NativeKeel — Claude Code MCP server: checks and install
NativeKeel audits React Native and Expo projects for upgrade blockers, store issues, crash risks, and security findings through an MCP connection.
claude mcp add --env NATIVEKEEL_MCP_ROOTS=<NATIVEKEEL_MCP_ROOTS> --transport stdio nativekeel -- npx -y nativekeelWhat NativeKeel does
NativeKeel gives an AI coding agent a health check for React Native and Expo apps. It looks for packages that can stop a framework upgrade, stale or incompatible native modules, unused dependencies, and configuration problems. The checks also cover Google Play and App Store rules, iOS privacy settings, signing, and common Release-build crash causes.
Its security scan reviews source files, the lockfile, and built APK, AAB, or IPA artifacts. It can report exposed credentials, unsafe code paths, transport issues, and dependency risks; a supplied artifact is selected with --artifact app.apk. The --offline option keeps the scan local and skips online advisory checks.
The MCP server runs through npx, with NATIVEKEEL_MCP_ROOTS available for project-root configuration. This is source and artifact analysis, not a live attack or a security certificate, so the report does not replace testing the running app.
What it helps with
- spot packages that block a React Native or Expo upgrade
- check a build against Google Play and App Store rules
- trace likely causes of Release-build crashes
- scan source and build artifacts for exposed secrets
- find risky dependencies and unsafe app settings
Example prompts for the agent
- Check this React Native project for upgrade blockers and make a step-by-step upgrade plan.
- Review the project for Release-build crash risks and point to the affected files.
- Scan
app-release.apkfor exposed secrets and security findings.
How to install NativeKeel
Platform CLI
claude mcp add --env NATIVEKEEL_MCP_ROOTS=<NATIVEKEEL_MCP_ROOTS> --transport stdio nativekeel -- npx -y nativekeelReplace <…> with your own values
Platform CLI
codex mcp add nativekeel --env NATIVEKEEL_MCP_ROOTS=<NATIVEKEEL_MCP_ROOTS> -- npx -y nativekeelReplace <…> with your own values
Config file
{
"mcpServers": {
"nativekeel": {
"command": "npx",
"args": [
"-y",
"nativekeel"
],
"env": {
"NATIVEKEEL_MCP_ROOTS": "<NATIVEKEEL_MCP_ROOTS>"
}
}
}
}Replace <…> with your own values
Config file
{
"servers": {
"nativekeel": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"nativekeel"
],
"env": {
"NATIVEKEEL_MCP_ROOTS": "<NATIVEKEEL_MCP_ROOTS>"
}
}
}
}Replace <…> with your own values
Platform CLI
gemini mcp add -e NATIVEKEEL_MCP_ROOTS=<NATIVEKEEL_MCP_ROOTS> nativekeel npx -y nativekeelReplace <…> with your own values
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about NativeKeel
How do I install NativeKeel in Claude Code?
Run claude mcp add nativekeel -- npx -y nativekeel.
What does NativeKeel do?
It gives React Native and Expo projects a health check covering upgrade blockers, store requirements, crash risks, and security findings. The server can also inspect APK, AAB, and IPA artifacts.
What can NativeKeel scan?
It reviews source files and the lockfile, and it can inspect an APK, AAB, or IPA passed with --artifact app.apk. Build-time values can also be found in the JavaScript bundle inside a supplied artifact.
