Apktool MCP Server
apktool-mcp-server (Teil von Zinns Reverse Engineering MCP Suite)
⚡ Vollständig automatisierter, auf apktool basierender MCP-Server zur Analyse von Android-APKs mithilfe von LLMs wie Claude – decken Sie Schwachstellen auf, analysieren Sie Manifeste und führen Sie mühelos Reverse Engineering durch.
Mit KI-Tools erstelltes Bild.
🤖 Was ist apktool-mcp-server?
apktool-mcp-server ist ein MCP-Server für das Apk-Tool , der direkt in das Model Context Protocol (MCP) integriert ist, um Live-Reverse-Engineering-Unterstützung mit LLMs wie Claude bereitzustellen.
Denken Sie: „Dekompilieren → Kontextbezogene Codeüberprüfung → KI-Empfehlungen“ – alles in Echtzeit.
Sehen Sie sich die Demo an!
https://github.com/user-attachments/assets/d50251b8-6b1c-4341-b18e-ae54eb24a847
Lösung der CTFs
https://github.com/user-attachments/assets/c783a604-a636-4e70-9fa8-37e3d219b20b
Related MCP server: ghidraMCP
Andere Projekte in der Zin MCP Suite
Aktuelle MCP-Tools
Die folgenden MCP-Tools sind verfügbar:
build_apk()– Erstellen Sie eine APK aus einem dekodierten APKTool-Projekt.get_manifest()— Ruft den Inhalt von AndroidManifest.xml aus einem dekodierten APK-Projekt ab.get_apktool_yml()— Ruft apktool.yml-Informationen aus einem dekodierten APK-Projekt ab.list_smali_directories()— Listet alle Smali-Verzeichnisse in einem Projekt auf.list_smali_files()— Listet Smali-Dateien in einem bestimmten Smali-Verzeichnis auf, optional gefiltert nach Paketpräfix.get_smali_file()— Ruft den Inhalt einer bestimmten Smali-Datei nach Klassennamen ab.modify_smali_file()— Ändert den Inhalt einer bestimmten Smali-Datei.list_resources()— Listet Ressourcen in einem Projekt auf, optional gefiltert nach Ressourcentyp.get_resource_file()— Ruft den Inhalt einer bestimmten Ressourcendatei ab.modify_resource_file()— Ändern Sie den Inhalt einer bestimmten Ressourcendatei.search_in_file()— Suche nach einem Muster in Dateien mit angegebenen Erweiterungen.clean_project()– Bereinigen Sie ein Projektverzeichnis, um es für den Neuaufbau vorzubereiten.decode_apk()– Dekodieren Sie eine APK-Datei mit APKTool und extrahieren Sie Ressourcen und Smali-Code.
🗒️ Beispielaufforderungen
🔍 Grundlegendes Code-Verständnis
„Listen Sie alle kleinen Verzeichnisse für das Dvac-Projekt auf.“
„Zeigen Sie mir alle Smali-Dateien unter dem Paketpräfix com.vulnerable.component im Dvac-Projekt.“
„Holen Sie sich den Smali-Code für die Klasse com.vulnerable.component.MainActivity.“
„Vergleichen Sie MainActivity.smali mit der vorherigen Version und zeigen Sie die Unterschiede.“
„Suchen Sie nach der Verwendung von startActivity in Smali-Dateien des Dvac-Projekts.“
🛡️ Schwachstellenerkennung
„Analysieren Sie die deklarierten Berechtigungen in der dvac AndroidManifest.xml und kennzeichnen Sie gefährliche.“
„Suchen Sie in allen XML- und SMALI-Dateien im Projekt nach fest codierten URLs oder IPs.“
„Finden Sie alle Verwendungen von PendingIntent.getActivity in Smali-Dateien.“
„Suchen Sie in der AndroidManifest.xml von dvac nach exportierten Aktivitäten oder Empfängern.“
„Listen Sie alle Smali-Dateien auf, die auf android.permission.SEND_SMS oder READ_CONTACTS zugreifen.“
🛠️ Reverse Engineering-Helfer
„Dekodieren Sie diese APK: dvac.apk und erstellen Sie ein Projekt namens dvac.“
„Erstellen Sie ein neues APKTool-Projekt namens Test-Harness.“
„Bereinigen Sie das DVAC-Projekt vor dem Neuaufbau.“
„Extrahieren Sie DEX-Dateien aus dem Dvac-Projekt zur externen Analyse.“
„Ändern Sie MainActivity.smali, um am Anfang von onCreate() eine Protokollzeile einzufügen.“
📦 Statische Analyse
„Holen Sie sich die vollständige AndroidManifest.xml vom dvac-Projekt.“
„Zeigen Sie den Inhalt von apktool.yml für das dvac-Projekt.“
„Listet alle Ressourcendateien vom Typ Layout auf.“
„Suchen Sie in allen Ressourcen- und Smali-Dateien nach dem Wort Passwort.“
„Überprüfen Sie, welche Berechtigungen verwendet werden, und vergleichen Sie sie mit den typischen Risiken einer Überberechtigung.“
🤖 KI-Code-Änderung
„Ändern Sie die Methode onCreate() in MainActivity.smali, um eine Toast-Nachricht hinzuzufügen.“
„Ersetzen Sie alle http://-Links durch https:// in strings.xml.“
„Fügen Sie allen Aktivitäten in der Datei AndroidManifest.xml das Attribut android:exported=false hinzu.“
„Patchen Sie die Methode validateLogin in LoginManager.smali, damit sie immer true zurückgibt.“
„Fügen Sie jeder Methode in MainActivity.smali Protokollierungsanweisungen hinzu.“
📄 Dokumentation & Metadaten
„Listen Sie alle dekodierten APKTool-Projekte im Arbeitsbereich auf.“
„Zeigen Sie mir die apktool.yml-Konfiguration, um die Version, die ursprünglichen APK-Metadaten und die Komprimierungseinstellungen zu überprüfen.“
„Verbinden Sie alle verfügbaren Android-Geräte über ADB. (Zur Migration auf den ADB MCP-Server.)“
„Holen Sie sich Metadaten zum Projekt dvac aus seiner apktool.yml.“
„Überprüfen Sie, welche APKTool-Version aktuell auf dem Server installiert ist.“
🛠️ Erste Schritte
1. Download von Releases: https://github.com/zinja-coder/apktool-mcp-server/releases
# 0. Download the apktool-mcp-server-<version>.zip
https://github.com/zinja-coder/apktool-mcp-server/releases
# 1.
unzip apktool-mcp-server-<version>.zip
├apktool-mcp-server/
├── apktool_mcp_server.py
├── requirements.txt
├── README.md
├── LICENSE
# 2. Navigate to apktool-mcp-server directory
cd apktool-mcp-server
# 3. This project uses uv - https://github.com/astral-sh/uv instead of pip for dependency management.
## a. Install uv (if you dont have it yet)
curl -LsSf https://astral.sh/uv/install.sh | sh
## b. OPTIONAL, if for any reasons, you get dependecy errors in apktool-mcp-server, Set up the environment
uv venv
source .venv/bin/activate # or .venv\Scripts\activate on Windows
## c. OPTIONAL Install dependencies
uv pip install httpx fastmcp
# The setup for apktool-mcp-server is done.2. Ausführen auf lokalem LLM mit Ollama und Zin MCP-Client – Empfohlen
⚡ Leichtgewichtiger, schneller, einfacher, CLI-basierter MCP-Client für STDIO MCP-Server, um die Lücke zu schließen und eine Brücke zwischen Ihren lokalen LLMs mit Ollama und MCP-Servern zu schlagen.
Jetzt prüfen: https://github.com/zinja-coder/zin-mcp-client
Demo: In Kürze verfügbar ...
🤖 3. Claude Desktop-Setup
Stellen Sie sicher, dass Claude Desktop mit aktiviertem MCP ausgeführt wird.
Ich habe beispielsweise Folgendes für Kali Linux verwendet: https://github.com/aaddrick/claude-desktop-debian
Konfigurieren und fügen Sie den MCP-Server zur LLM-Datei hinzu:
nano ~/.config/Claude/claude_desktop_config.jsonWindows:
%APPDATA%\Claude\claude_desktop_config.jsonmacOS:
~/Library/Application Support/Claude/claude_desktop_config.json
Und folgender Inhalt darin:
{
"mcpServers": {
"apktool-mcp-server": {
"command": "/<path>/<to>/uv",
"args": [
"--directory",
"</PATH/TO/>apktool-mcp-server/",
"run",
"apktool_mcp_server.py"
]
}
}
}Ersetzen:
path/to/uvmit dem tatsächlichen Pfad zu Ihreruvausführbaren Dateipath/to/apktool-mcp-servermit dem absoluten Pfad zum Ort, an dem Sie dieses Repository geklont haben
Navigieren Sie dann durch den Code und interagieren Sie mithilfe der integrierten Integration über Eingabeaufforderungen zur Codeüberprüfung in Echtzeit.
Zum Melden von Fehlern, Problemen, Funktionsvorschlägen, Leistungsproblemen, allgemeinen Fragen und Dokumentationsproblemen.
Bitte öffnen Sie ein Problem mit der entsprechenden Vorlage.
Auf dem Claude Desktop Client getestet, die Unterstützung für andere KI wird in Kürze getestet!
🙏 Credits
Dieses Projekt ist ein MCP-Server für Apktool , ein hervorragendes Open-Source-Reverse-Engineering-Tool für Android, das von @iBotPeaches entwickelt und gepflegt wird. Die gesamte Kernlogik für die APK-Dekodierung und Ressourcenverarbeitung gehört zu Apktool. Ich habe es lediglich erweitert, um meinen MCP-Server mit KI-Funktionen zu unterstützen.
Die ursprüngliche README.md von Apktool ist hier in diesem Repository als Referenz und Quelle enthalten.
Vielen Dank auch an @aaddrick für die Entwicklung des Claude-Desktops für Debian-basiertes Linux.
Und zum Schluss möchten wir uns bei @anthropics für die Entwicklung des Model Context Protocol und beim @FastMCP -Team bedanken.
Und alle Betreuer und Mitwirkenden von Open-Source-Projekten, die Bibliotheken und Abhängigkeiten bereitstellen, um Projekte wie dieses zu ermöglichen.
📄 Lizenz
apktool-mcp-server und alle zugehörigen Projekte erben den Apache 2.0
⚖️ Rechtlicher Hinweis
Haftungsausschluss
Die Tools apktool-mcp-server und alle zugehörigen Tools dieses Projekts dienen ausschließlich Bildungs-, Forschungs- und ethischen Sicherheitsbewertungszwecken. Sie werden „wie besehen“ und ohne jegliche ausdrückliche oder stillschweigende Gewährleistung bereitgestellt. Die Nutzer sind allein dafür verantwortlich, dass ihre Nutzung dieser Tools allen geltenden Gesetzen, Vorschriften und ethischen Richtlinien entspricht.
Durch die Nutzung apktool-mcp-server erklären Sie sich damit einverstanden, diese nur in Umgebungen zu verwenden, zu deren Test Sie berechtigt sind, z. B. in Anwendungen, die Ihnen gehören oder für deren Analyse Sie eine ausdrückliche Berechtigung haben. Jeglicher Missbrauch dieser Tools für unberechtigtes Reverse Engineering, die Verletzung von Rechten an geistigem Eigentum oder böswillige Aktivitäten ist strengstens untersagt.
Die Entwickler von apktool-mcp-server haften nicht für Schäden, Datenverluste, Rechtsfolgen oder sonstige Folgen, die sich aus der Nutzung oder dem Missbrauch dieser Tools ergeben. Die Nutzer übernehmen die volle Verantwortung für ihr Handeln und die Auswirkungen ihrer Nutzung.
Gehen Sie verantwortungsvoll mit uns um. Respektieren Sie geistiges Eigentum. Befolgen Sie die ethischen Hacking-Praktiken.
🙌 Beitragen oder unterstützen
Beitragen
Fanden Sie es hilfreich? Geben Sie ihm ein ⭐️
Haben Sie Ideen? Eröffnen Sie ein Problem oder senden Sie eine PR
Etwas darauf gebaut? Schicken Sie mir eine DM oder erwähnen Sie mich – ich füge es der README-Datei hinzu!
Geprüft und Bewertungsabzeichen erhalten
Vielen Dank an Mseep.net für die Prüfung und Bereitstellung des Assessment Badge.
Mit ❤️ für die Reverse-Engineering- und KI-Communitys entwickelt.
Available Tools
16 toolsanalyze_project_structureB
Analyze the structure of a decoded APK project and provide comprehensive metadata.
| Name | Required | Description | Default |
|---|---|---|---|
| project_dir | Yes | Path to the APKTool project directory |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and the description does not disclose whether the tool is read-only, destructive, or what side effects it may have. 'Provide comprehensive metadata' is vague; the output schema exists but is not leveraged in the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, concise and front-loaded. Could include more details but is not verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While the tool is simple with one parameter and an output schema exists, the description lacks usage guidelines and behavioral transparency, making it incomplete for an agent to fully understand when and how to use it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter with 100% schema description coverage. The tool description adds no additional meaning beyond 'Path to the APKTool project directory' already in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool analyzes the structure of a decoded APK project and provides comprehensive metadata. The verb 'Analyze' and resource 'structure of a decoded APK project' are specific, and it distinguishes from sibling tools like decode_apk or build_apk.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like get_apktool_yml or list_resources. Prerequisites ('must have a decoded APK') are implied but not stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
build_apkB
Build an APK file from a decoded APKTool project with enhanced validation.
| Name | Required | Description | Default |
|---|---|---|---|
| debug | No | Build with debugging info | |
| timeout | No | Command timeout in seconds | |
| force_all | No | Force rebuild all files | |
| output_apk | No | Optional output APK path | |
| project_dir | Yes | Path to the APKTool project directory |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It mentions 'enhanced validation' but does not explain what that entails (e.g., checks, side effects like overwriting existing APK). Lacks information on permissions, required tools (apktool), or potential errors.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, no wasted words. Front-loaded with the core action and key qualifier ('enhanced validation').
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema, the description lacks completeness. It does not mention the output location or how validation works. For a build tool with 5 parameters, more context is needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 5 parameters. The description adds no additional meaning beyond the schema, meeting the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool builds an APK from a decoded APKTool project, which is distinct from sibling tools like decode_apk (decodes) and clean_project (cleans). The verb 'Build' and resource 'APK file' are specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives such as decode_apk or analyze_project_structure. Lacks prerequisites (e.g., must have a decoded project) or exclusions (e.g., not for building signed APKs).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
clean_projectA
Clean a project directory to prepare for rebuilding with enhanced backup support.
| Name | Required | Description | Default |
|---|---|---|---|
| backup | No | Whether to create a backup of build directories before cleaning | |
| project_dir | Yes | Path to the APKTool project directory |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the behavioral disclosure burden. It mentions 'enhanced backup support' indicating potential destructive action with a safety net, but does not detail what exactly is removed or whether the backup is recoverable. The behavioral traits are partially transparent but could be more explicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that encapsulates the tool's purpose and key feature (backup support). Every part is informative with no redundancy. It is appropriately concise for a simple tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (2 parameters, one required) and the presence of an output schema, the description provides sufficient context for the core functionality. It could be improved by mentioning what types of files or directories are cleaned, but overall it is complete enough for an agent to understand the tool's role.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% coverage for parameter descriptions, so the schema already explains the parameters. The tool description does not add any additional meaning or context beyond what is in the schema. Per guidelines, baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: cleaning a project directory to prepare for rebuilding. It specifies the resource (project directory) and the action (clean), and the phrase 'enhanced backup support' adds context. This effectively distinguishes it from sibling tools like build_apk or decode_apk.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage before rebuilding but does not explicitly state when to use this tool versus alternatives like build_apk. No guidance on when not to use or prerequisites. It could clarify that it is intended for cleaning build artifacts before a fresh build.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
decode_apkC
Decode an APK file using APKTool with comprehensive validation and error handling.
| Name | Required | Description | Default |
|---|---|---|---|
| force | No | Force delete destination directory if it exists | |
| no_res | No | Do not decode resources | |
| no_src | No | Do not decode sources | |
| timeout | No | Command timeout in seconds | |
| apk_path | Yes | Path to the APK file to decode | |
| output_dir | No | Custom output directory (optional) |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description claims 'comprehensive validation and error handling' but is vague. With no annotations, the description carries full burden but fails to disclose side effects (e.g., file overwrites), required permissions, or execution characteristics beyond what's in the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with the primary action. Efficient but could be more informative without becoming verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 6 parameters and a complex operation (APK decoding), the description lacks details about output location, file creation, or prerequisites. Output schema exists but description should contextualize the tool's effect.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all 6 parameters. Description adds no additional meaning, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses a specific verb ('decode') and resource ('APK file'), clearly stating the tool's primary function. It lacks mention of output or distinguishing features but is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus siblings. Agent must infer from the name and schema. No alternatives or exclusions mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_apktool_ymlA
Get apktool.yml information from a decoded APK project with validation.
| Name | Required | Description | Default |
|---|---|---|---|
| project_dir | Yes | Path to APKTool project directory |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It mentions 'validation' but does not disclose what validation entails, whether the tool is read-only, or what happens if the file is missing or the project is invalid.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, focused sentence that conveys the essential purpose without unnecessary words. It is appropriately concise, though slightly more structure (e.g., listing output format) could improve clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one parameter) and the presence of an output schema (not shown but indicated), the description provides sufficient context for a basic understanding. However, it could benefit from a brief note on the validation process.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a clear parameter description ('Path to APKTool project directory'). The description adds no additional meaning beyond the schema for the single parameter, so baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Get'), the specific resource ('apktool.yml information'), and the context ('from a decoded APK project'). It also mentions 'with validation', which distinguishes it from other sibling tools like 'get_manifest' or 'get_resource_file'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context (when to use: to get apktool.yml information from a decoded APK project) but does not provide explicit when-not-to-use guidance or mention alternative sibling tools for similar operations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_manifestB
Get the AndroidManifest.xml content from a decoded APK project with validation.
| Name | Required | Description | Default |
|---|---|---|---|
| project_dir | Yes | Path to the APKTool project directory |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description bears full burden. Mentions 'validation', implying some processing beyond simple retrieval, but does not detail validation behavior, side effects, or error conditions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, 11 words, front-loaded with action and target. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Minimal description suffices for a simple read operation with output schema present, but lacks behavioral details and usage context that would help the agent select correctly among many sibling tools.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. Description adds no additional meaning beyond the schema's parameter description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool retrieves AndroidManifest.xml content from a decoded APK project, with additional validation. Differentiates from siblings like get_apktool_yml or get_resource_file by specifying the target file.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives, nor prerequisites (e.g., project must be decoded). Siblings exist for similar files but no comparison provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_resource_fileB
Get content of a specific resource file with validation and metadata.
| Name | Required | Description | Default |
|---|---|---|---|
| project_dir | Yes | Path to the APKTool project directory | |
| resource_name | Yes | Name of the resource file | |
| resource_type | Yes | Resource type (e.g., "layout", "drawable") |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description bears full burden. It mentions 'validation and metadata' but does not explain what validation is performed, what metadata is returned, or any side effects. Behavior such as authentication, permissions, or response format (though an output schema exists) is not disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that front-loads the core purpose ('Get content of a specific resource file') without any wasted words. It efficiently communicates the tool’s function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema and high schema coverage, the description is minimally adequate. However, it lacks details on return value structure, error handling, or any additional behavioral context that would fully equip an agent, especially since no annotations assist.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all three parameters. The description adds no extra meaning beyond the schema, such as format or constraints. Baseline score of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves content of a specific resource file with validation and metadata. The verb 'Get' and resource 'resource file' are specific, and mentioning 'validation and metadata' adds distinct context. It is well differentiated from siblings like list_resources or get_smali_file.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives (e.g., list_resources to browse files or modify_resource_file to edit). No exclusions or prerequisites are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_smali_fileC
Get content of a specific smali file by class name with validation.
| Name | Required | Description | Default |
|---|---|---|---|
| class_name | Yes | Full class name (e.g., com.example.MyClass) | |
| project_dir | Yes | Path to the APKTool project directory |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must fully disclose behavior. Only mentions 'with validation' without specifics. No details on side effects, error conditions, or access requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Very concise single sentence. Front-loaded with purpose. Could benefit from breaking into multiple sentences for structure, but not overly verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Has output schema, so return values are covered. Minimal description is adequate for a simple read operation, but lacks details on validation and expected results.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. Description adds no extra meaning beyond what schema already provides (class_name and project_dir descriptions).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it gets content of a smali file by class name with validation. Distinguishes from listing or modifying siblings, but not explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like list_smali_files or modify_smali_file. Missing context for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_workspace_infoA
Get information about the APKTool MCP server workspace and current projects.
Returns: Dictionary with workspace information and project list
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It states that the tool returns a dictionary but does not disclose whether it has any side effects, requires a workspace to be initialized, or is read-only. Given the tool's name implies a read operation, the description lacks explicit confirmation of behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with two sentences. Every word serves a purpose: stating the action and the return type. No fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters and the presence of an output schema, the description provides adequate high-level context. However, it lacks details like what 'workspace information' includes or how the 'project list' is structured. The agent might need to rely on the output schema for specifics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so baseline 4 is appropriate. The description does not add parameter-specific meaning beyond the schema (which has no properties). It does mention the return type (dictionary), which is output-related but not necessary for the parameter dimension.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to get workspace information and project list. It uses a specific verb ('Get information') and resource ('APKTool MCP server workspace and current projects'). This distinguishes it from sibling tools that focus on specific project operations like build_apk, decode_apk, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus its siblings (e.g., analyze_project_structure, get_apktool_yml). It simply states what it does, leaving the agent to infer context from the tool name and sibling names alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
health_checkA
Check the health status of the APKTool MCP server and APKTool installation.
Returns: Dictionary containing server status and APKTool availability
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite no annotations, the description discloses the return value (a dictionary with server status and APKTool availability), providing useful behavioral context beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose, no wasted words. Extremely concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple health check with no parameters and an output schema, the description is complete. It could mention that it is a read-only operation, but not a major gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With zero parameters and 100% schema coverage, the description does not need to add parameter info; baseline 4 is appropriate for no parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks health status of the APKTool MCP server and APKTool installation, which is specific and distinguishes it from sibling tools (e.g., build_apk, decode_apk).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is used to verify health, but lacks explicit guidance on when to use it versus alternatives, or any when-not scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_resourcesC
List resources with pagination support and enhanced metadata.
| Name | Required | Description | Default |
|---|---|---|---|
| count | No | Number of items to return (0 means use default) | |
| offset | No | Starting offset for pagination | |
| project_dir | Yes | Path to the APKTool project directory | |
| resource_type | No | Optional resource type to filter by (e.g., "layout", "drawable") |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It only states it lists resources with pagination and 'enhanced metadata', but does not disclose any behavioral traits like performance impact, authorization needs, or what 'enhanced metadata' entails. The description is insufficient for safe and effective use.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence (8 words) and front-loaded with the main action. However, it is so brief that it sacrifices informative value; a bit more detail would improve it without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 4 parameters, no annotations, and an output schema, the description is minimally viable but leaves gaps. It does not clarify what 'enhanced metadata' means or the scope of 'resources'. The output schema exists, so return values don't need explanation, but the description still lacks context about the tool's domain (APK resources).
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description mentions pagination (aligns with 'count' and 'offset') but does not add meaning beyond the schema's field descriptions. No param-specific explanations are added.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'List' and resource 'resources', and adds features 'pagination support and enhanced metadata'. It distinguishes from sibling tools like get_resource_file and list_smali_files, though it could be more specific about what constitutes a 'resource' in this context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives (e.g., get_resource_file for a single resource, or list_smali_files). The description lacks explicit when-to-use or when-not-to-use information.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_smali_directoriesC
List all smali directories in a project with enhanced metadata.
| Name | Required | Description | Default |
|---|---|---|---|
| project_dir | Yes | Path to the APKTool project directory |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description should disclose behavioral traits. It only mentions 'enhanced metadata' without explaining what that entails (e.g., whether it is read-only, if permissions are needed, or any side effects).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that is concise but lacks substance. It is front-loaded but does not provide enough information to be fully helpful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity of the tool (one parameter, no annotations) and the existence of an output schema (not shown), the description is too minimal. It fails to explain what 'enhanced metadata' includes or how the output is structured, leaving gaps for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the input schema already documents the single parameter. The description adds no additional meaning beyond 'project_dir', so it meets the baseline but does not enhance understanding.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists smali directories in a project, which distinguishes it from the sibling list_smali_files tool. The mention of 'enhanced metadata' adds some specificity, though vague.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like list_smali_files or analyze_project_structure. The description does not provide context on prerequisites or typical scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_smali_filesA
List smali files with pagination support and enhanced filtering.
| Name | Required | Description | Default |
|---|---|---|---|
| count | No | Number of items to return (0 means use default) | |
| offset | No | Starting offset for pagination | |
| smali_dir | No | Which smali directory to use (smali, smali_classes2, etc.) | smali |
| project_dir | Yes | Path to the APKTool project directory | |
| package_prefix | No | Optional package prefix to filter by (e.g., "com.example") |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must cover behavioral traits. It mentions pagination and filtering but omits details like read-only nature, performance implications, or error conditions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is succinct with no redundant words. It conveys the core purpose in a single sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema and full parameter descriptions, the description is largely complete. However, it lacks an explanation of what 'enhanced filtering' entails, which could affect usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. Description adds no further meaning beyond the schema; 'enhanced filtering' is vague and not elaborated.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List smali files' with pagination and filtering. It distinguishes from sibling 'list_smali_directories' which lists directories, not files.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not provide explicit guidance on when to use this tool versus alternatives like 'get_smali_file' or 'list_smali_directories'. Usage is implied but not clarified.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
modify_resource_fileB
Modify the content of a specific resource file with validation and backup support.
| Name | Required | Description | Default |
|---|---|---|---|
| new_content | Yes | New content for the resource file | |
| project_dir | Yes | Path to the APKTool project directory | |
| create_backup | No | Whether to create a backup of the original file | |
| resource_name | Yes | Name of the resource file | |
| resource_type | Yes | Resource type (e.g., "layout", "values") |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Mentions validation and backup support, adding context beyond the basic 'modify'. But 'validation' is vague, and backup behavior (e.g., automatic, restore) is not explained. With no annotations, the description partially carries the transparency burden.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, concise, but lacks additional useful structure. Could include more details without being verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequate for a modification tool with output schema (assumed). Describes action and key features, but could explain validation and backup more thoroughly given the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are described in schema. Description adds no extra meaning beyond schema, such as format or constraints, meeting baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states it modifies a specific resource file with validation and backup, distinguishing it from read tool get_resource_file and similar modify_smali_file. However, it does not explicitly differentiate from siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like modify_smali_file or get_resource_file. No when-not or prerequisites mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
modify_smali_fileB
Modify smali file content with validation and backup support.
| Name | Required | Description | Default |
|---|---|---|---|
| class_name | Yes | Full class name (e.g., com.example.MyClass) | |
| new_content | Yes | New content for the smali file | |
| project_dir | Yes | Path to the APKTool project directory | |
| create_backup | No | Whether to create a backup of the original file |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It mentions 'validation and backup support' but does not explain what validation entails, whether backups are automatic or optional, or any destructive potential (e.g., overwriting files). The behavioral impact of modification is under-specified.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that is concise and front-loaded with the tool's purpose. However, it could be more structured by separating core function from additional features (validation, backup) without adding unnecessary verbosity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 4 parameters, 3 required, and an output schema (not described), the description lacks context about return values, error handling, validation criteria, and how backups are managed. It does not provide enough information for an agent to fully understand the tool's behavior and outcomes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage for all four parameters, so the schema already explains each parameter. The description adds only a general mention of 'validation and backup support', which hints at the 'create_backup' parameter but does not add new semantic value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Modify' and the resource 'smali file content', and it specifically mentions 'validation and backup support', distinguishing it from sibling tools like 'get_smali_file' (read-only) and 'modify_resource_file' (for resources).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, no prerequisites, and no exclusions. It does not mention that this tool is for modifying compiled smali code versus other modification scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_in_filesC
Search for patterns in files with pagination and enhanced filtering.
| Name | Required | Description | Default |
|---|---|---|---|
| count | No | Number of items to return (0 means use default) | |
| offset | No | Starting offset for pagination | |
| max_results | No | Maximum total results to collect before pagination | |
| project_dir | Yes | Path to the APKTool project directory | |
| case_sensitive | No | Whether search should be case sensitive | |
| search_pattern | Yes | Text pattern to search for | |
| file_extensions | No | List of file extensions to search in |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description should disclose behaviors like non-destructiveness, file access patterns, or performance implications. It only mentions 'pagination' and 'enhanced filtering' without operational details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, no fluff, but lacks structure. Could be more informative while remaining concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 7 parameters and an output schema, the description is too brief. It omits key context like supported pattern types (regex?), search scope (only project_dir?), and default behaviors.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. Description adds no additional meaning beyond the schema; 'enhanced filtering' is too vague to clarify parameter usage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states verb 'Search' and resource 'patterns in files', and adds context about pagination and enhanced filtering. However, it does not differentiate from sibling tools like 'get_smali_file' or 'analyze_project_structure', which have distinct purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives, nor any exclusions or prerequisites. The description only states what it does without context for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
16 tool updates
v1.0.1- Added
analyze_project_structure - Changed
build_apk15 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / debug / descriptionAdded value: +"Build with debugging info" - removed
Input schema / properties / debug / titleRemoved value: -"Debug" - added
Input schema / properties / force_all / descriptionAdded value: +"Force rebuild all files" - removed
Input schema / properties / force_all / titleRemoved value: -"Force All" - added
Input schema / properties / output_apk / descriptionAdded value: +"Optional output APK path" - removed
Input schema / properties / output_apk / titleRemoved value: -"Output Apk" - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - added
Input schema / properties / timeoutAdded value: +{ + "default": 300, + "description": "Command timeout in seconds", + "type": "integer" +} - removed
Input schema / titleRemoved value: -"build_apkArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"build_apkOutput"
- Changed
clean_project10 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / backup / descriptionAdded value: +"Whether to create a backup of build directories before cleaning" - removed
Input schema / properties / backup / titleRemoved value: -"Backup" - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - removed
Input schema / titleRemoved value: -"clean_projectArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"clean_projectOutput"
- Changed
decode_apk16 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / apk_path / descriptionAdded value: +"Path to the APK file to decode" - removed
Input schema / properties / apk_path / titleRemoved value: -"Apk Path" - added
Input schema / properties / force / descriptionAdded value: +"Force delete destination directory if it exists" - removed
Input schema / properties / force / titleRemoved value: -"Force" - added
Input schema / properties / no_res / descriptionAdded value: +"Do not decode resources" - removed
Input schema / properties / no_res / titleRemoved value: -"No Res" - added
Input schema / properties / no_src / descriptionAdded value: +"Do not decode sources" - removed
Input schema / properties / no_src / titleRemoved value: -"No Src" - added
Input schema / properties / output_dirAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Custom output directory (optional)" +} - added
Input schema / properties / timeoutAdded value: +{ + "default": 300, + "description": "Command timeout in seconds", + "type": "integer" +} - removed
Input schema / titleRemoved value: -"decode_apkArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"decode_apkOutput"
- Changed
get_apktool_yml8 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - removed
Input schema / titleRemoved value: -"get_apktool_ymlArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"get_apktool_ymlOutput"
- Changed
get_manifest8 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - removed
Input schema / titleRemoved value: -"get_manifestArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"get_manifestOutput"
- Changed
get_resource_file12 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - added
Input schema / properties / resource_name / descriptionAdded value: +"Name of the resource file" - removed
Input schema / properties / resource_name / titleRemoved value: -"Resource Name" - added
Input schema / properties / resource_type / descriptionAdded value: +"Resource type (e.g., \"layout\", \"drawable\")" - removed
Input schema / properties / resource_type / titleRemoved value: -"Resource Type" - removed
Input schema / titleRemoved value: -"get_resource_fileArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"get_resource_fileOutput"
- Changed
get_smali_file10 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / class_name / descriptionAdded value: +"Full class name (e.g., com.example.MyClass)" - removed
Input schema / properties / class_name / titleRemoved value: -"Class Name" - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - removed
Input schema / titleRemoved value: -"get_smali_fileArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"get_smali_fileOutput"
- Added
get_workspace_info - Added
health_check - Changed
list_resources12 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / countAdded value: +{ + "default": 0, + "description": "Number of items to return (0 means use default)", + "type": "integer" +} - added
Input schema / properties / offsetAdded value: +{ + "default": 0, + "description": "Starting offset for pagination", + "type": "integer" +} - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - added
Input schema / properties / resource_type / descriptionAdded value: +"Optional resource type to filter by (e.g., \"layout\", \"drawable\")" - removed
Input schema / properties / resource_type / titleRemoved value: -"Resource Type" - removed
Input schema / titleRemoved value: -"list_resourcesArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"list_resourcesOutput"
- Changed
list_smali_directories8 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - removed
Input schema / titleRemoved value: -"list_smali_directoriesArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"list_smali_directoriesOutput"
- Changed
list_smali_files14 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / countAdded value: +{ + "default": 0, + "description": "Number of items to return (0 means use default)", + "type": "integer" +} - added
Input schema / properties / offsetAdded value: +{ + "default": 0, + "description": "Starting offset for pagination", + "type": "integer" +} - added
Input schema / properties / package_prefix / descriptionAdded value: +"Optional package prefix to filter by (e.g., \"com.example\")" - removed
Input schema / properties / package_prefix / titleRemoved value: -"Package Prefix" - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - added
Input schema / properties / smali_dir / descriptionAdded value: +"Which smali directory to use (smali, smali_classes2, etc.)" - removed
Input schema / properties / smali_dir / titleRemoved value: -"Smali Dir" - removed
Input schema / titleRemoved value: -"list_smali_filesArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"list_smali_filesOutput"
- Changed
modify_resource_file16 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / create_backup / descriptionAdded value: +"Whether to create a backup of the original file" - removed
Input schema / properties / create_backup / titleRemoved value: -"Create Backup" - added
Input schema / properties / new_content / descriptionAdded value: +"New content for the resource file" - removed
Input schema / properties / new_content / titleRemoved value: -"New Content" - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - added
Input schema / properties / resource_name / descriptionAdded value: +"Name of the resource file" - removed
Input schema / properties / resource_name / titleRemoved value: -"Resource Name" - added
Input schema / properties / resource_type / descriptionAdded value: +"Resource type (e.g., \"layout\", \"values\")" - removed
Input schema / properties / resource_type / titleRemoved value: -"Resource Type" - removed
Input schema / titleRemoved value: -"modify_resource_fileArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"modify_resource_fileOutput"
- Changed
modify_smali_file14 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / class_name / descriptionAdded value: +"Full class name (e.g., com.example.MyClass)" - removed
Input schema / properties / class_name / titleRemoved value: -"Class Name" - added
Input schema / properties / create_backup / descriptionAdded value: +"Whether to create a backup of the original file" - removed
Input schema / properties / create_backup / titleRemoved value: -"Create Backup" - added
Input schema / properties / new_content / descriptionAdded value: +"New content for the smali file" - removed
Input schema / properties / new_content / titleRemoved value: -"New Content" - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - removed
Input schema / titleRemoved value: -"modify_smali_fileArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"modify_smali_fileOutput"
- Changed
search_in_files17 fields changed- added
Input schema / additionalPropertiesAdded value: +false - added
Input schema / properties / case_sensitiveAdded value: +{ + "default": false, + "description": "Whether search should be case sensitive", + "type": "boolean" +} - added
Input schema / properties / countAdded value: +{ + "default": 0, + "description": "Number of items to return (0 means use default)", + "type": "integer" +} - added
Input schema / properties / file_extensions / descriptionAdded value: +"List of file extensions to search in" - removed
Input schema / properties / file_extensions / titleRemoved value: -"File Extensions" - added
Input schema / properties / max_results / descriptionAdded value: +"Maximum total results to collect before pagination" - removed
Input schema / properties / max_results / titleRemoved value: -"Max Results" - added
Input schema / properties / offsetAdded value: +{ + "default": 0, + "description": "Starting offset for pagination", + "type": "integer" +} - added
Input schema / properties / project_dir / descriptionAdded value: +"Path to the APKTool project directory" - removed
Input schema / properties / project_dir / titleRemoved value: -"Project Dir" - added
Input schema / properties / search_pattern / descriptionAdded value: +"Text pattern to search for" - removed
Input schema / properties / search_pattern / titleRemoved value: -"Search Pattern" - removed
Input schema / titleRemoved value: -"search_in_filesArguments" - added
Output schema / additionalPropertiesAdded value: +true - removed
Output schema / propertiesRemoved value: -{ - "result": { - "additionalProperties": true, - "title": "Result", - "type": "object" - } -} - removed
Output schema / requiredRemoved value: -[ - "result" -] - removed
Output schema / titleRemoved value: -"search_in_filesOutput"
13 tool updates
v1.0.0- First observed
build_apk - First observed
clean_project - First observed
decode_apk - First observed
get_apktool_yml - First observed
get_manifest - First observed
get_resource_file - First observed
get_smali_file - First observed
list_resources - First observed
list_smali_directories - First observed
list_smali_files - First observed
modify_resource_file - First observed
modify_smali_file - First observed
search_in_files
TDQS
Scored across 16 tools
Each tool targets a distinct action or resource type (e.g., decode vs build, smali vs manifest vs resources). There is no ambiguity between tools; even list tools separate directories, files, and resources clearly.
All tool names follow a consistent verb_noun pattern with lowercase and underscores. Verbs like get, list, modify, build are used predictably, making the naming scheme uniform and easy to navigate.
16 tools cover the core APK decoding, building, analysis, and modification workflows without being excessive. The count is well-scoped for the domain and each tool serves a distinct purpose.
The set covers primary CRUD operations for resources and smali files, plus decode/build/analyze. A minor gap is the lack of a modify_apktool_yml tool, but overall the surface is comprehensive for typical APKTool tasks.
Maintenance
Related MCP Connectors
Augments MCP Server - A comprehensive framework documentation provider for Claude Code
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
MCP server for progressive tool usage at any scale (see https://klavis.ai)
Related MCP Servers
- AlicenseBqualityBmaintenanceA Model Context Protocol server that connects to a custom JADX fork (JADX-AI) and enables local LLMs to interact with decompiled Android app code for live reverse engineering assistance.32795Apache 2.0
- AlicenseNot gradedqualityDmaintenanceAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through MCP-compatible clients.Apache 2.0
- AlicenseNot gradedqualityDmaintenanceMCP server that integrates Ghidra for binary analysis, enabling decompilation, disassembly, and advanced reverse engineering tasks through Claude Code.16MIT
- AlicenseNot gradedqualityFmaintenanceMCP server that allows LLMs to autonomously reverse engineer applications using Ghidra, exposing tools like decompilation, renaming, and listing methods.27Apache 2.0