JADX MCP Server is an open-source Model Context Protocol server that connects the JADX Android decompiler to large language models, so assistants like Claude can help analyze APK files. Published on GitHub with about 810 stars under the Apache-2.0 license and updated in October 2026, it is part of a broader reverse engineering MCP suite.
The server communicates with a companion JADX-AI plugin inside the JADX decompiler. Through that bridge, an LLM can explore a decompiled Android app — parsing manifests, browsing classes and methods, and looking for vulnerabilities — instead of the analyst copying code back and forth by hand. This turns reverse engineering sessions into a conversation: the analyst asks questions about the app, and the assistant pulls the relevant decompiled context through the MCP tools to answer.
The workflow it enables is conversational reverse engineering. An analyst opens an APK in JADX as usual, and the connected assistant can then pull decompiled code, inspect the Android manifest, and follow references across classes while the analyst steers with questions — for example asking where a suspicious network call originates or which components are exported. The project is actively maintained with a visible contributor community, and it belongs to a suite of related MCP servers by the same author covering other reverse engineering tools.
JADX MCP Server is free and open source under the Apache-2.0 license. You supply your own JADX installation and your own model access; there are no fees or paid tiers.
It is aimed at Android security researchers, penetration testers, and malware analysts who already use JADX and want LLM assistance to move faster through large decompiled codebases during assessments.