Appknox MCP Server
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LOG_LEVEL | No | Logging level (debug, info, warn, error). Default: info | |
| APPKNOX_CLI_PATH | No | Absolute path to the Appknox CLI binary. Default: /usr/local/bin/appknox | |
| APPKNOX_ACCESS_TOKEN | No | Your Appknox API access token. If not provided, read from ~/.config/appknox.json. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| appknox_whoamiA | Get information about the currently authenticated Appknox user |
| appknox_organizationsA | List all organizations accessible to the authenticated user |
| appknox_projectsA | List all projects with optional filtering by platform, package name, or search query |
| appknox_filesA | List all files (app versions) for a specific project. Requires project_id which can be obtained from appknox_projects. |
| appknox_analysesA | List all security analysis results (vulnerabilities) for a specific file. Requires file_id which can be obtained from appknox_files. |
| appknox_vulnerabilityB | Get detailed information about a specific vulnerability |
| appknox_owaspA | Get OWASP category details by ID (e.g., M1_2016) |
| appknox_uploadA | Upload a mobile application package (APK/IPA) for security scanning. Returns the file ID. IMPORTANT: The file_path must be an absolute path on the HOST machine filesystem (e.g., /Users/username/Downloads/app.apk on Mac, or C:\Users\username\Downloads\app.apk on Windows). Paths inside Claude Desktop sandbox (/mnt/user-data/, /tmp/ inside sandbox) will NOT work. The user must provide the real path where the file exists on their actual computer, not paths from drag-and-drop uploads. |
| appknox_cicheckA | Check for vulnerabilities based on risk threshold. Fails if vulnerabilities above threshold are found. Requires file_id (from appknox_files) and risk_threshold. |
| appknox_sarifC | Generate a SARIF (Static Analysis Results Interchange Format) report for the scanned file |
| appknox_reports_createA | Create a vulnerability analysis report for a file. Returns the report ID. |
| appknox_reports_downloadA | Download a vulnerability report for a file in CSV format. Requires file_id (from appknox_files). Automatically creates a new report if one does not exist. Returns the CSV content directly as text - no file path needed. |
| appknox_dastcheckB | Check the status of a dynamic scan and display results when complete. Requires file_id (from appknox_files) and risk_threshold. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/appknox/appknox-mcp-depcrecated'
If you have feedback or need assistance with the MCP directory API, please join our Discord server