Skip to main content
Glama

Related Servers

Alternatives to vesper

No user-submitted related servers found.

    Related Servers

    • A
      license
      B
      quality
      D
      maintenance
      MCP server for iOS reverse engineering, enabling static analysis of IPA/Mach-O binaries and dynamic instrumentation via Frida for tasks like IAP interception and FairPlay decryption.
      32
      3
      MIT
    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI agents to perform local iOS reverse engineering through MCP by importing IPA files, querying Mach-O and Ghidra analysis for functions, references, calls, and approximate pseudocode, and saving evidence-backed findings. It supports investigation cases and exports HTML, Markdown, or JSON reports with provenance.
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      MCP server that enables agents to reverse engineer applications, from high-level behavior down to native binaries, using tools like Hopper and Ghidra.
      415,576 npm
      357,435
      MIT
    • F
      license
      B
      quality
      D
      maintenance
      MCP server for iOS Frida exploration enabling app control, UI interaction, and media import via spawn sessions on jailbroken devices.
      53
      48 npm
      2
      -
    • A
      license
      A
      quality
      A
      maintenance
      Enables Android APK reverse engineering and Flutter runtime injection through a six-step pipeline of decompile, analyze, synthesize, inject, patch, and repackage. Provides MCP tools for authorized security research and penetration testing.
      9
      43 npm
      5
      MIT
    • A
      license
      B
      quality
      B
      maintenance
      Enables AI agents and automation to perform Ghidra reverse-engineering tasks through MCP, including decompilation, live debugging, P-code emulation, data-flow analysis, and headless script execution, with specialized AArch64-aware emulation.
      8
      Apache 2.0

    TDQS

    B3.2/5.0

    Scored across 19 tools

    Disambiguation3/5

    Most tools map cleanly to a resource+action, but several boundaries blur: ui_snapshot and ui_capture both return bounded UIKit summaries (capture also returns a snapshot_id), frida_detach vs frida_unhook differ only by scope, and platform_tool exposes objc_get_ivars/ui_inspect_view/device_* primitives that duplicate top-level tools. The verbose descriptions mitigate this but an agent must read carefully to pick the right one.

    Naming Consistency4/5

    There is a predictable domain-prefix convention (device_, frida_, objc_, ui_, app_, debug_, job_, server_, platform_), all in snake_case. Minor deviations exist within groups (verb-first frida_get_events/frida_trace_method vs. noun-first device_info/objc_dump/ui_snapshot), but the scheme remains readable and guessable.

    Tool Count4/5

    Nineteen tools is on the heavy side, but the domain (iOS dynamic analysis over SSH+Frida) genuinely needs distinct workflows for device discovery, ObjC introspection, UI automation, logging, debugging, decryption and job control. Some consolidation is possible (ui_snapshot/ui_capture, detach/unhook), but no tool looks wholly gratuitous.

    Completeness3/5

    Coverage is strong for the inspection/RE lifecycle (discover, attach, query, trace, dump, UI, logs, debug, decrypt) plus a platform_tool escape hatch for ida_*/tweak_* primitives. However, obvious gaps remain in the explicit surface: no file transfer (pull/push), no process list/launch/kill, and no shell execution, which agents will hit in real iOS workflows.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues