🛡MobSF MCP Tool
This is an MCP (Model Context Protocol) compatible tool that allows MobSF (Mobile Security Framework) to scan APK and IPA files directly via Claude, 5ire, or any MCP-capable client.
Prerequisites
- MobSF should be installed( and running ) on the system.
- Download the MCP typescript sdk and rename the folder to sdk.
- npm should be installed on the system
🚀 Features
Supports APK and IPA file scanning
Uses MobSF's REST API to:
Upload files Trigger scans Fetch analysis summary Automatically filters large results like strings or secrets (to prevent output overload) MCP-compatible interface via server.ts
🎞️ Installation
Clone the repo and install dependencies:
git clone https://github.com/yourusername/mobsf-mcp.git cd mobsf-mcp npm install
Troubleshooting
Go inside mobsf server directory and run 'npx tsx server.ts'. Install any missing npm dependency if any.
🔐 Setup
Copy the .env.example to .env:
cp .env.example .env
Edit .env to include your MobSF API key:
MOBSF_API_KEY=YOUR_MOBSF_API_KEY MOBSF_URL=http://localhost:8000
