Android Security Analyzer
MCP server for static security analysis of Android source code
¿Debería usar esto?
Calidad y seguridad
Hallazgos (1)
- LOWTool 'health' description lacks action verben health
Basado en el análisis automatizado de las definiciones de herramientas y el cumplimiento del protocolo.
Costo de contexto
Este es el número aproximado de tokens que se consumen cada vez que las herramientas del servidor se cargan en el contexto de un modelo. Los recuentos más altos reducen la atención disponible para otras tareas.
Instalar
Instalación con un clic
Agrega esto a tu archivo `claude_desktop_config.json`:
{
"mcpServers": {
"android-security-analyzer": {
"url": "https://android-security-analyzer.ako-labs.workers.dev/mcp"
}
}
}Puntos de conexión remotos
https://android-security-analyzer.ako-labs.workers.dev/mcpstreamable-httpQué puede hacer
Inventario de herramientas
Herramientas (4)
🟢analyze_android_project(projectName, files, options)
Analyzes an Android project's source code for security vulnerabilities. Accepts project files (AndroidManifest.xml, build.gradle, Java/Kotlin sources, XML configs) and returns a structured security report with findings, severity scores, and recommendations.
Esquema de entrada
{
"type": "object",
"properties": {
"projectName": {
"type": "string",
"description": "Name of the Android project being analyzed"
},
"files": {
"type": "array",
"description": "Array of project files to analyze",
"items": {
"type": "object",
"required": [
"path",
"content"
],
"properties": {
"path": {
"type": "string",
"description": "Relative file path within the project (e.g., app/src/main/AndroidManifest.xml)"
},
"content": {
"type": "string",
"description": "File content as text"
}
}
}
},
"options": {
"type": "object",
"description": "Analysis options",
"properties": {
"includeInfoLevel": {
"type": "boolean",
"description": "Include informational findings (default: true)"
},
"maxFileSizeKb": {
"type": "number",
"description": "Maximum file size in KB to process (default: 512)"
},
"enableSecretScan": {
"type": "boolean",
"description": "Enable secret/credential scanning (default: true)"
}
}
}
},
"required": [
"projectName",
"files"
]
}🟢list_android_security_checks(category)
Returns the list of all implemented security checks/rules with their IDs, categories, severity levels, and descriptions.
Esquema de entrada
{
"type": "object",
"properties": {
"category": {
"type": "string",
"description": "Filter rules by category (manifest, gradle, source, xml-config, secret). Leave empty for all rules.",
"enum": [
"manifest",
"gradle",
"source",
"xml-config",
"secret"
]
}
}
}🟢explain_finding(findingId)
Explains a specific security finding by its rule ID. Returns why it is a risk, how to fix it, and false positive considerations.
Esquema de entrada
{
"type": "object",
"properties": {
"findingId": {
"type": "string",
"description": "The rule/finding ID (e.g., MAN-001, SRC-003, SEC-002)"
}
},
"required": [
"findingId"
]
}⚪health
Returns the server health status, version, and rule engine statistics.
Esquema de entrada
{
"type": "object",
"properties": {}
}Comunidad
Evidencia