#4949th of 128 in MCP servers for developers
androguard
Python toolkit and MCP server for Android APK reverse engineering
- Stars
- 6.4k
- License
- Apache-2.0
- Last commit
- Oct 2026
- Last release
- Jun 2026
- Language
- Python
6,006 on 21 Apr 20266,428 on 10 Nov 2026
From GitHub's daily star counts.
Checked on GitHub.
Overview
Androguard 5 opens APKs and DEX files to inspect the manifest, permissions, classes and strings, disassemble Dalvik, decompile to Java, find cross-references and run a vulnerability scanner. Optional extras cover ARM64 native code and APK decode/rebuild. It is usable from a CLI, a Python Application API, Claude Code skills, or an androguard-mcp server for LLM hosts.
Who it is for: Android security researchers needing scriptable or LLM-driven APK analysis
Strengths
- Covers APK, DEX, Dalvik disassembly, Java decompilation, ARM64 and APK patching in one toolkit
- Ships an MCP server and Claude Code skills (/analyze-apk, /scan-vulns, /find-refs)
- scan_vulns is validated against all OWASP MASTG Android demos, with results in docs
- Parsing layers are separate Rust-backed libraries with Python bindings
Weaknesses
- v5 is not on PyPI yet; pip install androguard currently pulls 4.1.4 and replaces 5.0.0
- Source install needs a Rust toolchain and sibling apk-parser and dex-parser checkouts
- Docs are marked outdated; the cross-reference Analysis object is not yet restored in v5
- Releases since 4.0 dropped features from 3.3.5, which can break older scripts
What it needs
- no GPU
- Needs Python, Rust toolchain (source install and optional extras), apk-parser, dex-parser
What changed
From the release notes. No flag means the note does not say so, not that the upgrade is safe.
Also in MCP servers for developers
See all 128| Rank | Project | Score |
|---|---|---|
| 1 | gitnexusCode knowledge graph exposed to coding agents through MCP tools | 97 out of 100 |
| 2 | codegraphLocal code knowledge graph that coding agents query over MCP | 95 out of 100 |
| 3 | playwright-mcpMCP server that lets LLMs drive a browser through Playwright accessibility snapshots | 93 out of 100 |
| #4 | code-review-graphLocal Tree-sitter code graph that gives coding assistants review context over MCP | 92 out of 100 |
| #5 | fastmcpPython framework for building MCP servers, clients, and interactive apps | 92 out of 100 |