Read a non-secret file inside workspaceRoot.

Search workspaceRoot. Uses ripgrep when available and falls back to a built-in scanner.

[approval required][workspace write][risk:dangerous] Apply a unified diff after validating all touched paths stay inside workspaceRoot and are not forbidden.

Return git diff for workspaceRoot.

[approval required][workspace write][risk:dangerous] Create and checkout a guarded feature branch. Branch must match allowedBranchPattern.

[approval required][workspace write][risk:dangerous] Commit changes only while on an allowed feature/ai branch. Optionally stage specific non-secret paths.

[approval required][workspace write][risk:dangerous] Open a pull request with GitHub CLI from the current allowed feature branch.

Check host/project readiness for Android, iOS, Flutter, React Native, CI, or all environments.

Return supported host/platform requirements for this MCP package.

[approval required][workspace write][network][risk:network] Check Appium readiness, optionally install a driver and start a detached Appium server.

Detect Flutter, React Native, or native Android project type.

[approval required][workspace write][network][risk:dangerous] Install dependencies for the detected or specified mobile project type.

[approval required][workspace write][network][risk:dangerous] Run lint/static analysis for Flutter, React Native, or Android.

[approval required][workspace write][network][risk:dangerous] Run unit tests for Flutter, React Native, or Android.

[approval required][workspace write][network][risk:dangerous] Build a debug APK and return discovered APK artifact paths.

[approval required][workspace write][network][risk:dangerous] Build a release candidate APK. Release signing requirements are delegated to the target project.

List build log artifacts emitted by this MCP server.

List Android devices via adb devices -l.

[approval required][device mutation][risk:dangerous] Start an Android emulator by AVD name. Returns after launching or optional boot wait.

[approval required][device mutation][risk:dangerous] Stop an Android emulator through adb emu kill.

[approval required][device mutation][risk:dangerous] Install or replace an APK on an Android device.

[approval required][device mutation][risk:dangerous] Uninstall an Android package from a device.

[approval required][device mutation][risk:dangerous] Clear app data for an Android package.

[approval required][device mutation][risk:dangerous] Grant one or more Android runtime permissions to a package.

Capture a PNG screenshot from an Android device into artifacts.

Pull Android logcat into artifacts. Optionally filter by package pid when available.

List available iOS simulators via xcrun simctl.

[approval required][device mutation][risk:dangerous] Boot an iOS simulator and optionally wait until boot completes.

[approval required][device mutation][risk:dangerous] Shutdown an iOS simulator.

[device mutation][risk:device] Build an iOS simulator app with xcodebuild into MCP artifacts.

[approval required][device mutation][risk:dangerous] Install an .app bundle on an iOS simulator.

[approval required][device mutation][risk:dangerous] Launch an installed iOS simulator app by bundle id.

Capture an iOS simulator screenshot into artifacts.

Collect recent simulator logs into artifacts.

[approval required][device mutation][risk:dangerous] Create an Appium session. Pass W3C capabilities or raw capabilities object.

[approval required][device mutation][risk:dangerous] Delete an Appium session.

Capture screenshot and page source for the current Appium session, optionally waiting for app UI readiness.

Return raw Appium page source XML.

Return a compact accessibility summary parsed from page source.

[approval required][device mutation][risk:dangerous] Tap a visible element by text with exact-first matching before contains fallback.

[approval required][device mutation][risk:dangerous] Tap by accessibility id.

[approval required][device mutation][risk:dangerous] Tap by Android resource id or Appium id locator.

[approval required][device mutation][risk:dangerous] Tap screen coordinates. Use only when semantic locators are unavailable.

[approval required][device mutation][risk:dangerous] Type text into an element located by accessibility id, id, xpath, text, or native selector.

[approval required][device mutation][risk:dangerous] Perform a touch swipe by coordinates.

[approval required][device mutation][risk:dangerous] Send Android/iOS back navigation to the Appium session.

Wait until a locator becomes visible.

Assert that a locator is visible. Returns passed false instead of throwing when not visible.

Assert that a locator is not visible within timeout.

Assert current Appium page source contains expected text.

Assert logcat or a saved log file has no crash signatures.

Assert the Appium session and page source are reachable, distinguishing automation failures from app crashes.

[network][risk:network] Call an API and assert status and optional body substrings.

Collect screenshot, page source, and logcat evidence where available.

Assert a navigation target by expected Appium page source text.

Assert clickable or input-like nodes have a text, label, name, content-desc, or resource-id.

Compare two PNG screenshots and assert the pixel diff ratio is at or below maxDiffRatio.

Run a read-only sqlite query and assert exact output or expected substring.

Compute SHA-256 for a workspace artifact or evidence file.

Infer mobile screens, routes, transitions, and visible text candidates from source code.

Generate candidate mobile E2E scenarios from static source-flow analysis for an AI agent to execute/refine.

[approval required][device mutation][risk:dangerous] Run a high-level JSON flow DSL over an Appium session: waitText, tapText, type, assertText, observe, collectEvidence, back, swipe, checkpoint.

[workspace write][risk:write] Record a runtime screen checkpoint from Appium source/session and optional action needed to reach the next checkpoint.

[workspace write][risk:write] Record the ordered checkpoint ids for a test run. The latest passed run becomes the default replay path.

Match the current screen against recorded checkpoints and return Appium actions needed to reach a target checkpoint.

[approval required][device mutation][risk:dangerous] Auto-advance an Appium session from a previously seen screen to the latest or requested checkpoint.

Read recorded flow checkpoints, runs, and code-flow analyses.

[approval required][workspace write][risk:dangerous] Clear flow memory under artifactsDir. This does not modify app source code.

[workspace write][risk:write] Append one build-test-verify loop iteration as JSONL evidence.

[workspace write][risk:write] Generate a Markdown report from recorded iterations.

Read recorded loop iterations.

Create a JSON manifest of files under the MCP artifacts directory.

[workspace write][risk:write] Append Markdown to GitHub Actions step summary or a workspace fallback file.

[approval required][workspace write][network][risk:dangerous] Create a GitHub PR comment through gh. Uses current PR when prNumber is omitted.

[workspace write][risk:write] Emit GitHub Actions warning/error annotations from findings.

[approval required][device mutation][risk:dangerous] Run build -> install -> Appium scripted test -> verification -> evidence -> loop record for Android.

[approval required][device mutation][risk:dangerous] Run iOS simulator build -> install/launch -> Appium XCUITest scripted test -> verification -> evidence -> loop record.

Scan mobile source and platform configuration for deterministic security signals without running target code.

Generate a deterministic mobile security test plan from a source-scan report for an AI or engineer to execute.

Re-run the deterministic source scan and compare it with a baseline report after fixes.

Evaluate a source-scan report against a severity threshold before release or merge.

List effective tool policy metadata for MCP clients and approval gates.