MCP Android runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 14 Oct 2026.
Control Android devices over ADB from AI agents — safe-by-default, read-only by default, audited.
We read the source, 20 h ago · rules ccca72095570
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
execFile(
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
execFile(
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch MCP Android and you get told the day something new turns up.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-android -- npx -y @dockndevai/mcp-android
{
"mcpServers": {
"mcp-android": {
"args": [
"-y",
"@dockndevai/mcp-android"
],
"command": "npx"
}
}
}
[mcp_servers.mcp-android]
command = "npx"
args = ["-y", "@dockndevai/mcp-android"]
{
"mcpServers": {
"mcp-android": {
"args": [
"-y",
"@dockndevai/mcp-android"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"mcp-android": {
"args": [
"-y",
"@dockndevai/mcp-android"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
ANDROID_MODE (Access mode: read-only | read-write | admin.), ANDROID_ADB_PATH (Path to the adb binary (default: adb on PATH).), ANDROID_SERIAL (Target device serial from `adb devices`. Empty = the only connected device.), ANDROID_TIMEOUT_MS (Per-command adb timeout in milliseconds.), ANDROID_PACKAGE_ALLOWLIST (Comma-separated package allowlist for launch/uninstall/clear. Empty = all.), ANDROID_PROTECTED_PACKAGES (Packages that can be launched/inspected but never uninstalled or data-cleared.), ANDROID_ALLOW_INSTALL (Enable install_apk / uninstall_app / clear_app_data (requires admin mode too).), ANDROID_ALLOW_SHELL (Enable run_shell (arbitrary adb shell; requires admin mode too).), ANDROID_DRY_RUN (Validate + log write/admin actions without executing them on the device.), ANDROID_AUDIT_LOG (Emit a JSON audit line to stderr per guarded operation (default true).).
The author declared them in the registry entry; get the values from the project itself.
Drive iPhone/iPad via Appium/WebDriverAgent from AI agents — safe-by-default, read-only by default.
Safe Google Workspace admin for AI agents: read-only by default, confirm-gated deletes, audit log.
Control ESP32 IoT devices from AI agents: status, GPIO, ADC, reboot.
Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.
Google Tag Manager + read-only GA4 MCP server. Read-only by default, gated writes, audits.
Safe, read-only-by-default MySQL, PostgreSQL & SQLite access for AI agents. TOON output.
Control real Android and iOS devices with LLM agents — tap, swipe, type, automate flows.
Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.
Answers built from our own checks of this server.