Labsco
MCP SERVER

Jadx MCP Plugin

by mobilehackinglab

Ask the APK open in Jadx for a class, a method body, or every class matching a name.

Vulnerability Scanning & Application Security
Summary
Reverse-engineering questions answered against the APK already open in front of you.

Instead of clicking through the class tree, you ask for a class or method by name and get the decompiled source back — read from the running Jadx session, so it is the same output you would have scrolled to.

What it is

A Jadx plugin that publishes the Jadx API over HTTP, plus a FastMCP adapter that speaks MCP to the client. Decompilation stays in the Jadx window you already have open with the APK loaded, and the server reads out of that live session.

What you get
  • Every class in the loaded APK or DEX, listed
  • Classes found by name, and methods found by name, across the whole app
  • The decompiled source of a class
  • The methods and the fields declared on a class
  • The decompiled body of a single method
Requirements

Jadx with the plugin JAR in its plugins/ folder and an APK or DEX loaded, plus Python for the adapter. The HTTP interface listens on localhost at a default port and can be moved with -Pjadx-mcp.http-interface — if you move it, change the URL in the adapter to match.

Setup effort

Build from source — clone the repository and build it, then point your client at the binary