MCP SERVERDrive Android devices from the conversation — UI automation, logs, packages, files, network capture, baseband and firmware diagnostics — over ADB, or directly on-device through Termux.
LABSCO SUMMARY
Two things stand out at this size. The UI layer is built for a model rather than a script — elements are found by text or resource-id, taps target what was found, and waits are conditional instead of timed, which is the difference between a reliable flow and a sleep-and-hope loop. And the comparison tools turn one-off readings into before-and-after evidence: state snapshots, performance and screenshot baselines, OTA fingerprints, thermal baselines. Large outputs come back as handles you fetch deliberately, which is what keeps a server this size usable in a conversation.
An Android control and diagnostics server with 204 tools across 45 modules. It uses ADB by default and switches to direct execution when it detects Termux on the device, covering everything from tapping a button to reading a modem's AT command responses.
Published as deepadb and launched over stdio, or built from the repository and pointed at build/index.js. It shells out to ADB, so the Android platform-tools have to be installed and the device authorised for debugging — adb_health_check validates the toolchain before you start guessing. Individual areas need more: root for adb_root_shell, chown and tcpdump, scrcpy for mirroring, Gradle for builds, QEMU with KVM for the VM tools, and Firebase credentials for Test Lab. On an Android device running Termux it executes directly instead of over ADB. The project points at its SECURITY.md before any HTTP, WebSocket or GraphQL transport is exposed beyond loopback.
One command — npx -y deepadb
USE CASES
Restart the app cleanly, capture the screen state as it happens, and pull the crash buffer rather than scrolling a full logcat.
Find the element by its text or resource-id, tap what was found, and wait for the next one to appear instead of sleeping.
Capture a baseline of memory, CPU and frame stats for the package, then compare the current build against it.
Signal measurements, the serving cell's identity and the neighbours around it, with modem logs when the picture still does not explain it.
Run the same command everywhere at once and diff the outputs, or compare a device against a snapshot of its own earlier state.
A named session numbers each step and captures a screenshot and logcat slice per step, then writes a summary manifest at the end.
Counted once with only startup setup. Other versions, modes or optional credentials may expose a different list.
adb_a11y_auditRun an automated accessibility audit on the current screen. Checks for: missing labels on interactive elements, undersized touch targets (<48dp), images without content-descriptions, clickable elements missing focusability, and duplicate descriptions. Returns a structured report with severity and rule violations.
adb_a11y_touch_targetsList all interactive elements with their touch target dimensions in dp. Highlights elements below the 48dp minimum. Useful for quickly identifying cramped UI layouts.
adb_a11y_treeDump the accessibility-focused view of the UI hierarchy. Shows only elements relevant to screen readers: their roles, labels, states, and navigation order. Filters out decorative/layout containers.
adb_airplane_cycleCycle airplane mode on then off after a delay. Forces cellular re-registration — useful for radio diagnostics and network testing.
adb_airplane_modeToggle airplane mode on/off. Useful for resetting cellular registration during radio testing.
adb_apex_listList installed APEX modules on the device. APEX (Android Pony EXpress) modules deliver updatable system components. Shows module name, version, and active/staged status.
adb_at_batchSend multiple AT commands sequentially and capture all responses. Useful for running a diagnostic sequence. Requires root.
adb_at_cross_validateCross-validate baseband firmware by comparing AT command responses (direct modem interrogation) against Android system properties (getprop). Discrepancies may indicate firmware tampering, incomplete OTA updates, or property spoofing. Sends ATI (identification), AT+CGMR (firmware revision), and AT+CGMM (model) to the modem and compares with gsm.version.baseband, ro.hardware.chipname, and related properties. Requires root.
adb_at_detectAuto-detect the modem AT command device node. Identifies the chipset family (Shannon, Qualcomm, MediaTek, Unisoc) and probes known device node paths. Requires root. Returns the first responding node.
adb_at_probeRun a standard AT diagnostic probe: modem identification, signal quality, network registration, SIM status, and supported bands. Requires root.
adb_at_sendSend a single AT command to the modem and capture the response. Requires root. Use adb_at_detect to find the correct port, or specify it manually.
adb_avd_listList all available Android Virtual Devices (AVDs) that can be started.
adb_baseband_infoGet comprehensive modem/baseband identification: firmware version, RIL implementation, chipset, IMEI, SIM state, and radio capabilities.
adb_batch_actionsExecute multiple input actions in a single tool call. Reduces ADB round-trips for multi-step UI interactions. Each action runs sequentially with an optional delay between them. Supported action types: tap, swipe, fling, long_press, double_tap, keyevent, text, drag, pinch, back, home, sleep.
adb_batteryGet battery status, level, temperature, and charging info
adb_battery_drainMeasure battery drain rate over a specified duration. Takes initial and final readings and calculates mA draw, mW power consumption, and estimated percentage per hour. Useful for profiling power impact of specific operations.
adb_bluetooth_firmwareBluetooth firmware and chipset identification. Reports firmware version, BT version (4.x/5.x), chipset model, adapter state, supported profiles, LE capabilities, and bonded device count. MAC address and device name are opt-in only (permanent identifiers).
adb_bugreportCapture a full bug report zip (device state, logs, dumpsys, system info). Returns the local file path.
adb_build_and_installBuild a debug APK and install it on the connected device (convenience wrapper)
adb_carrier_configDump carrier configuration values. Useful for verifying carrier settings, detecting configuration anomalies, and inspecting APN configurations.
adb_catRead a text file from the device
adb_cell_identityExtract detailed cell identity information: Cell ID (CID), TAC/LAC, EARFCN/ARFCN, Physical Cell ID (PCI), PLMN, and network type. Parses structured data from dumpsys for cellular network analysis.
adb_ci_device_readyComprehensive CI readiness check. Verifies: device online, booted, package manager ready, screen unlocked, network available. Returns structured pass/fail results.
adb_ci_run_testsRun Android instrumented tests (androidTest) via am instrument and capture results. Returns structured pass/fail output.
adb_ci_wait_bootWait for a device or emulator to fully boot. Polls sys.boot_completed and waits for the launcher to be ready. Essential for CI pipelines.
adb_clear_dataClear all data for a package (equivalent to clearing storage in settings). DESTRUCTIVE — irreversibly wipes all app data, cache, databases, shared preferences, and login state. AP5 fix: requires confirm: <packageName> to proceed.
adb_clipboardRead or write the device clipboard. Write mode sets the clipboard content; read mode retrieves it. Clipboard access requires Android 10+ and may need the app to be in foreground on Android 12+.
adb_connectConnect to a device over WiFi/TCP. Device must be paired first or have TCP/IP enabled.
adb_crash_logsRead ANR (Application Not Responding) traces and tombstone crash dumps from the device. Requires root access for /data/anr/ and /data/tombstones/. Returns the most recent entries.
adb_current_activityGet the currently focused activity and window stack
adb_device_infoGet detailed properties for a connected device (model, OS version, build, etc.)
adb_device_stateGet a combined device state snapshot in one call: battery level/status, network connectivity, screen on/off, foreground activity, and orientation. Useful as a pre-check before UI automation or as a quick device health summary.
adb_devicesList all connected Android devices with their state, model, and product info
adb_disconnectDisconnect from a wireless device, or all wireless devices if no host specified
adb_dumpsysRun dumpsys for a specific service. Use 'list' as the service to see all available services.
adb_emulator_startLaunch an Android Virtual Device (AVD) emulator. Returns once the emulator process has started.
adb_emulator_stopStop a running emulator. Uses 'adb emu kill' for graceful shutdown.
adb_extract_apksPull all APK splits for a package from the device to a local directory. Useful for analysis, backup, or transfer to another device.
adb_farm_matrixList available device models and API levels on Firebase Test Lab. Use to plan test matrices.
adb_farm_resultsRetrieve results from the most recent Firebase Test Lab run, or a specific test matrix ID. Shows pass/fail status, device results, and links to logs and artifacts.
adb_farm_runRun tests on Firebase Test Lab. Uploads an APK and test APK, executes instrumented tests across specified device models and API levels. Requires gcloud CLI authenticated with a Firebase project.
adb_file_checksumCompute SHA-256 hash of a file on the device. Critical for firmware integrity verification, tamper detection, and comparing files across devices. Read-only operation. Reports file size alongside the hash.
adb_file_chmodChange file permissions on the device. Mode must be a valid octal string (e.g., '755', '644', '600'). Recursive mode uses depth-based protection: refuses at depth ≤ 2 from root. Note: sdcardfs/FUSE ignores Unix permissions — file access on /sdcard is controlled by Android's package ownership model.
adb_file_chownChange file ownership on the device. Requires root. Supports both numeric UID:GID (e.g., '10150:10150') and symbolic user:group (e.g., 'system:system'). Recursive mode uses depth-based protection: refuses at depth ≤ 2 from root. Note: sdcardfs/FAT32 ignore ownership changes.
adb_file_copyCopy a file or directory on the device. Pre-flight checks source size against destination available space. Post-verifies the copy by comparing file sizes. For recursive directory copies, use -r flag.
adb_file_fsinfoReport filesystem details for any path: filesystem type, mount point, mount options, capacity, usage, read-only status, permission support, symlink support, max file size, timestamp resolution, encryption status, and SELinux context. Essential for understanding what operations are possible before attempting them.
adb_file_moveMove or rename a file/directory on the device. Moving FROM a system path is destructive — source depth protection refuses if source is at depth ≤ 1 from root. Symlinks resolved before checks. Cross-filesystem moves (e.g., /data → /sdcard) do a copy+delete internally and can be slow for large files.
adb_file_replaceFind and replace text in a file on the device. Uses sed internally with proper escaping — exposes a safe interface without requiring sed syntax knowledge. Supports global replacement, line-targeted edits, and optional backup creation. Reports match count.
adb_file_statGet detailed file metadata: size, permissions, ownership, timestamps (access/modify/change), SELinux security context, and file type. Read-only operation.
adb_file_touchCreate an empty file or update timestamps. Three modes: create (touch non-existent path), update (set atime/mtime to now), or set explicit timestamp. On FAT32, timestamps have 2-second resolution. On tmpfs, timestamps are volatile.
adb_file_writeCreate or overwrite a text file on the device. Content is delivered via shell heredoc — suitable for config files, scripts, test fixtures, and small data files. For large or binary files, use adb_push instead. Shell buffer limits content to approximately 128KB.
adb_findSearch for files on the device by name or pattern. Uses the find command with glob matching. Results are capped at maxResults to prevent unbounded output. Reports whether results were truncated.
adb_firmware_diffCompare all firmware components between two saved OTA fingerprints, or between the current device state and a saved fingerprint. Compares baseband (with chipset-specific parsed component diffs), bootloader, kernel, security patch, build ID, and Android version.
adb_firmware_historyShow firmware version progression across all saved OTA fingerprints for a device. Tracks baseband, bootloader, kernel, security patch, and build ID changes between consecutive snapshots with parsed component diffs.
adb_firmware_probeComprehensive firmware identification for the connected device. Reports all firmware components: baseband (parsed by chipset family — Shannon, Qualcomm, MediaTek, Unisoc, HiSilicon, Intel), bootloader, RIL implementation, kernel, security patch, A/B slot, verified boot state, and OTA-updatable partitions.
adb_force_stopForce-stop an app immediately. The most common debugging action.
adb_forwardForward a local port to a port on the device (host → device). Use for connecting to services running on the device.
adb_forward_listList all active port forwards and reverse forwards
adb_forward_removeRemove a port forward (host → device), or all forwards. Use after testing to clean up.
adb_getpropGet a specific Android system property, or all properties if no key given
adb_gps_firmwareGNSS/GPS chipset and firmware identification. Reports GNSS hardware model (manufacturer, chip, firmware version), supported constellations (GPS, GLONASS, Galileo, BeiDou, QZSS, NavIC, SBAS), signal types with frequencies, dual-frequency (L1+L5) support, raw measurement capabilities (pseudorange access for spoofing detection), A-GPS modes (MSB/MSA — cellular-routed assisted GPS relevant to IMSI catcher research), carrier phase measurements, navigation message decoding, and SUPL server configuration.
adb_gradleRun a Gradle task in an Android project directory
adb_grant_permissionGrant a runtime permission to a package
adb_grepSearch file contents on the device by text pattern. Uses fixed-string matching by default (no regex injection risk). Supports recursive directory search with depth control and result capping. For filename searches, use adb_find instead.
adb_health_checkRun a comprehensive health check of the ADB toolchain. Validates: ADB binary, server, device connection, authorization, and root access.
adb_heap_dumpCapture a heap dump from a running process for memory analysis. Triggers am dumpheap and pulls the resulting .hprof file. Requires the target process PID or package name.
adb_iio_readRead raw hardware data from the Linux IIO (Industrial I/O) subsystem. Discovers all IIO devices and reads their current values. On Tensor/Exynos devices, this exposes per-rail power monitors (ODPM) showing real-time power consumption per SoC subsystem (CPU clusters, GPU, display, memory, TPU, GPS, etc.) — data not available through the Android sensor HAL. On other devices, may expose raw accelerometer, gyroscope, magnetometer, or ADC channels. Root required.
adb_inputSend input events to the device (tap, swipe, text, keyevent)
adb_input_double_tapDouble tap at a point on screen. Triggers zoom, text selection, or double-tap gestures. Two rapid taps with a configurable interval.
adb_input_dragDrag from one point to another on screen. Uses Android's draganddrop input command. Useful for drag-and-drop UI elements, sliders, map panning, and reorder operations.
adb_input_flingPerform a high-velocity fling gesture. Like swipe but with a short duration to create scroll momentum on lists, launchers, and paged views. Useful for fast-scrolling through long lists, dismissing notifications, or triggering velocity-sensitive behaviors.
adb_input_long_pressLong press at a point on screen. Triggers context menus, selection mode, drag handles, and other long-press behaviors. Implemented as a zero-distance swipe with configurable hold duration.
adb_input_pinchPerform a multi-touch pinch (zoom out) or spread (zoom in) gesture. Two fingers move symmetrically toward or away from a center point. Uses parallel swipe injection by default (universal, no root); when root is available, can use raw sendevent for true multi-touch MT protocol injection. The 'auto' method selects the best available approach.
adb_input_textType text on the device. Handles special characters by converting spaces to %s and escaping shell metacharacters. For multi-line or complex text, consider using the clipboard tool instead.
adb_installInstall an APK on the device. Provide the full local path to the APK file.
adb_install_bundleInstall multiple APK splits (app bundle) on the device using install-multiple. Provide all split APK files — base APK plus config splits (language, density, ABI).
adb_list_packagesList installed packages. Supports filtering by name.
adb_list_permissionsList permissions declared and granted for a package. Parses the package dump to show install-time and runtime permissions with their current grant state. Useful for auditing permission state before and after grant/revoke operations.
adb_list_splitsList all APK split paths installed for a package. Shows the base APK and any configuration splits (language, screen density, ABI).
adb_locationEnable or disable location services
adb_logcatCapture a logcat snapshot. Supports tag filtering, priority levels, and grep patterns.
adb_logcat_clearClear all logcat buffers on the device
adb_logcat_crashGet recent crash logs from the crash buffer
adb_logcat_pollRetrieve new logcat lines since the last poll from a running watcher session.
adb_logcat_sessionsList all active logcat watcher sessions
adb_logcat_startStart a background logcat watcher. Lines accumulate in a ring buffer. Use adb_logcat_poll to retrieve new entries.
adb_logcat_stopStop a running logcat watcher session
adb_lsList files and directories on the device
adb_market_exportExport a local workflow with marketplace metadata for sharing. Produces a JSON file with name, description, version, author, and tags suitable for submission to the marketplace registry.
adb_market_installDownload and install a workflow from the marketplace. Saves to the workflows directory for immediate use with adb_workflow_run.
adb_market_searchSearch the workflow marketplace for community-shared workflow definitions. Shows name, description, tags, author, and step count. Indicates which workflows are already installed locally.
adb_mirror_startStart live screen mirroring for a device using scrcpy. Requires scrcpy installed and on PATH. Supports windowed (visual) and headless (no display) modes. One session per device.
adb_mirror_statusCheck scrcpy availability and list active mirroring sessions.
adb_mirror_stopStop an active scrcpy mirroring session for a device.
adb_mkdirCreate a directory on the device. Supports -p flag for creating parent directories.
adb_mobile_dataEnable or disable mobile data
adb_modem_logsCapture modem/baseband-related logs from multiple sources: RIL (Radio Interface Layer) logcat, telephony framework logs, and kernel modem messages via dmesg (root required for dmesg). Useful for radio diagnostics and tracing baseband-framework communication.
adb_multi_compareRun a command on all devices and compare outputs side by side. Highlights differences across devices.
adb_multi_installInstall an APK on multiple (or all) connected devices in parallel.
adb_multi_shellExecute a shell command on multiple (or all) connected devices in parallel. Returns results grouped by device.
adb_multi_testRun a comparative test workflow across all connected devices (host + QEMU guests). Executes a predefined diagnostic profile or custom command list on every device in parallel, compares results per-check, and reports matches and differences. Profiles: 'firmware' (baseband, bootloader, kernel, security patch), 'security' (SELinux, verified boot, encryption), 'network' (radio, WiFi, SIM), 'identity' (model, chipset, architecture), 'full' (all profiles). Custom commands also supported.
adb_neighboring_cellsList all visible cells beyond the serving cell: neighboring LTE/5G/WCDMA/GSM cells with their identities and signal strengths. Useful for cellular network surveys, coverage analysis, and radio environment characterization.
adb_networkGet network connectivity info including WiFi, cellular, and active connections
adb_network_auto_connectDiscover and automatically connect to ADB devices on the local network. Combines network scanning with adb connect in one step. Probes a single port (default 5555) on each candidate; if you need to cover the full ADB port range (5555-5558) use adb_network_scan first, then adb_connect with the discovered host:port.
adb_network_connectionsShow active network connections on the device (TCP/UDP). Similar to netstat — shows established connections, listening ports, and connection states.
adb_network_device_ipGet the WiFi IP address of a connected device. Useful for switching from USB to wireless debugging without needing to find the IP manually on the device.
adb_network_scanScan the local network for Android devices with ADB enabled over WiFi/TCP. Probes common ADB ports (5555-5558) on hosts from the ARP table and optionally a custom IP range. Discovered devices can be connected with adb_connect.
adb_nfc_firmwareNFC controller firmware identification. Reports controller type (NXP/Broadcom/Samsung/ST), firmware version, NCI version, supported technologies (NFC-A/B/F/V), secure element availability (eSE/UICC), and HCE (Host Card Emulation) support.
adb_notificationsRead active notifications on the device. Parses the notification manager dump to extract package, title, text, importance, channel, and flags for each notification. Useful for verifying push notification delivery, monitoring notification state, and testing notification-related features.
adb_open_urlOpen a URL on the device in the default browser or handling app. Uses Android's VIEW intent action.
adb_orientationGet or set screen orientation. Can lock to portrait, landscape, reverse portrait, reverse landscape, or restore auto-rotate.
adb_ota_checkCompare the current system state against a saved fingerprint. Detects OTA updates by identifying changes in build ID, security patch, baseband firmware, bootloader, or kernel version.
adb_ota_fingerprintCapture and save the current system fingerprint: build ID, Android version, security patch, bootloader, baseband firmware, kernel version, and A/B partition slot. Saves to a timestamped JSON file for later comparison.
adb_ota_historyList all saved system fingerprints for a device, showing version progression over time. Highlights changes between consecutive snapshots.
adb_package_infoGet detailed info about an installed package (version, permissions, paths)
adb_pairPair with a device over WiFi using the pairing code from Developer Options → Wireless debugging → Pair device
adb_perf_snapshotCapture a performance snapshot for a package: memory usage, frame stats, and CPU info in one call.
adb_permission_auditAudit runtime permission grants for a package. Lists all granted dangerous permissions grouped by category (Camera, Location, Phone, SMS, etc.) and flags potentially over-provisioned permissions. Compares grants against the dangerous permission manifest to identify unnecessary access.
adb_plugin_infoShow information about the plugin system: directory, how to create plugins, and loaded plugin count.
adb_plugin_listList all loaded plugins and the plugin directory path.
adb_profile_detectAuto-detect and build a device profile from the connected device. Captures hardware identification, chipset family, modem info, root status, and matches against the built-in profile library for known quirks.
adb_profile_listList all device profiles: built-in library entries and user-saved profiles.
adb_profile_saveSave a device profile to the profiles library. Use after adb_profile_detect to persist the profile, or create a manual profile with custom quirks and notes.
adb_pullPull a file from the device to local filesystem
adb_pushPush a local file to the device filesystem. Pre-flight checks: hard-blocked kernel paths, filesystem type warnings, symlink resolution, and destination storage availability.
adb_qemu_connectConnect to a running QEMU VM's ADB service, making the guest appear as a device for DeepADB tools. Requires the guest OS to have an ADB daemon running (e.g., Android guest with USB debugging enabled). Requires the 'adb' binary (install with: pkg install android-tools). Connections are restricted to localhost only — no remote host connections allowed.
adb_qemu_disconnectDisconnect from a QEMU VM's ADB service. Removes the guest from the device list.
adb_qemu_guest_shellExecute a shell command on a QEMU guest VM via ADB. The VM must be connected first (use adb_qemu_connect). The guest serial is derived internally — no user-supplied host/IP reaches the ADB binary. Subject to the same security middleware checks as adb_shell.
adb_qemu_imagesManage QEMU disk images for virtual machines. List available images, create new qcow2/raw disk images, or delete existing ones. Images are stored in the DeepADB image directory.
adb_qemu_setupCheck and install QEMU for on-device virtualization. Verifies KVM availability, checks if QEMU is installed, reports version info, and can install QEMU via Termux package manager. Only available in on-device mode.
adb_qemu_startBoot a QEMU virtual machine with KVM hardware acceleration. Auto-detects optimal resource allocation: uses total cores minus 1 for the VM (reserving one for the host OS), and up to 65% of physical RAM. Custom values are accepted but capped at safe limits to prevent host starvation.
adb_qemu_statusShow status of QEMU virtual machines — running VMs with resource usage and port mappings, plus KVM and QEMU availability.
adb_qemu_stopStop a running QEMU virtual machine. Sends SIGTERM for graceful shutdown, with force kill option.
adb_rebootReboot the device. Supports normal, recovery, and bootloader modes.
adb_registry_installInstall a plugin from the community registry by name. Downloads the plugin JavaScript file into the plugins directory. Restart DeepADB to load it.
adb_registry_installedList all locally installed plugins with their versions and metadata. Shows which plugins have updates available in the registry.
adb_registry_searchSearch the community plugin registry for available plugins. Shows name, description, version, and author. Fetches the latest manifest from the configured registry URL.
adb_regression_baselineCapture a performance baseline for a package: memory, CPU, frame stats, battery, and network state. Saves to a timestamped JSON file for later comparison with adb_regression_check.
adb_regression_checkCompare current performance against a saved baseline. Flags regressions in memory (>20% increase), CPU (>50% increase), and jank rate (>25% increase). Thresholds are configurable.
adb_regression_historyList all saved regression baselines, optionally filtered by package name. Shows trends over time.
adb_resolve_intentsDiscover all activities, services, and receivers registered by a package with their intent filters
adb_restart_appForce-stop then re-launch an app. The most frequent debugging workflow in a single call.
adb_result_dropDelete a stored result handle, or clear all handles in this session. Either provide both tool and name to drop one specific handle, or pass all: true to drop everything in the current namespace. Useful for freeing up the store cap proactively or removing stale data before a sensitive operation.
adb_result_getRetrieve the content of a stored result handle by tool name + handle name. Returns the original content blocks as the source tool produced them. Updates the handle's last-accessed time. For URI-based retrieval, read result://<tool>/<name> as an MCP Resource instead.
adb_result_listList all result handles currently stored in this session. Returns metadata for each: tool, name, size, creation/expiry/last-access times. Use the URIs (result://<tool>/<name>) with adb_result_get or by reading them as MCP Resources to retrieve stored content. Handles are scoped per-auth-token and survive server restart within their TTL.
adb_reverseReverse-forward a device port to a port on the host (device → host). Use for letting device apps reach services on your machine.
adb_reverse_removeRemove a reverse forward (device → host), or all reverse forwards. Use after testing to clean up.
adb_revoke_permissionRevoke a runtime permission from a package. Useful for resetting permission state to test first-run flows or denial handling.
adb_ril_pollRetrieve captured RIL messages since the last poll. Optionally filter by category (registration, cell_info, signal, network, security, handover, data, radio_state, nas).
adb_ril_startStart capturing RIL (Radio Interface Layer) messages from the radio logcat buffer. Captures network registration, cell info, signal strength, authentication, handover, and NAS events. Useful for radio diagnostics and cellular network research.
adb_ril_stopStop a RIL capture session. Shows a summary of captured message categories.
adb_rmDelete a file or directory on the device. Recursive deletion uses depth-based protection: refuses at depth ≤ 2 from root (blocks rm -rf /system or /sdcard but allows /sdcard/project/build/). Symlinks are resolved before depth checks to prevent traversal bypasses. Hard-blocks /dev, /proc, /sys. For recursive deletes, reports a pre-flight file count.
adb_root_shellExecute a command as root via su. Requires rooted device.
adb_screenControl screen state: wake, sleep, toggle, lock, or unlock. Lock and unlock verify actual keyguard state via dumpsys window. Unlock uses wm dismiss-keyguard (works for swipe keyguards); supply 'pin' to perform the full PIN entry sequence for PIN-protected devices: wakes screen, dismisses keyguard, swipes up to reveal keypad, types PIN, confirms with ENTER, and verifies the keyguard sleep token was released.
adb_screen_sizeGet the screen resolution and display density. Returns physical width, height (in pixels), and DPI density. Useful for calculating tap/swipe coordinates and understanding the UI layout grid.
adb_screen_stateGet a combined screen state snapshot in one call: foreground activity, screen dimensions and density, orientation, battery level, and a TSV list of interactive UI elements. Replaces 3-4 separate tool calls with a single round-trip. Ideal as a first step in any automation workflow.
adb_screencapTake a screenshot and save to local filesystem. Returns the file path.
adb_screencap_annotatedTake a screenshot with UI element bounding boxes and numbered labels composited directly onto the image. Returns the annotated PNG path plus a text legend mapping each element number to its identity. Ideal for LLM workflows that need to reference specific UI elements by number rather than by coordinates.
adb_screenrecord_startStart recording the device screen. Recording runs on-device. Use adb_screenrecord_stop to finish and pull the video file.
adb_screenrecord_stopStop an active screen recording and pull the video file locally. If the recording has already finished (hit time limit), this just pulls the file.
adb_screenshot_baselineCapture a named screenshot baseline for later comparison. Saves the screenshot and metadata to the baselines directory.
adb_screenshot_compressedTake a screenshot and pull the full-resolution PNG, plus metadata for client-side compression. Returns local file path, dimensions, file size, and a ready-to-run imagemagick command for converting to a smaller JPEG. (Android doesn't ship imagemagick, so the actual compression is post-processing — this tool sets up everything you need.)
adb_screenshot_diffCompare the current screen against a saved screenshot baseline. Decodes PNGs and performs pixel-level comparison (RGB channels), reporting exact pixel difference count, percentage, and the bounding box of the changed region. Supports a tolerance threshold for absorbing minor dynamic elements like clocks or notification badges.
adb_screenshot_historyList all saved screenshot baselines with their metadata (timestamp, dimensions, device, file size).
adb_scroll_untilScroll the screen repeatedly until a target element is found. Performs a swipe gesture, then checks the UI hierarchy for the target. Repeats until found or max iterations reached. Useful for finding elements in long lists or scrollable content.
adb_selinux_denialsList recent SELinux AVC denial messages from logcat and kernel logs. Shows which processes were blocked, what they tried to do, and the SELinux contexts involved. Useful for diagnosing permission issues and understanding security policy enforcement.
adb_selinux_statusCheck SELinux enforcement mode, policy version, and recent denial count. Shows whether the device is in Enforcing, Permissive, or Disabled mode. Root access provides additional policy details from dmesg audit logs.
adb_sensor_readRead current hardware sensor values from the device. Enumerates all available sensors from sensorservice and returns their last-known readings with timestamps. Sensor availability is device-dependent — the tool reports what's present. No root required.
adb_settings_getRead an Android settings value from any namespace (system, secure, global)
adb_settings_putWrite an Android settings value to any namespace (system, secure, global)
adb_shellExecute a shell command on the Android device. Returns stdout and stderr.
adb_signal_detailGet detailed signal strength measurements: RSRP, RSRQ, SINR, RSSI, timing advance, and signal bars. Provides raw radio measurements for signal analysis and anomaly detection.
adb_snapshot_captureCapture a comprehensive device state snapshot: installed packages, key settings, and system properties. Saves to a JSON file.
adb_snapshot_compareCompare current device state against a saved snapshot. Shows added/removed packages, changed settings, and property differences.
adb_snapshot_restore_settingsRestore settings from a saved snapshot to the current device. Only restores global and secure settings — does not install/uninstall packages.
adb_start_activityStart an activity or app by intent or component name
adb_start_appLaunch an app by package name (resolves and starts the default launcher activity)
adb_tap_elementFind a UI element by text, resource-id, or content-description, then tap its center. Combines UI hierarchy search with input tap in one atomic operation. More reliable than coordinate-based taps for dynamic layouts.
adb_tcpdump_startStart a packet capture on the device using tcpdump. Requires root or tcpdump binary on device. Capture runs in background.
adb_tcpdump_stopStop an active packet capture and pull the pcap file locally for analysis.
adb_tcpipSwitch a USB-connected device to TCP/IP mode on the specified port (default 5555). After this, you can disconnect USB and use adb_connect.
adb_telephonyGet telephony state including cell info, signal strength, and network registration.
adb_test_gen_from_intentsAnalyze a package's registered activities and intent filters to generate a test workflow that launches each exported activity and verifies it renders. Produces workflow JSON compatible with adb_workflow_run.
adb_test_gen_from_uiAnalyze the current screen and generate a test workflow that taps each interactive element, takes screenshots, and verifies the app doesn't crash. Produces a workflow JSON compatible with adb_workflow_run.
adb_test_gen_saveSave a generated workflow JSON to the workflows directory for later execution with adb_workflow_run.
adb_test_session_endEnd the active test session. Writes a summary manifest and returns the session directory path.
adb_test_session_startStart a structured test session. Creates a named directory for organizing numbered screenshots and logcat captures.
adb_test_stepCapture a numbered test step: takes a screenshot and captures logcat since the last step. Saves both to the session directory.
adb_thermal_compareCompare current thermal/power state against a saved baseline. Reports temperature changes per zone, CPU frequency shifts, and battery drain rate differences.
adb_thermal_snapshotCapture a thermal and power snapshot: all thermal zone temperatures, per-CPU frequencies and governors, cooling device states, and battery temperature/current draw. Optionally save as a baseline for later comparison.
adb_topGet current CPU and memory usage snapshot
adb_tunnel_closeClose a managed tunnel by ID, or all managed tunnels at once. The corresponding adb forward/reverse entry is removed and the tunnel is dropped from the cleanup registry. Use adb_tunnel_list to see active tunnel IDs.
adb_tunnel_listList all active managed tunnels (opened via adb_tunnel_open). Shows tunnel ID, device, direction, and both endpoints. Note: this only surfaces tunnels created via adb_tunnel_open — tunnels created via the low-level adb_forward / adb_reverse won't appear here. For those, use adb_forward_list.
adb_tunnel_openOpen a managed tunnel between host and device. Higher-level convenience wrapper over adb_forward / adb_reverse: auto-picks a free host port when one isn't specified (forward only), returns an opaque tunnel ID for later close, and registers cleanup so the tunnel is removed on server exit. Direction 'forward' = host port forwards TO device service; 'reverse' = device port forwards TO host service.
adb_ui_dumpDump the current UI hierarchy. Parses the view tree into structured element data with coordinates, text, resource IDs, and interaction flags. Use format='tsv' for token-efficient compact output, format='xml' for raw uiautomator XML.
adb_ui_findSearch the UI hierarchy for elements matching text, resource-id, or content-description. Returns matching elements with coordinates for precise adb_input targeting.
adb_uninstallUninstall a package from the device
adb_wait_elementWait for a UI element to appear or disappear. Polls the UI hierarchy at regular intervals until the condition is met or timeout expires. Useful for waiting after navigation, animations, or async content loading.
adb_wait_stableWait for the UI to stabilize. Polls the UI hierarchy and waits until consecutive dumps produce the same element count and structure. Useful after screen transitions, animations, or content loading before interacting with elements.
adb_wifiEnable or disable WiFi
adb_wifi_firmwareWiFi chipset and firmware identification. Reports WiFi driver version, firmware version, chipset/hardware info, supported bands and standards, interface details, and dumpsys excerpts. BH7 fix: dumpsys truncation now configurable via maxLines. connection state. MAC address is opt-in only (permanent hardware identifier).
adb_workflow_listList saved workflow files in the workflows directory.
adb_workflow_runExecute a workflow — a JSON-defined sequence of device operations with variable substitution, conditional steps, and loop support. Supported actions: shell, root_shell, install, screenshot, logcat, getprop, sleep. Pass the workflow as a JSON string or provide a saved workflow name.
adb_workflow_validateValidate a workflow JSON definition without executing it. Reports structural errors and shows the execution plan.
BEFORE YOU INSTALL
204 tools when we connected.
The documented client runs the server on your machine.
CONTEXT COST
Rated by the size of the 204 tool definitions that ride along on every turn, not by how many there are
INSTALLATION
git clone https://github.com/fullread/DeepADB.git
cd DeepADB
npm ci
npm run buildnpx -y deepadb{
"mcpServers": {
"deepadb": {
"command": "node",
"args": [
"<YOUR_PATH_TO_DEEP_ADB>/build/index.js"
]
}
}
}<YOUR_PATH_TO_DEEP_ADB> is the full path of the DeepADB folder the git clone step above created. To use the published npm package instead, set "command" to "npx" and "args" to ["-y", "deepadb"].
MCP servers
srmorete
github-hewei
jiantao88
software-mansion