Appknox MCP Server
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LOG_LEVEL | No | Logging level (debug, info, warn, error). Default: info | |
| APPKNOX_CLI_PATH | No | Absolute path to the Appknox CLI binary. Default: /usr/local/bin/appknox | |
| APPKNOX_ACCESS_TOKEN | No | Your Appknox API access token. If not provided, read from ~/.config/appknox.json. |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| appknox_whoamiA | Get information about the currently authenticated Appknox user |
| appknox_organizationsA | List all organizations accessible to the authenticated user |
| appknox_projectsA | List all projects with optional filtering by platform, package name, or search query |
| appknox_filesA | List all files (app versions) for a specific project. Requires project_id which can be obtained from appknox_projects. |
| appknox_analysesA | List all security analysis results (vulnerabilities) for a specific file. Requires file_id which can be obtained from appknox_files. |
| appknox_vulnerabilityB | Get detailed information about a specific vulnerability |
| appknox_owaspA | Get OWASP category details by ID (e.g., M1_2016) |
| appknox_uploadA | Upload a mobile application package (APK/IPA) for security scanning. Returns the file ID. IMPORTANT: The file_path must be an absolute path on the HOST machine filesystem (e.g., /Users/username/Downloads/app.apk on Mac, or C:\Users\username\Downloads\app.apk on Windows). Paths inside Claude Desktop sandbox (/mnt/user-data/, /tmp/ inside sandbox) will NOT work. The user must provide the real path where the file exists on their actual computer, not paths from drag-and-drop uploads. |
| appknox_cicheckA | Check for vulnerabilities based on risk threshold. Fails if vulnerabilities above threshold are found. Requires file_id (from appknox_files) and risk_threshold. |
| appknox_sarifC | Generate a SARIF (Static Analysis Results Interchange Format) report for the scanned file |
| appknox_reports_createA | Create a vulnerability analysis report for a file. Returns the report ID. |
| appknox_reports_downloadA | Download a vulnerability report for a file in CSV format. Requires file_id (from appknox_files). Automatically creates a new report if one does not exist. Returns the CSV content directly as text - no file path needed. |
| appknox_dastcheckB | Check the status of a dynamic scan and display results when complete. Requires file_id (from appknox_files) and risk_threshold. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/appknox/appknox-mcp-depcrecated'
If you have feedback or need assistance with the MCP directory API, please join our Discord server