Mobsf MCP Server

🛡️ MobSF MCP Tool

This is a tool compatible with the Model Context Protocol (MCP), allowing MobSF (Mobile Security Framework) to directly scan APK and IPA files through Claude, 5ire, or any MCP - supported client.

🚀 Quick Start

This tool integrates with MobSF to provide a convenient interface for mobile application security analysis. It is especially suitable for scenarios that require automated and integrated security testing.

✨ Features

• Support scanning of APK and IPA files.
• Utilize MobSF's REST API for:
  • Uploading files.
  • Triggering scans.
  • Obtaining analysis summaries.
  • Automatically filtering large results (such as strings or keys) to prevent output overload.
• Provide an MCP - compatible interface via server.ts.

📦 Installation

Clone the repository and install the dependencies:

git clone https://github.com/yourusername/mobsf-mcp.git
cd mobsf-mcp
npm install

🔧 Technical Details

Prerequisites

• MobSF must be installed on the system.
• Download the MCP TypeScript SDK and rename the folder to sdk.

Setup

Copy .env.example to .env:

cp .env.example .env

Edit the .env file to include your MobSF API key and URL:

MOBSF_API_KEY=YOUR_MOBSF_API_KEY
MOBSF_URL=http://localhost:8000

Running the Server

• Add the settings from the Claude AI desktop application configuration file, and the server will start automatically.
• Ensure that your MobSF service is running locally at http://localhost:8000.

💻 Usage Examples

Basic Usage

The server exposes the tool scanFile. Therefore, use any MCP client to try the following commands:

• scan <FILE>.apk
• scan <FILE>.ipa

It will scan the IPA or APK file and provide you with an analysis report (in JSON format).

📄 License

No license information is provided in the original document, so this section is skipped.

⚠️ Important Note

• Only .apk and .ipa file types are supported.
• The tool avoids fetching large fields (such as raw strings or source code dumps) to keep the response fast and comply with Claude/5ire message limits.

💡 Usage Tip

Here is an example of the Claude configuration file:

{
  "mcpServers": {
    "mobsf": {
      "command": "npx",
      "args": ["tsx", "/absolute/path/to/server.ts"]
    }
  }
}