# Re Apktool

> MCP server for Android APK triage: parse APK headers, list DEX classes, decode AndroidManifest.xml. Wraps apktool (Java)

- **Type:** MCP server
- **Install:** `agentstack add mcp-heretek-re-re-apktool`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Heretek-RE](https://agentstack.voostack.com/s/heretek-re)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Heretek-RE](https://github.com/Heretek-RE)
- **Source:** https://github.com/Heretek-RE/re-apktool

## Install

```sh
agentstack add mcp-heretek-re-re-apktool
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# re-apktool

MCP server for **Android APK** triage. Two backends are supported
on the same MCP surface:

- **apktool** (Java) — the canonical APK disassembler. Produces
  a Smali representation of every DEX class plus a decoded
  `AndroidManifest.xml`. Install: `apt-get install apktool` or
  download the jar from
  .
- **androguard** (Python) — pure-Python APK / DEX / manifest
  parser. Always installed (the server's hard dep). Faster to
  import, easier to script; less Smali-friendly than apktool.

The MCP wrappers call whichever backend is available; the
`check_apktool` tool reports the active backend so the analyst
knows which one fired.

## Tools

| Tool | What it does |
|---|---|
| `check_apktool` | Health check — return apktool / androguard / java availability |
| `parse_apk` | Open the APK, return header info (package, version, min/target SDK, per-file entry list, signature block presence) |
| `list_dex_classes` | Enumerate classes across every `classes*.dex` in the APK |
| `decode_manifest` | Return the decoded `AndroidManifest.xml` (text) plus the parsed activity / service / receiver / provider / permission lists |

## Why both backends?

`apktool` is the gold standard for Smali and manifest
decoding, but it's a Java tool the user has to install. The
`parse_apk` + `list_dex_classes` + `decode_manifest` surface
area is small enough that `androguard` covers ~90% of the
analyst's needs (header + classes + manifest) without requiring
a JRE. The MCP layer prefers `apktool` when present and falls
back to `androguard` cleanly.

## Install

```bash
pip install -e ./servers/re-apktool        # androguard (required)
apt-get install apktool                    # apktool (optional, java)
```

## Run

```bash
re-apktool                                 # stdio transport (default for MCP)
python -m re_apktool                       # equivalent
```

## Deferred to a future run

The original Explore findings called for an APK parser; this
scaffolding lands it so the future Android target run has the
toolchain. The Live Fire Windows-target run uses
`re-leak-scan` + `re-winedbg` for the three named products;
`re-apktool` becomes the workhorse when an Android binary is in
the input.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Heretek-RE](https://github.com/Heretek-RE)
- **Source:** [Heretek-RE/re-apktool](https://github.com/Heretek-RE/re-apktool)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-heretek-re-re-apktool
- Seller: https://agentstack.voostack.com/s/heretek-re
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.