
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
mobile-debug-mcp
Advanced tools
MCP server for mobile app debugging (Android + iOS), with focus on security and reliability
A minimal, secure MCP server for AI-assisted mobile development. Build, install, interact and inspect Android/iOS apps from an MCP-compatible client.
Support:
- KMP
- Android
- iOS
- Flutter - not tested
- React native - not tested
The server discovers Android and iOS tools automatically from standard locations by default. Manual environment setup is still supported, but it should be treated as the fallback for non-standard installs, overrides, or reproducible pinned toolchains.
Use explicit paths when:
Leave the variables unset when:
PATHCommon environment variables:
ADB_PATH: explicit path to adbANDROID_SDK_ROOT or ANDROID_HOME: Android SDK rootXCRUN_PATH: explicit path to xcrunMCP_IDB_PATH or IDB_PATH: explicit path to idbGRADLE_JAVA_HOME or JAVA_HOME: Java home for Gradle-backed operationsFor normal use, call get_system_status first. It reports the detected host, Android, and iOS toolchain state so the client can decide whether automatic discovery is sufficient or whether explicit overrides are needed.
Recommended when you want Android only, or when you want to make the Android toolchain explicit.
{
"mcpServers": {
"mobile-debug": {
"command": "npx",
"args": ["--yes","mobile-debug-mcp","server"],
"env": {
"ADB_PATH": "/path/to/adb",
"ANDROID_SDK_ROOT": "/path/to/android/sdk",
"GRADLE_JAVA_HOME": "/path/to/jdk"
}
}
}
}
For Android-only setups, XCRUN_PATH and IDB_PATH are not required unless you want to pin them explicitly.
Recommended when you want iOS simulator or device support, or when idb lives in a non-standard location.
{
"mcpServers": {
"mobile-debug": {
"command": "npx",
"args": ["--yes","mobile-debug-mcp","server"],
"env": {
"XCRUN_PATH": "/usr/bin/xcrun",
"MCP_IDB_PATH": "/path/to/idb",
"IDB_PATH": "/path/to/idb"
}
}
}
}
For iOS-only setups, ADB_PATH and ANDROID_SDK_ROOT are not required unless you want to pin them explicitly.
Use STDIO
command: npx
args:
environment variables:
If you are unsure whether the environment is configured correctly, run get_system_status first. It reports the detected host, Android, and iOS toolchain state in a structured form.
For clients that support Agent Plugins, the agent-plugin package installs the MCP server configuration together with the existing usage skill. Direct npm/MCP configuration above remains supported.
Examples:
Crash fixing:
I have a crash on the app, can you diagnose it, fix and validate using the mcp tools available
Feature building:
Add a button, hook into the repository and confirm API request successful
Apache-2.0
FAQs
MCP server for mobile app debugging (Android + iOS), with focus on security and reliability
The npm package mobile-debug-mcp receives a total of 11 weekly downloads. As such, mobile-debug-mcp popularity was classified as not popular.
We found that mobile-debug-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.