APAIA

Android Pentest AI Assistant (APAIA) is an MCP server for Claude Desktop that was specifically created for pentesting purposes and aims to provide assistance for recon and static code analysis using ADB and JADX.

---

• Python 3.10+
• adb in PATH (Android SDK platform-tools)
• jadx — https://github.com/skylot/jadx/releases
• Android device or emulator connected
• Claude Desktop

---

git clone https://github.com/mathis2001/APAIA

cd APAIA
python3 -m venv .venv
source .venv/bin/activate        # Windows: .venv\Scripts\activate
pip install -r requirements.txt

---

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json Linux: ~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "android-pentest": {
      "command": "/ABSOLUTE/PATH/APAIA/.venv/bin/python",
      "args": ["/ABSOLUTE/PATH/APAIA/server.py"],
      "env": {
        "JADX_PATH": "/usr/local/bin/jadx",
        "ANDROID_PENTEST_WORKDIR": "/tmp/android-pentest"
      }
    }
  }
}

> JADX_PATH — only needed if jadx is not in PATH > ANDROID_PENTEST_WORKDIR — where pulled APKs and jadx output are stored (default: ~/.android-pentest)

---

| Tool | Description | |------|-------------| | list_devices | Connected ADB devices | | device_info | OS, arch, SELinux, root | | list_packages | Filter: all/system/third-party | | app_info | Version, SDK, paths, debuggable |

| Tool | Description | |------|-------------| | pull_apk | Pull APK(s) from device. Handles split APKs. | | jadx_decompile | Decompile: manifest_only (5s, recon) or full (30–300s, source) | | jadx_get_manifest | View decoded AndroidManifest.xml | | jadx_list_files | Browse decompiled files (filter by