pullkitsan/mobsf-mcp-server

Overview

This MCP server integrates with the Mobile Security Framework (MobSF) to scan and analyze Android APK and iOS IPA files. It exposes MobSF's security analysis capabilities through the Model Context Protocol, enabling automated mobile app security checks.

Best for

Best for
Developers needing automated mobile app security scanning within MCP-based toolchains

Use cases

• Scan APK files for security vulnerabilities and malware
• Analyze IPA files for privacy issues and code weaknesses
• Integrate mobile app security scanning into MCP-compatible workflows

How to use

Install

npm install

Tested with

Claude, 5ire

Example client config

{\n  "mcpServers": {\n    "mobsf": {\n      "command": "npx",\n      "args": ["tsx", "/absolute/path/to/server.ts"]\n    }\n  }\n}

Notes

This MCP server integrates with the Mobile Security Framework (MobSF) to scan and analyze Android APK and iOS IPA files. It exposes MobSF’s security analysis capabilities through the Model Context Protocol, enabling automated mobile app security checks.

20 stars on GitHub. Last updated 2025-07-19. Licensed MIT.

Use cases

• Scan APK files for security vulnerabilities and malware
• Analyze IPA files for privacy issues and code weaknesses
• Integrate mobile app security scanning into MCP-compatible workflows

Pros

• Leverages MobSF’s comprehensive mobile security analysis
• Provides a standardized MCP interface for automation
• Open-source and extensible for custom workflows

Cons

• Limited community adoption and support due to low stars
• Requires a running MobSF instance separately
• May lack advanced features available in direct MobSF usage

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.