Android Security Analyzer MCP
A remote MCP server running on Cloudflare Workers that performs static security analysis on Android source code. It detects issues such as weak cryptography, SQL injection patterns, insecure file storage, and exposed secrets using regex-based rules without requiring external tools or the Android SDK.
Endpoint and access
No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.
https://android-security-analyzer.ako-labs.workers.dev/mcpWhat its tools do
4 tools, grouped by the hints the server advertises. Hints are self-declared, not verified behavior.
Checks and signals
Each line is separate evidence, not a trust score.
- Passed Endpoint answered the live check ·
- Availability 1 of 1 checks passed in 30 days
What you can do with it
- Analyze Android project files for security vulnerabilities
- List implemented security rules and checks
- Explain specific security findings in detail
- Check server status and rule engine stats
Source and maintenance
- Maintenance checked
Protocol and capabilities
- Server
- android-security-analyzer 1.0.0
- MCP protocol negotiated in check
- 2025-03-26
- Tools
- 4 advertised
- Resources
- Not advertised
- Resource templates
- Not advertised
- Prompts
- Not advertised
{
"tools": {
"listChanged": false
}
}Tools
4 advertised
analyze_android_project
Analyzes an Android project's source code for security vulnerabilities. Accepts project files (AndroidManifest.xml, build.gradle, Java/Kotlin sources, XML configs) and returns a structured security report with findings, severity scores, and recommendations.
{
"type": "object",
"required": [
"projectName",
"files"
],
"properties": {
"files": {
"type": "array",
"items": {
"type": "object",
"required": [
"path",
"content"
],
"properties": {
"path": {
"type": "string",
"description": "Relative file path within the project (e.g., app/src/main/AndroidManifest.xml)"
},
"content": {
"type": "string",
"description": "File content as text"
}
}
},
"description": "Array of project files to analyze"
},
"options": {
"type": "object",
"properties": {
"maxFileSizeKb": {
"type": "number",
"description": "Maximum file size in KB to process (default: 512)"
},
"enableSecretScan": {
"type": "boolean",
"description": "Enable secret/credential scanning (default: true)"
},
"includeInfoLevel": {
"type": "boolean",
"description": "Include informational findings (default: true)"
}
},
"description": "Analysis options"
},
"projectName": {
"type": "string",
"description": "Name of the Android project being analyzed"
}
}
}list_android_security_checks
Returns the list of all implemented security checks/rules with their IDs, categories, severity levels, and descriptions.
{
"type": "object",
"properties": {
"category": {
"enum": [
"manifest",
"gradle",
"source",
"xml-config",
"secret"
],
"type": "string",
"description": "Filter rules by category (manifest, gradle, source, xml-config, secret). Leave empty for all rules."
}
}
}explain_finding
Explains a specific security finding by its rule ID. Returns why it is a risk, how to fix it, and false positive considerations.
{
"type": "object",
"required": [
"findingId"
],
"properties": {
"findingId": {
"type": "string",
"description": "The rule/finding ID (e.g., MAN-001, SRC-003, SEC-002)"
}
}
}health
Returns the server health status, version, and rule engine statistics.
{
"type": "object",
"properties": {}
}Prompts
Not advertised
Resources
Not advertised
30-day availability
Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.
- Successful checks
- 1 of 1 (100%)
- Average latency
- 208 ms
- 95th percentile latency
- 208 ms
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · probe · passed · 208 ms · metadata changed · 4 tool(s)
Connect from your client
Each snippet registers the same endpoint; pick the client you use.
Claude Code
claude mcp add --transport http android-security-analyzer-mcp https://android-security-analyzer.ako-labs.workers.dev/mcpCodex
codex mcp add android-security-analyzer-mcp --url https://android-security-analyzer.ako-labs.workers.dev/mcpCursor
{
"mcpServers": {
"android-security-analyzer-mcp": {
"url": "https://android-security-analyzer.ako-labs.workers.dev/mcp"
}
}
}Cline
{
"mcpServers": {
"android-security-analyzer-mcp": {
"type": "streamableHttp",
"url": "https://android-security-analyzer.ako-labs.workers.dev/mcp",
"disabled": false
}
}
}VS Code
{
"servers": {
"android-security-analyzer-mcp": {
"type": "http",
"url": "https://android-security-analyzer.ako-labs.workers.dev/mcp"
}
}
}Gemini CLI
gemini mcp add --transport http android-security-analyzer-mcp https://android-security-analyzer.ako-labs.workers.dev/mcpClaude Desktop
https://android-security-analyzer.ako-labs.workers.dev/mcpWindsurf
{
"mcpServers": {
"android-security-analyzer-mcp": {
"serverUrl": "https://android-security-analyzer.ako-labs.workers.dev/mcp"
}
}
}Let your agent find its tools
Find servers like Android Security Analyzer MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.