Giving LLMs a direct line into decompiled Android apps

What it does

JADX-MCP-Server is a Python-based Model Context Protocol server that acts as a bridge between an LLM client and a modified version of the JADX decompiler. It exposes the internals of an Android APK—decompiled Java sources, smali, manifests, resources, and even live debugger state—as structured tools an LLM can invoke. The server itself does not decompile anything; it forwards requests to a companion JADX plugin over HTTP and returns the results to the LLM.

The interesting bit

The project treats a complex GUI application like JADX as a headless data source for an LLM, complete with cross-reference lookups, variable renaming, and real-time debugger introspection. It is essentially glue code, but it turns a manual reverse engineering workflow into an interactive, agent-driven one.

Key highlights

• Exposes roughly twenty MCP tools, including class and method retrieval, smali fetching, and AndroidManifest.xml parsing.
• Supports cross-reference queries (xrefs_to_class, xrefs_to_method, xrefs_to_field) with pagination for navigating large codebases.
• Can read live debugger state—stack frames, threads, and variables—directly from the JADX GUI.
• Allows the LLM to trigger simple mutations like renaming variables inside methods.

Caveats

• The README contains a hidden note that the project is in an early stage and to “expect bugs, crashes, and logical errors.”
• Requires a separate, modified JADX plugin (jadx-ai-mcp) to function; it is not a standalone decompiler.
• Only Claude Desktop has been tested; support for other LLM clients is explicitly marked as future work.

Verdict

Android reverse engineers who want to automate APK analysis with LLMs should look here; if you are not already using JADX, this project offers little on its own.