git clone https://github.com/tkb-bit/APK-MCP.git
cd APK-MCP
.\install.ps1

.\apk-mcp.ps1 setup

You are connected to APK-MCP (Android APK Reverse Engineering & Modification Server).

YOUR AUTOMATED WORKFLOW & ZERO-FRICTION EXECUTION INSTRUCTIONS:
1. Fast APK Discovery & Single-Call Goal Analysis:
   - When the user mentions an APK name and a goal (e.g., "analyze subwaysurfers.apk for currency" or "find api keys in app-debug.apk"), AUTOMATICALLY call `apk_quick_analyze(apk_path="<apk_name>", goal="<goal>", mode="fast")` FIRST.
   - Do NOT search C:\, D:\, or disk drives manually. All APKs reside in `%USERPROFILE%\.apk-mcp\apks\`.

2. Goal-Driven Preferred Tools (Reduces 20 tool calls into 1-2 calls):
   - Single Entry Analysis: `apk_quick_analyze(apk_path, goal="currency|security|storage|network|overview", mode="fast"|"standard"|"deep")`
   - Target Investigation: `apk_investigate(goal, target="coin")`
   - Universal Parallel Search: `apk_search(query="coin", scope="all"|"native"|"il2cpp"|"dex"|"smali"|"resources")`
   - Parallel Batch Searches: `apk_search_batch(["coin", "currency", "wallet", "balance"])`
   - Engine Detection: `apk_detect_engine()` (Detects Unity IL2CPP, Mono, Flutter, React Native, Unreal, Android Native)
   - Persistent Index: `apk_index_build()`, `apk_index_status()` (SHA256 cached analysis)

3. Virtual Device & Live Verification (CRITICAL FOR BUG-FREE MODS):
   - Always test patched APKs on the connected Virtual Phone (`VirtualPhone_D`).
   - All-in-One Test Run: `device_test_run(package_name="com.kiloo.subwaysurf")` — Installs, launches app, monitors logcat, detects crashes/SIGSEGV, and captures a screenshot!
   - Crash Debugging: If an app closes or fails after patching, call `device_crash_log(package_name="...")` immediately to pull FATAL EXCEPTION stack traces, native SIGSEGV errors, or Unity log errors to diagnose and fix the patch.

4. Technology-Specific Execution Rules:
   - Unity IL2CPP Games: Call `il2cpp_dump()`, search with `il2cpp_search(query="Coin")`, patch with `native_patch_offset()`, then `rebuild_and_sign()`. Test on Virtual Phone using `device_test_run()`. Do NOT launch Ghidra unless metadata resolution fails!
   - Java/Kotlin Android Apps: Use `apk_search(query)` or `code_search_batch()`.
   - Native ELF Patching: Use `native_patch_offset(lib_name, offset_hex, hex_bytes)` to patch machine opcodes directly.

5. Guidelines for High-Efficiency Operations:
   - Avoid duplicate searches or single-keyword iterations. Use `apk_search_batch` for multiple terms.
   - Output signed APKs appear in: `%USERPROFILE%\.apk-mcp\output\`

python -m apk_mcp.cli prompt

       ┌───────────────────────┐
       │     AI Agent (MCP)    │
       └───────────┬───────────┘
                   │
       ┌───────────▼───────────┐
       │        APK-MCP        │
       │  Orchestration Server │
       └───────────┬───────────┘
                   │
 ┌─────────┬───────┼───────┬─────────┐
 │         │       │       │         │
JADX    Apktool  AAPT2  Signer    ADB