Antigravity Master MCP Gateway
Provides Android APK reverse-engineering and automation capabilities, including ad debloating, Network Security Config injection for MITM, APK alignment/repacking, and Frida-based dynamic instrumentation.
Includes a master skill for bypassing WAF/Cloudflare protections during web cloning and security-testing workflows.
Provides a Frida script preset for Flutter BoringSSL, enabling SSL pinning bypass and dynamic instrumentation in Flutter apps.
Allows syncing skills and on-demand updates from the ALDY711/apk-reverse-modifikasi GitHub repository via the sync_skills_from_github tool.
Provides OWASP audit skills for application security assessment and review workflows.
Provides a compact responsive UI prompt recipe targeting Samsung Galaxy A55 screen sizes (384โ412px) for small-screen web interfaces.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Antigravity Master MCP Gatewayanalyze this APK, list trackers, and generate a Frida hook for login"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
๐ ANTIGRAVITY MASTER MCP GATEWAY (MCP-AI-XYZ)
The Sovereign All-in-One Model Context Protocol (MCP) Gateway, Knowledge Arsenal, and Automation Engine for Autonomous AI Agents.
โก CARA CEPAT: PEMASANGAN SATU BARIS (CARA 2 - ONE-LINER CURL)
Paling direkomendasikan jika Anda ingin memasang seluruh arsenal MCP ini secara instan TANPA PERLU
git clone!
Cukup salin dan jalankan satu baris perintah sakti ini di terminal Linux / macOS / WSL Anda:
curl -fsSL https://raw.githubusercontent.com/ALDY711/MCP-AI-XYZ/main/install-remote.sh | bashApa yang Otomatis Dilakukan oleh Perintah Ini?
Mengunduh rilis tarball terbaru langsung dari GitHub
ALDY711/MCP-AI-XYZtanpa perlu Git.Mengekstrak seluruh berkas ke direktori mandiri:
~/.mcp-ai-xyz/.Memasang pustaka resmi
@modelcontextprotocol/sdk.Menguji sintaks dan kesiapan protokol JSON-RPC 2.0 Stdio.
Otomatis menyuntikkan konfigurasi ke
~/.gemini/config/mcp_config.json.
Konfigurasi Siap Tempel untuk Claude Desktop / Cursor / Windsurf / Cline:
Setelah perintah di atas selesai, tambahkan blok JSON berikut ke pengaturan MCP aplikasi Anda:
{
"mcpServers": {
"antigravity-master": {
"command": "node",
"args": ["/home/YOUR_USERNAME/.mcp-ai-xyz/mcp-server/server.js"],
"disabled": false
}
}
}(Catatan: Ganti /home/YOUR_USERNAME sesuai dengan direktori $HOME pada komputer Anda).
Related MCP server: aai-gateway
๐ MUKADIMAH & DESKRIPSI PROYEK
MCP-AI-XYZ adalah peladen terpadu (Unified Master MCP Gateway Server) yang mengonvergensi seluruh perbendaharaan kustomisasi sistem Antigravity ke dalam satu gerbang tunggal berbasis standar terbuka Model Context Protocol (MCP).
Alih-alih mengonfigurasi puluhan server terpisah dan membebani memori model AI dengan ratusan berkas teks di awal sesi, MCP-AI-XYZ memungkinkan klien AI (Claude Desktop, Cursor, Windsurf, Cline, Antigravity CLI/IDE) untuk terhubung ke satu pintu masuk tunggal. Di balik layar, peladen ini secara cerdas mengatur:
214+ Skills Mendalam: 22 Master Skills (Reverse Engineering APK, Frida Hooking, Web Cloning Compact UI, Bypass WAF/Cloudflare, OWASP Audit), 12 Builtin Skills Sistem, serta 181 Algoritma Kuantitatif & Trading Finansial.
Kitab Aturan (Rules): Konvensi hukum rekayasa tingkat tinggi (
AGENTS.md/GEMINI.md) baik edisi aktif (23 KB) maupun naskah monolitik historis (112 KB).Perkakas Biner Terintegrasi (237 Tools): Pintu gerbang langsung ke 230 perkakas biner REA (Reverse Engineering Anything), data broker & kurs riil Forex-Suite, serta protokol Sequential Thinking.
Alat Eksekusi Lokal Otomatis: Skrip Python untuk bedah biner Android (debloat iklan, injeksi Network Security Config untuk MITM, align/repack) dan generator skrip Frida dinamis.
Sinkronisasi Terpadu: Terkoneksi ke repositori upstream
ALDY711/apk-reverse-modifikasidengan kemampuan pembaruan on-demand.
๐๏ธ ARSITEKTUR SISTEM
+---------------------------------------------------------------------------------------+
| KLIEN AI (Claude Desktop / Cursor / Windsurf / Cline / Antigravity) |
+---------------------------------------------------------------------------------------+
|
Koneksi MCP Tunggal
v
+---------------------------------------------------------------------------------------+
| ANTIGRAVITY MASTER MCP GATEWAY (mcp-server/server.js) |
+---------------------------------------------------------------------------------------+
| | | |
v v v v
[10 NATIVE TOOLS] [37 RESOURCES] [5 PROMPT RECIPES] [CHILD GATEWAYS]
- list_skills - rules://active - apk-reverse-surgery - REA (230 tools)
- get_skill_guide - rules://monolith - frida-hooking - Forex-Suite
- search_skills - manifest://inventory - compact-ui-cloning - Sequential Thinking
- get_rule - skill://custom/* - quant-ea-engineer
- sync_from_github - skill://builtin/* - guardrail-soother
- generate_frida
- execute_apk_toolโก FITUR-FITUR UTAMA
1. Sepuluh Perkakas Bawaan (Native Tools)
Nama Perkakas | Keterangan & Kegunaan | Parameter Masukan |
| Menampilkan seluruh inventaris 214+ keahlian terdaftar. |
|
| Membuka pedoman teknis lengkap dan kode referensi suatu keahlian on-demand. |
|
| Mencari keahlian atau modul berdasarkan kata kunci masalah. |
|
| Membaca pasal hukum rekayasa perangkat lunak dan arsitektur otonom. |
|
| Menarik dan menyinkronkan pembaruan dari repositori GitHub. |
|
| Menghasilkan skrip Frida instan (Universal SSL Unpinning, Flutter BoringSSL, Root Cloak). |
|
| Menjalankan skrip Python automasi APK lokal (Debloat iklan, patch MITM NSC, align/repack). |
|
| Pintu gerbang eksekusi langsung ke 230 perkakas biner REA (Reverse Engineering Anything). |
|
| Mengambil data kurs valas riil, skor broker, dan perbandingan broker dari forex.mobile API. |
|
| Pelacak alur kontemplasi nalar mendalam bertingkat (multi-step reasoning). |
|
2. Tiga Puluh Tujuh Sumber Daya Teks (Resources)
Model AI dapat membaca berkas pengetahuan tanpa membebani jendela percakapan:
rules://activeโ Kitab Undang-Undang Rekayasa Otonom (AGENTS.md/GEMINI.mdringkas 23 KB).rules://archive-monolithโ Naskah Asli Monolitik (112 KB) dengan referensi opcode Dalvik & katalog kegagalan.manifest://inventoryโ Inventaris berkas dan neraca data salinan resmi.skill://custom/{skill_name}โ 22 Sumber daya mandiri untuk setiap Master Skill (Reverse, Frida, Web, Android).skill://builtin/{skill_name}โ 12 Sumber daya mandiri untuk keahlian bawaan sistem Antigravity.
3. Lima Resep Alur Kerja Cerdas (Prompts)
apk-reverse-surgeryโ Alur kerja bedah logika biner APK Dalvik, dekompilasi, dan re-signing.frida-dynamic-hookingโ Prosedur penyadapan dan penembusan SSL Pinning runtime.web-cloning-compact-uiโ Desain responsif ultra-kompak untuk Samsung Galaxy A55 (384px-412px) dan layar mini.quant-ea-engineerโ Perancangan algoritma kuantitatif MQL5 & Smart Money Concepts.safety-guardrail-soothingโ Protokol kamuflase aksara halus (Anti-Filter Lexicon) penjinak false-positives.
๐ฆ STRUKTUR DIREKTORI REPOSITORI
MCP-AI-XYZ/
โโโ README.md # Panduan utama ini
โโโ MANIFEST.md # Inventaris biner & audit komparatif
โโโ install-mcp.sh # Skrip sakti pemasang & penguji otomatis
โโโ .gitignore # Aturan pengecualian berkas git
โ
โโโ mcp-server/ # ๐ JANTUNG PELADEN MCP (Node.js ESM)
โ โโโ server.js # Entrypoint peladen JSON-RPC 2.0 Stdio
โ โโโ package.json # Konfigurasi dependensi (@modelcontextprotocol/sdk)
โ
โโโ rules/ # ๐ KITAB ATURAN & HUKUM ARSITEKTUR
โ โโโ AGENTS.md # Standar Terbuka Lintas-Agen
โ โโโ GEMINI.md # Standar Antigravity/Gemini
โ โโโ docs/rules.md # Dokumentasi arsitektur rules
โ โโโ archive/ # Edisi Monolitik Asli Kuno (112 KB)
โ
โโโ skills/ # ๐ก๏ธ PETI PUSAKA KEAHLIAN (214+ SKILLS)
โ โโโ custom/ # 22 Master Skills Khusus (.agents/skills)
โ โโโ builtin/ # 12 Skills Mesin Antigravity CLI
โ โโโ trading-quantitative/ # 181 Skills Trading & Quant Finansial
โ โโโ docs/skills.md # Panduan penyusunan skills
โ
โโโ mcp/ # ๐ฎ LUMBUNG SKEMA MCP ASLI
โ โโโ mcp_config.json # Konfigurasi referensi MCP
โ โโโ servers/ # 237 Skema JSON Asli (REA, Forex, Thinking)
โ
โโโ plugins/ # ๐ฆ TEMPLATE & BUNDEL SISTEM
โโโ hooks/ # โก PEMICU SIKLUS HIDUP (Pre/Post Tool Hooks)
โโโ configs/ # โ๏ธ KONFIGURASI LINGKUNGAN SISTEMโก CARA MEMASANG TANPA GIT CLONE (ZERO-CLONE SETUP)
Paduka dan pengguna lain dapat menikmati peladen ini secara instan tanpa perlu melakukan git clone secara manual. Pilih salah satu dari dua cara sakti berikut:
๐ Opsi A: Menggunakan npx Langsung di Klien AI (Paling Ringkas & Otomatis)
Tidak perlu mengunduh atau mengekstrak folder apa pun ke komputer Anda! Cukup daftarkan konfigurasi berikut ke Claude Desktop, Cursor, Windsurf, atau Antigravity Anda:
{
"mcpServers": {
"antigravity-master": {
"command": "npx",
"args": ["-y", "github:ALDY711/MCP-AI-XYZ"]
}
}
}Ketika aplikasi AI Anda menyala, npx secara otomatis akan mengunduh repositori GitHub, memasang pustaka yang diperlukan di cache sementara, dan mengeksekusi peladen MCP secara mulus.
๐ Opsi B: Skrip Otomatis Satu Baris Terminal (One-Liner Curl)
Jika Anda ingin memasangnya ke direktori lokal tanpa menggunakan Git:
curl -fsSL https://raw.githubusercontent.com/ALDY711/MCP-AI-XYZ/main/install-remote.sh | bashPerintah ini akan mengunduh arsip repositori langsung dari GitHub, mengekstraknya ke ~/.mcp-ai-xyz, dan otomatis menyuntikkannya ke sistem Antigravity.
๐ PANDUAN PEMASANGAN LENGKAP (DENGAN GIT CLONE)
Prasyarat Sistem
Node.js: Versi 18.0.0 atau lebih baru (
node -v)Python: Versi 3.9 atau lebih baru (
python3 --version)Git: Terpasang di sistem (
git --version)
Langkah 1: Kloning Repositori
Jalankan perintah berikut di terminal Anda:
git clone https://github.com/ALDY711/MCP-AI-XYZ.git
cd MCP-AI-XYZLangkah 2: Jalankan Skrip Pemasang Otomatis
Skrip ini akan memeriksa dependensi, memasang @modelcontextprotocol/sdk jika belum ada, memverifikasi sintaks, dan menampilkan cuplikan JSON konfigurasi:
chmod +x install-mcp.sh
./install-mcp.sh๐ ๏ธ PANDUAN INTEGRASI KE BERBAGAI PLATFORM AI
Gunakan konfigurasi di bawah ini sesuai dengan aplikasi klien AI yang Anda gunakan. Ganti /path/to/MCP-AI-XYZ dengan jalur absolut ke folder tempat Anda mengkloning repositori ini (misal: /home/ubuntu/MCP-AI-XYZ atau C:/Users/Nama/MCP-AI-XYZ).
1. Google Antigravity (CLI & IDE)
Jika Anda menggunakan Antigravity CLI atau Antigravity IDE:
Jalur Berkas Konfigurasi:
~/.gemini/config/mcp_config.jsonCara Paling Cepat:
./install-mcp.sh --inject-geminiAtau Edit Manual:
{ "mcpServers": { "antigravity-master": { "command": "node", "args": ["/path/to/MCP-AI-XYZ/mcp-server/server.js"], "disabled": false } } }
2. Claude Desktop
Buka berkas konfigurasi Claude Desktop di sistem operasi Anda:
macOS:
~/Library/Application Support/Claude/claude_desktop_config.jsonWindows:
%APPDATA%\Claude\claude_desktop_config.jsonLinux:
~/.config/Claude/claude_desktop_config.json
Tambahkan entri berikut di dalam blok "mcpServers":
{
"mcpServers": {
"antigravity-master": {
"command": "node",
"args": [
"/path/to/MCP-AI-XYZ/mcp-server/server.js"
]
}
}
}Mulai ulang (Restart) Claude Desktop. Ikon palu (tools) dan dokumen (resources) akan otomatis muncul.
3. Cursor
Buka Cursor Settings (
Ctrl + ,atauCmd + ,).Masuk ke tab Features โก๏ธ MCP.
Klik tombol + Add New MCP Server.
Isi data berikut:
Name:
antigravity-masterType:
commandCommand:
node /path/to/MCP-AI-XYZ/mcp-server/server.js
Klik Save. Cursor akan langsung mendeteksi seluruh perkakas secara instan.
4. Windsurf
Jalur Berkas Konfigurasi:
~/.codeium/windsurf/mcp_config.jsonTambahkan konfigurasi berikut:
{
"mcpServers": {
"antigravity-master": {
"command": "node",
"args": ["/path/to/MCP-AI-XYZ/mcp-server/server.js"]
}
}
}5. Cline / Roo Code (VS Code Extension)
Buka ekstensi Cline di bilah samping VS Code.
Klik ikon gerigi Settings di pojok kanan atas jendela Cline.
Masuk ke tab MCP Servers.
Tambahkan konfigurasi JSON berikut atau sunting berkas
cline_mcp_settings.json:
{
"mcpServers": {
"antigravity-master": {
"command": "node",
"args": ["/path/to/MCP-AI-XYZ/mcp-server/server.js"],
"disabled": false,
"autoApprove": []
}
}
}6. Zed Editor
Buka pengaturan Zed (~/.config/zed/settings.json), lalu tambahkan:
{
"experimental.model_context_protocol": {
"servers": {
"antigravity-master": {
"command": "node",
"args": ["/path/to/MCP-AI-XYZ/mcp-server/server.js"]
}
}
}
}๐งช CARA VERIFIKASI & PENGUJIAN
Untuk memastikan peladen MCP merespons protokol standar dengan sempurna tanpa perlu membuka aplikasi klien AI, jalankan uji Stdio JSON-RPC:
node -e '
import { spawn } from "node:child_process";
const child = spawn("node", ["mcp-server/server.js"]);
child.stdout.once("data", (d) => {
console.log("Respon Initialize Berhasil:\n", d.toString());
child.kill();
});
child.stdin.write(JSON.stringify({
jsonrpc: "2.0",
id: 1,
method: "initialize",
params: { protocolVersion: "2024-11-05", capabilities: {}, clientInfo: { name: "test", version: "1.0" } }
}) + "\n");
'๐ CARA MEMPERBARUI (UPDATING)
Memperbarui Repositori MCP-AI-XYZ:
cd MCP-AI-XYZ git pull origin mainMenyinkronkan Skill Baru dari GitHub Upstream: Cukup perintahkan klien AI Anda (atau panggil perkakas MCP):
"Tolong jalankan tool
sync_skills_from_githubuntuk memperbarui skills terbaru."
๐ LISENSI & HAK CIPTA
Proyek ini dirilis di bawah lisensi terbuka MIT License. Ditempa dan dipersembahkan oleh ALDY711 untuk kemajuan ekosistem agen cerdas dan riset keamanan siber dunia.
Available Tools
10 toolsexecute_apk_toolC
Jalankan alat automasi bedah biner APK lokal (debloat iklan, injeksi Network Security Config untuk MITM, atau align/repack).
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Aksi yang ingin dijalankan | |
| extra_args | No | Argumen tambahan untuk skrip Python | |
| target_path | Yes | Jalur berkas APK atau folder hasil dekompilasi |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It never states whether the target APK is modified in place, whether a backup or output copy is created, what happens on failure mid-repack, or what the result looks like. For a mutating binary-patching tool this is a significant disclosure gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with the verb and capabilities stated immediately, and the parenthetical enumeration is an efficient way to convey the action space. No filler wording, though it is arguably too terse for the tool's risk profile.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a destructive-capable binary tool with no annotations and no output schema, so the description must cover safety and result behavior โ and it does not. An agent cannot tell where patched output lands, whether originals are preserved, or what a successful run returns.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all three parameters, making the baseline 3. The description adds marginal meaning by expanding three of the four action values into concrete operations, but it leaves 'crypto_inspect' unexplained and says nothing about 'extra_args' syntax.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Jalankan') and resource ('alat automasi bedah biner APK lokal') and enumerates three concrete capabilities (debloat, MITM patch, align/repack). However, it omits the fourth enum action 'crypto_inspect', so the stated purpose is slightly narrower than what the tool actually does. Siblings are unrelated tool families, so no sibling differentiation is needed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to choose this tool over alternatives, no prerequisites stated (e.g., decompiled folder vs APK path, toolchain availability), and no indication of when NOT to use it. The action list hints at use cases but provides no selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forex_executeB
Pintu gerbang untuk meminta data kurs valas riil, daftar broker, atau perbandingan broker dari forex.mobile API.
| Name | Required | Description | Default |
|---|---|---|---|
| broker | No | Slug broker jika memilih endpoint 'broker' (misal: exness, ic-markets) | |
| broker_b | No | Slug broker kedua jika memilih endpoint 'compare' | |
| endpoint | Yes | Jenis informasi yang ingin diambil |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden, and it discloses very little. Calling it a 'gateway' to an external API hints at a proxy/read passthrough, but nothing states whether calls are read-only, whether credentials or a network dependency on forex.mobile are required, what happens on an invalid broker slug, or how failures surface.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with no filler, and the three capabilities are listed up front. It is efficient, though the gateway metaphor consumes words that a direct verb would have used more productively.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With only three fully documented parameters, one required, a complete enum, and no output schema, the structured fields do most of the work. What is missing is behavioral context an agent would want before invoking an external-API proxy โ failure modes, response shape in prose, or any auth/environment prerequisites.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the endpoint enum is fully enumerated, so the schema already explains broker, broker_b, and endpoint. The description adds only the vocabulary of the three result types, which roughly mirrors the enum values but does not clarify the conditional dependency (broker for 'broker', broker_b for 'compare') beyond what the schema says.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names the resource (real forex rate data, broker list, broker comparison) and its source (forex.mobile API), which maps cleanly onto the four endpoint modes. It lacks a crisp verb like 'get/fetch' โ 'pintu gerbang untuk meminta data' is metaphor rather than action โ but an agent can still tell what the tool returns.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Listing the three data categories implicitly tells the agent when to reach for this tool, but there is no explicit 'use this whenโฆ' statement, no exclusions, and no referenced alternatives. The sibling tools (skills, frida, apk) are unrelated, so mis-routing risk is low, which keeps this at an implied-usage 3 rather than lower.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_frida_scriptC
Hasilkan skrip Frida dynamic hooking siap pakai untuk bypass SSL pinning, penyamaran root, atau penyadapan kriptografi.
| Name | Required | Description | Default |
|---|---|---|---|
| preset | Yes | Jenis template skrip yang diinginkan | |
| target_package | No | Nama package aplikasi Android target (opsional) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It says the scripts are "siap pakai" (ready to use) but never states whether the result is returned as text, written to disk, or whether any side effect occurs, nor what happens with target_package or whether the generated script is validated. For a zero-annotation tool this is a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler. It is appropriately short, though that brevity is partly why the behavioral and usage gaps exist.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema and no annotations, so the description should at least characterize the return value (source text vs. file path) and any environment requirements. For a two-parameter generator tool the current sentence is minimally viable but leaves the agent guessing about the result and about how target_package interacts with presets.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters (preset enum and optional target_package) are already documented in the schema; baseline is 3. The description's mention of the use cases loosely mirrors the preset values but adds no syntax or selection logic beyond what the enum already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ("Hasilkan skrip Frida dynamic hooking") and enumerates the concrete use cases (SSL pinning bypass, root cloaking, crypto interception) that correspond to the preset enum values. It is not tautological and an agent can tell what it produces, though the mapping from prose use cases to the four named presets is implicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use or when-not-to-use guidance, no prerequisites (e.g. rooted device, app already installed), and no mention of alternatives. The sibling tools are unrelated in domain, so the lack of differentiation there is not the problem โ the problem is that nothing tells the agent which preset to pick or when this tool is appropriate versus manual approach.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_ruleB
Baca pasal hukum dan aturan arsitektur (AGENTS.md edisi aktif atau naskah monolitik kuno 112 KB).
| Name | Required | Description | Default |
|---|---|---|---|
| version | No | 'active' untuk AGENTS.md ringkas (23 KB), 'monolith' untuk naskah lengkap kuno (112 KB). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are supplied, so the description carries the full burden. It signals a read operation and hints at document size, but says nothing about what is actually returned (full text dump?), whether there is truncation or pagination on the 112 KB variant, or any auth/permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler. Minor redundancy in restating the 112 KB size that the schema enum already declares.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-optional-parameter read tool with a fully described enum and no output schema, this is close to adequate. The only real gap is the unspecified default when 'version' is omitted and the unstated return shape.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the enum already documents both modes with their sizes, so the description is largely redundant here. It does not state the default behavior when 'version' is omitted (it is optional), which is the one piece of meaning the schema lacks.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete verb ('Baca' / read) and a concrete resource ('pasal hukum dan aturan arsitektur'), and clarifies the two content forms (active AGENTS.md vs. the 112 KB monolith). It does not differentiate this tool from any of the listed siblings, so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose implies when to call it (you need to consult the architecture rules), but there is no explicit when/when-not guidance, no mention of when to prefer 'active' over 'monolith', and no reference to any alternative tool for rule lookup.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_skill_guideA
Ambil pedoman teknis lengkap, petunjuk operasional, dan referensi kode dari suatu skill berdasarkan namanya.
| Name | Required | Description | Default |
|---|---|---|---|
| skill_name | Yes | Nama skill, misalnya 'android-apk-smali-surgery', 'frida-dynamic-hooking', 'cf-bypass', dll. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are supplied, so the description carries the burden. It does characterize the payload (full technical guidelines, operational instructions, code references), which implies a read-only, potentially large retrieval, but it says nothing about behavior when the skill name is unknown, whether output is truncated, or how large the returned guide can be.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence naming the action, the returned content, and the key, with zero filler. Nothing in it could be removed without losing meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter lookup with no output schema, the description adequately conveys content type but omits what an agent most needs beyond that: failure behavior for unknown skill names and an indication of return size or structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single parameter already carries an explanation with concrete example skill names. The description only restates that lookup is by name, adding no format, casing, or matching-rule details beyond the schema โ the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Ambil' โ retrieve) and resource ('pedoman teknis lengkap, petunjuk operasional, dan referensi kode dari suatu skill') plus the lookup key ('berdasarkan namanya'). It is clear what the tool returns, but it never distinguishes itself from siblings like get_rule or search_skills, which an agent must choose between.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied: an agent infers it should call this when it already knows a skill name and wants its documentation. There is no explicit statement of when to use this versus search_skills (to find a skill) or get_rule (to fetch a rule), and no prerequisites or exclusions are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_antigravity_skillsC
Dapatkan daftar seluruh keahlian (Skills) yang tersimpan di dalam khazanah Antigravity (Custom, Builtin, & Trading-Quantitative).
| Name | Required | Description | Default |
|---|---|---|---|
| category | No | Kategori skill yang ingin ditampilkan (default: all) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are supplied, so the description carries the full behavioral burden and largely fails it. It does not state that the operation is read-only, whether the result is paginated or size-limited, or what an agent should expect from a large skill repository; only the implicit 'list' verb suggests safety.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The definition is a single compact sentence with the resource and scope front-loaded, so it is easy to scan. The trailing parenthetical slightly duplicates what the schema enum already provides, but it is not wasteful enough to hurt readability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple zero-required-parameter list tool, so the description's brevity is defensible. However, with no annotations and no output schema, the description should at minimum indicate the shape or scale of what comes back (e.g., that it returns name/description per skill) to help the agent plan its next call.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single `category` parameter has an enum with a documented default, so the schema already fully explains the input. The description's parenthetical ('Custom, Builtin, & Trading-Quantitative') merely echoes enum values and adds no new meaning such as filtering behavior or defaults.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Dapatkan' / get) and resource ('daftar seluruh keahlian/Skills') and enumerates the source categories, so the agent knows it retrieves a complete skill listing. It does not differentiate itself from siblings such as search_skills or get_skill_guide, leaving the agent to infer the boundary between 'list all' and 'search'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit statement of when to use this tool versus search_skills or get_skill_guide, nor any prerequisite or exclusion. The word 'seluruh' (entire) hints at an unfiltered listing, but this is inference rather than guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
rea_executeC
Pintu gerbang terpadu untuk menjalankan perkakas biner REA (Reverse Engineering Anything) seperti dekompilasi, inspeksi graf aplikasi, atau disassembler.
| Name | Required | Description | Default |
|---|---|---|---|
| command_args | Yes | Argumen untuk biner /usr/local/bin/rea |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, yet it only says it 'runs' a binary. It does not state that arguments are passed raw to /usr/local/bin/rea, what the execution environment or side effects are, whether the operations are destructive, or how errors and output are returned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler. It is efficient, though the brevity leaves the guidance gaps noted in the other dimensions.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a free-form passthrough executor with no annotations and no output schema, the definition is thin. It should at least sketch the shape of valid arguments and what a call returns, since neither structured field supplies that information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and there is only one parameter, so the baseline applies. The description's mention of decompilation, graph inspection and disassembly hints at the subcommands that go into command_args, but it never clarifies the argument structure (e.g., whether the first element is the subcommand or a flag).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb ('menjalankan' / run) and resource (REA binary tools), and names three concrete operation types: decompilation, app graph inspection, and disassembler. It does not differentiate from execution siblings such as execute_apk_tool or generate_frida_script, which keeps it below a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to choose this gateway over siblings like execute_apk_tool, nor any prerequisites or exclusions. An agent must infer that this is the generic escape hatch for the rea binary purely from the binary path in the schema.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_skillsB
Cari skill yang relevan berdasarkan kata kunci topik atau masalah yang dihadapi.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Kata kunci pencarian (misal: 'smali', 'ssl pinning', 'trading', 'cloudflare') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden and largely fails to. It says results are 'relevan' but does not disclose ranking behavior, result count limits, whether matching is literal or fuzzy, or what the response looks like, all of which matter for a search tool with sibling list/guide tools.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single efficient sentence with no filler, front-loading the verb and the matching basis. It is appropriately sized for a one-parameter tool, though the terseness contributes to the missing behavioral detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple single-parameter search with no output schema, the definition covers the core purpose adequately. It still leaves what comes back and how results are ordered unexplained, which the agent needs in order to decide between searching and listing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema already documents the single query parameter with concrete examples ('smali', 'ssl pinning', 'trading', 'cloudflare'). The description merely restates that the input is a topic or problem keyword, so it adds little beyond the schema and the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource (search skills) and adds the matching basis (topic or problem keyword), so the agent knows this is a relevance search rather than a full listing. It does not name or contrast with the obvious sibling list_antigravity_skills, so differentiation is left implicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied by the phrase 'topik atau masalah yang dihadapi' โ it suggests calling this when the agent has a topic or problem in mind. There is no explicit when-not guidance and no mention of how this relates to list_antigravity_skills or get_skill_guide, so the agent must infer the boundary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sequential_thinkingB
Jalankan alur kontemplasi nalar mendalam bertingkat (Sequential Thinking) untuk memecahkan dilema teknis rumit langkah demi langkah.
| Name | Required | Description | Default |
|---|---|---|---|
| thought | Yes | Langkah pemikiran atau analisis saat ini | |
| thoughtNumber | Yes | Nomor urut pemikiran (mulai dari 1) | |
| totalThoughts | Yes | Perkiraan jumlah pemikiran yang dibutuhkan | |
| nextThoughtNeeded | Yes | Apakah masih membutuhkan pemikiran berikutnya? |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, yet it says nothing about whether this call has side effects, whether state persists between invocations, how the thought/thoughtNumber loop is meant to terminate, or what the response contains. The critical behavioral trait of this pattern โ that each call registers one step in a chain and the agent must repeat the call until nextThoughtNeeded is false โ is left entirely undisclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no redundancy or filler beyond a slightly ornamental adjective stack. It is efficient, though its brevity comes at the cost of the behavioral detail an agent actually needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a four-required-parameter, no-output-schema, no-annotation tool, the schema fully covers parameter names and meanings, so the minimum is met. However, the iterative call-until-done protocol that defines correct invocation is missing from both the description and the annotations, leaving a real gap for an agent that must decide whether to call again.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four required parameters are already documented in Indonesian in the schema itself. The description adds no additional meaning about how the parameters interact (for example, that thoughtNumber should increment monotonically or that totalThoughts is an estimate). Baseline 3 applies when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific activity: step-by-step deep reasoning for solving complex technical dilemmas, and names the tool's mechanism (Sequential Thinking). It is clear what the tool is for, though the phrasing 'alur kontemplasi nalar mendalam bertingkat' is ornate rather than precise. No sibling tool overlaps with it, so no differentiation is required.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives implicit usage guidance by scoping the tool to 'dilema teknis rumit' (complex technical dilemmas) solved step by step, which tells an agent roughly when to reach for it. It never says when NOT to use it, nor does it contrast it with simply reasoning inline, and there are no explicit preconditions or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sync_skills_from_githubB
Sinkronisasi dan perbarui pustaka skills dari repositori GitHub (secara default menarik dari ALDY711/apk-reverse-modifikasi).
| Name | Required | Description | Default |
|---|---|---|---|
| repo | No | URL atau slug GitHub repo (default: 'ALDY711/apk-reverse-modifikasi') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It discloses that the default operation pulls from ALDY711/apk-reverse-modifikasi and updates the library, but it does not explain whether local changes are overwritten or merged, which branch or ref is used, authentication or network requirements, or partial-failure behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence compactly states the action, resource, source, and default repository. There is no filler or structural clutter, and the repeated default remains directly useful for invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Basic invocation is clear for a tool with one optional, fully documented parameter. However, without annotations or an output schema, a mutating network synchronization tool needs more detail about overwrite or merge behavior, source selection and authentication, and success or failure outcomes to support fully reliable use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the repo field already documents its URL-or-slug format and default value. The description repeats the default repository but adds no further parameter semantics, so the schema appropriately does most of the work.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs (โSinkronisasi dan perbaruiโ) and identifies both the resource (โpustaka skillsโ) and the GitHub source, including a concrete default repository. Its action is implicitly distinct from the list, search, and guide siblings, but it does not explicitly differentiate itself from them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The wording implies that the tool should be used when the skills library needs to be refreshed from GitHub. It provides no explicit prerequisites, when-not guidance, or direction to inspection siblings such as list_antigravity_skills or search_skills when synchronization is unnecessary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
10 tool updates
v1.0.0- First observed
execute_apk_tool - First observed
forex_execute - First observed
generate_frida_script - First observed
get_rule - First observed
get_skill_guide - First observed
list_antigravity_skills - First observed
rea_execute - First observed
search_skills - First observed
sequential_thinking - First observed
sync_skills_from_github
TDQS
Scored across 10 tools
The skill-library tools (list/get/search/sync) are cleanly separated, but execute_apk_tool and rea_execute both perform binary APK reverse-engineering operations (repack/decompile/inject) with boundaries that only the prose clarifies. forex_execute and sequential_thinking also sit oddly in an otherwise RE-and-skills oriented set, making the overall purpose blurry.
Most tools follow verb_noun (list_antigravity_skills, get_skill_guide, generate_frida_script, sync_skills_from_github), but rea_execute and forex_execute flip to noun_verb and sequential_thinking is noun-only. Readable, yet the ordering convention is inconsistent across the set.
Ten tools is a healthy, well-scoped count for a gateway and none feel trivially redundant. The only concern is that two of them are broad 'execute anything' doors that compress many sub-operations into single opaque entries.
Skill management covers read/search/sync but has no create, update, or delete operation, and get_rule has no counterpart for editing rules. The execute_* gateways also provide no way to discover their supported subcommands or parameters, creating dead-end guesswork for the agent.
Maintenance
Related MCP Connectors
Hosted MCP server for live public-data APIs and Skills for AI agents.
Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows
The OpenRouter for tools. One MCP connection gives any AI agent 254 hosted tools, pay per call.
Connect any AI agent to 1,000+ apps and 27,000+ actions through one remote MCP server (OAuth).
Related MCP Servers
- FlicenseNot gradedqualityDmaintenancePersonal AI infrastructure gateway orchestrating memory, workflow automation, knowledge retrieval, and skill discovery as a unified MCP stack.-
- AlicenseAqualityFmaintenanceUnified MCP and skill management gateway for AI agents, enabling tool discovery, installation, and sharing with 99% context token savings.876 npm91Apache 2.0
- AlicenseAqualityDmaintenanceProvides 634+ curated production-ready AI skills for any MCP-compatible client, covering areas like security, frontend, backend, infrastructure, AI/ML, and architecture. Enables AI agents to access best practices, patterns, and solutions across multiple domains.612 npm1MIT
- FlicenseNot gradedqualityBmaintenanceEnables AI agents to access unified development tools including code generation, documentation synchronization, test case rendering, and architecture graph queries through a single MCP server.-