DexSQL — Claude Code MCP server for APK analysis
DexSQL lets an AI agent query Android APK and DEX contents with SQL. Use it to trace classes, methods, strings, and call references without leaving your coding client.
Open on GitHubWhat DexSQL does
DexSQL connects an AI agent to APK and DEX analysis over MCP. Queries can locate classes and methods, search strings, and follow call references; the agent can also show Smali for a method it finds. APK parsing happens locally, and the input file stays unchanged.
The server reads DEX directly, and queries can be saved as scripts for reuse. To set it up, add the install-dexsql skill with npx skills add LSPosed/dexsql-release --skill install-dexsql, then ask the agent to run that skill. It downloads a compatible binary, verifies its SHA-256 checksum, and configures the MCP connection. Manual setup requires choosing a build for your operating system and CPU architecture, then registering the executable’s absolute path.
What it helps with
- Find methods that reference a log message
- List callers of a method found in an APK
- Search APK contents for classes and methods
- Trace references to a string in DEX files
- Inspect Smali for a matching method
Example prompts for the agent
- Search
app.apkfor classes with this name. - Find references to this string in
app.apkand show the methods that call them.
How to install DexSQL
Install
The MCP registry has no launch command for it: see the repository README
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about DexSQL
How do I install DexSQL in Claude Code?
Add the skill with npx skills add LSPosed/dexsql-release --skill install-dexsql. Then ask your agent to use install-dexsql to install DexSQL and configure its MCP connection.
What does DexSQL do?
DexSQL lets an agent query APK and DEX data with SQL to find classes, methods, strings, and call references. The agent can use the results to inspect related Smali.
Does DexSQL upload APK files for analysis?
No. APK parsing runs locally, and the original file is left unchanged.
