behind two tools, executed in a token-isolated V8 sandbox. Ships a token-ef…
Hexforge Gateway
Self-hosted reverse-engineering workspace API — orchestrates jadx/apktool/adb/frida/APKiD via a job & workflow engine, exposed as native MCP tools for Claude. No cloud required.
Binhunt
Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.
Deeplinkfuzz
Fuzzes Android/iOS deep links, intents, and custom URL schemes against an emulator/device to surface unvalidated-redirect, injection, and component-hijack bugs.
Apkpeek
One-command static triage of Android APK/AAB binaries: surfaces hardcoded secrets, exported components, dangerous permissions, and insecure manifest flags as a single SARIF report.
React Native Security Toolkit
Mobile security toolkit for React Native: runtime root/jailbreak, debugger, hooking and integrity checks on Android and iOS, a static auditor with OWASP MASVS/CWE mappings and SAR…
Hookcraft
Generates ready-to-run Frida instrumentation scripts from a YAML intent (e.g. 'bypass SSL pinning', 'dump crypto keys') and verifies they attach to a target process.
Semsift
Lightweight semantic-aware SAST that runs curated taint rules over diffs only, so PRs get fast incremental SAST instead of whole-repo scan fatigue.
Sbomx
Generates a CycloneDX SBOM for mobile apps by unpacking native libs and bundled SDKs, then matches components against known-vuln and tracker/privacy databases.
Dastlite
A headless, config-as-code DAST runner that crawls an authenticated web/mobile-API surface and fires a curated active-scan ruleset, emitting deduplicated SARIF.
Mobile Security Research Framework
Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.
MobileRE Skill
AI Agent 驱动的移动端逆向技能集：Frida hook、一键脱壳、反检测绕过、内存 DEX dump、Ghidra MCP 符号/结构恢复。AI-agent skill system for mobile reverse engineering.