Mobsf MCP

🚀 MobSF-MCP

MobSF MCP is a Node.js-based Model Context Protocol implementation for Mobile Security Framework (MobSF). It offers a standardized interface to integrate MobSF's security analysis capabilities into automated workflows and third-party tools.

🚀 Quick Start

This section provides a high - level overview of how to get started with MobSF - MCP. The architecture is based on https://github.com/GH05TCREW/mobsf-mcp.

✨ Features

• Standardized interface for integrating MobSF's security analysis into automated workflows and third - party tools.
• A wide range of API endpoints for various security analysis operations.

📦 Installation

Prerequisites

• Node.js (v14 or higher)
• npm (Node Package Manager)
• A running instance of MobSF with API access

Installation Steps

Clone the repository or navigate to the mobsf - mcp directory, and install dependencies:

npm install -g mobsf-mcp

Configure environment variables and start the MobSF MCP server by using the npx command:

📚 Open PowerShell as an administrator

$env:MOBSF_URL="http://localhost:8000"; 
$env:MOBSF_API_KEY="your_api_key_here"; 
npx mobsf-mcp

💻 Usage Examples

API Reference

Available Endpoints

JSON Report Sections

The following sections are available when using getJsonReportSection:

Basic Information

• version: MobSF version
• title: Report title
• file_name: Analyzed file name
• app_name: Application name
• app_type: Application type
• size: File size
• md5, sha1, sha256: File hashes
• package_name: Application package name

Application Components

• main_activity: Main activity name
• exported_activities: List of exported activities
• browsable_activities: List of browsable activities
• activities: All activities
• receivers: Broadcast receivers
• providers: Content providers
• services: Services
• libraries: Native libraries

Security Analysis

• target_sdk, max_sdk, min_sdk: SDK versions
• version_name, version_code: App version info
• permissions: Declared permissions
• malware_permissions: Potentially dangerous permissions
• certificate_analysis: Certificate security analysis
• manifest_analysis: AndroidManifest.xml analysis
• network_security: Network security configuration
• binary_analysis: Binary file analysis
• code_analysis: Source code security analysis
• niap_analysis: NIAP compliance analysis

Additional Analysis

• permission_mapping: Permission usage mapping
• urls, domains, emails: Extracted strings
• firebase_urls: Firebase URL analysis
• exported_count: Count of exported components
• apkid: APK identifier information
• behaviour: Application behavior analysis
• trackers: Tracking libraries detection
• playstore_details: Google Play Store details
• secrets: Detected secrets/keys
• logs: Analysis logs
• sbom: Software Bill of Materials
• average_cvss: Average CVSS score
• appsec: Application security score
• virus_total: VirusTotal scan results

VSCode Cline Extension Configuration

To use this project with the cline extension in VSCode, add the following configuration to your cline configuration file:

{
  "mcpServers": {
    "MobSF MCP Server": {
      "disabled": false,
      "timeout": 60,
      "command": "Nodejs\\node.exe",
      "args": [
        "index.js"
      ],
      "env": {
        "MOBSF_URL": "http://localhost:8000",
        "MOBSF_API_KEY": "your_api_key_here"
      },
      "transportType": "stdio"
    }
  }
}

⚠️ Important Note

Path to your Node.js executable (adjust according to your system, e.g., C:\\Program Files\\nodejs\\node.exe). Make sure to fill in your actual MOBSF_API_KEY in the configuration.

⚠️ Disclaimer and Legal Notice

This tool is designed and provided for security researchers, penetration testers, and developers for LEGAL USE ONLY. The primary purpose is to assist in:

• Security assessment of your own applications
• Applications you have explicit permission to test
• Research and educational purposes

The following uses are strictly prohibited:

• Any malicious or harmful activities
• Unauthorized access to systems or data
• Testing applications without proper authorization
• Any illegal activities or violation of laws

By using this tool, you agree to:

1. Use it only for legal and authorized purposes
2. Take full responsibility for your actions
3. Comply with all applicable laws and regulations
4. Hold the developers and contributors harmless from any claims

📄 License

This project is licensed under the Apache 2.0 License - see the LICENSE file for details.

✨ Acknowledgments

• Mobile Security Framework (MobSF)
• gc-mobsf-mcp