mcpbeat

Android Security Analyzer MCP Server

io.github.ako2345/android-security-analyzer
answering

Android Security Analyzer is answering right now. Last checked 8 min ago. It exposes 4 tools. Last commit 15 Mar 2026.

MCP server for static security analysis of Android source code

Uptime history 41 hours of history
41 hours agonow
100.0%
Uptime 24h
91 of 91 checks
4
Tools
read from the server
78 ms
Response time
average over 24h
2
Stars
last commit 15 Mar 2026

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 8 min ago.

run in your terminal
claude mcp add android-security-analyzer --transport http https://android-security-analyzer.ako-labs.workers.dev/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "android-security-analyzer": {
      "url": "https://android-security-analyzer.ako-labs.workers.dev/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.android-security-analyzer]
url = "https://android-security-analyzer.ako-labs.workers.dev/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "android-security-analyzer": {
      "url": "https://android-security-analyzer.ako-labs.workers.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "android-security-analyzer": {
      "url": "https://android-security-analyzer.ako-labs.workers.dev/mcp"
    }
  }
}

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

analyze
analyze_android_project
Analyzes an Android project's source code for security vulnerabilities. Accepts project files (AndroidManifest.xml, build.gradle, Java/Kotlin sources, XML configs) and returns a structured security report with findings, severity scores, and recommendations.
android
list_android_security_checks
Returns the list of all implemented security checks/rules with their IDs, categories, severity levels, and descriptions.
explain
explain_finding
Explains a specific security finding by its rule ID. Returns why it is a risk, how to fix it, and false positive considerations.
health
health
Returns the server health status, version, and rule engine statistics.

Endpoints

URLTransportStateLatencyChecked
https://android-security-analyzer.ako-labs.workers.dev/mcp streamable-http answering 107 ms 8 min ago

Android Security Analyzer — questions

Answers built from our own checks of this server.

What can Android Security Analyzer do?
It exposes 4 tools, read directly from the server on our last check. Among them: analyze_android_project, explain_finding, health, list_android_security_checks. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Android Security Analyzer working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 78 ms. The bar chart above shows every period we have measured.
How do I connect Android Security Analyzer?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Android Security Analyzer need an API key?
No. Android Security Analyzer completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 4 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Android Security Analyzer?
It answers our handshake in 78 ms on average, which is faster than 91% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Android Security Analyzer open source?
Yes — written in TypeScript and 2 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.