How do I install Frida Mobile MCP?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Frida Mobile MCP need an API key?

The publisher lists these environment variables: FRIDA_DEVICE_ID, FRIDA_MCP_ALLOW_CUSTOM_SCRIPTS, FRIDA_MCP_MEMORY_WRITE, FRIDA_MCP_ALLOW_NATIVE_INJECTION, FRIDA_MCP_ALLOW_ADB_SHELL, FRIDA_MCP_SNAPSHOTS, FRIDA_MCP_EVIDENCE, FRIDA_MCP_EVIDENCE_PATH, FRIDA_MCP_EVIDENCE_MAX_MB, FRIDA_MCP_REMOTE, FRIDA_MCP_REMOTE_TOKEN, FRIDA_MCP_REMOTE_CERT, FRIDA_MCP_SCHEMA_PROFILE, FRIDA_MCP_TOOL_PROFILE, FRIDA_MCP_TOOLS_EXCLUDE, FRIDA_MCP_MAX_RESPONSE_CHARS, FRIDA_MCP_HTTP_TOKEN, FRIDA_MCP_RUNTIME, FRIDA_MCP_DEBUG, FRIDA_MCP_BRIDGES_DIR, FRIDA_MCP_COMPILER_PROJECT_DIR, FRITAP_AGENT_PATH, FRITAP_VERSION, FRITAP_AGENT_SHA256.

What transport does Frida Mobile MCP use?

Frida Mobile MCP runs locally over stdio.

When was Frida Mobile MCP last checked?

Last checked 2026-11-13. Mobile Frida MCP Server - AI-powered mobile app exploration and testing via Frida instrumentation

Frida Mobile MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

npx -y [email protected]

Credentials from the publisher

FRIDA_DEVICE_ID — Default Frida device ID to use (e.g. emulator-5554 or a USB serial). Can also be set with --device.
FRIDA_MCP_ALLOW_CUSTOM_SCRIPTS — Set to "1" to enable execution of custom Frida scripts (execute_script and custom hook_function handlers). Disabled by default.
FRIDA_MCP_MEMORY_WRITE — Set to "1" to enable the write_memory tool. Disabled by default for safety.
FRIDA_MCP_ALLOW_NATIVE_INJECTION — Set to "1" to enable the inject_library tool (loads a native .so/.dylib into the target via Frida's injector). Disabled by default.
FRIDA_MCP_ALLOW_ADB_SHELL — Set to "1" to enable the adb_shell tool (arbitrary shell commands on an Android device via adb). Disabled by default.
FRIDA_MCP_SNAPSHOTS — Set to "1" to use V8 script-runtime snapshots to speed up repeated script loads (requires FRIDA_MCP_RUNTIME=v8). Disabled by default.
FRIDA_MCP_EVIDENCE — Set to "0" to stop persisting every tool result (params, status, structured result) to the evidence store; "1" forces it on. Enabled by default.
FRIDA_MCP_EVIDENCE_PATH — Directory of the evidence store (records at <path>/YYYY-MM-DD/<evidence_id>.json plus index.jsonl, mode 0600). Defaults to ~/.config/frida-mobile-mcp/evidence.
FRIDA_MCP_EVIDENCE_MAX_MB — Size cap of the evidence store in MB; oldest records are pruned beyond it. Defaults to 200.
FRIDA_MCP_REMOTE — host[:port] of a remote frida-server to add as a remote device at startup (port defaults to 27042).
FRIDA_MCP_REMOTE_TOKEN — Auth token of the remote frida-server in FRIDA_MCP_REMOTE (frida-server --token).
FRIDA_MCP_REMOTE_CERT — Path to the PEM certificate of a TLS remote frida-server in FRIDA_MCP_REMOTE (frida-server --certificate).
FRIDA_MCP_SCHEMA_PROFILE — Tool schema profile. "compact" shortens tool schemas and descriptions for clients with small context windows.
FRIDA_MCP_TOOL_PROFILE — Tool exposure profile. "core" registers only 32 core tools to keep the tool catalog small next to other MCP servers.
FRIDA_MCP_TOOLS_EXCLUDE — Comma-separated tool-name globs that are never registered, e.g. "adb_*,frida_server_*".
FRIDA_MCP_MAX_RESPONSE_CHARS — Maximum number of characters in a single tool response; longer output is truncated.
FRIDA_MCP_HTTP_TOKEN — Bearer token required by HTTP clients. Only used with --transport http (required when --host is not loopback); unused for the default stdio transport.
FRIDA_MCP_RUNTIME — Frida script runtime to use for injected agents.
FRIDA_MCP_DEBUG — Set to "1" to enable debug logging on stderr. Can also be set with --debug.
FRIDA_MCP_BRIDGES_DIR — Directory with prebuilt Java/ObjC bridge bundles (defaults to dist/bridges inside the package)
FRIDA_MCP_COMPILER_PROJECT_DIR — Cache directory for the frida.Compiler project used to compile ES module scripts
FRITAP_AGENT_PATH — Path to a friTap fritap_agent.js bundle for capture_tls (otherwise the installed friTap Python package or a pinned download is used)
FRITAP_VERSION — friTap release tag to download when no local agent is found (default v2.6.5)
FRITAP_AGENT_SHA256 — Bare sha256 of the downloaded friTap agent for the selected FRITAP_VERSION tag. v2.6.5 is pinned in the package; set this for other tags.

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1FRIDA_DEVICE_ID=<value> FRIDA_MCP_ALLOW_CUSTOM_SCRIPTS=<value> FRIDA_MCP_MEMORY_WRITE=<value> FRIDA_MCP_ALLOW_NATIVE_INJECTION=<value> FRIDA_MCP_ALLOW_ADB_SHELL=<value> FRIDA_MCP_SNAPSHOTS=<value> FRIDA_MCP_EVIDENCE=<value> FRIDA_MCP_EVIDENCE_PATH=<value> FRIDA_MCP_EVIDENCE_MAX_MB=<value> FRIDA_MCP_REMOTE=<value> FRIDA_MCP_REMOTE_TOKEN=<secret> FRIDA_MCP_REMOTE_CERT=<value> FRIDA_MCP_SCHEMA_PROFILE=<value> FRIDA_MCP_TOOL_PROFILE=<value> FRIDA_MCP_TOOLS_EXCLUDE=<value> FRIDA_MCP_MAX_RESPONSE_CHARS=<value> FRIDA_MCP_HTTP_TOKEN=<secret> FRIDA_MCP_RUNTIME=<value> FRIDA_MCP_DEBUG=<value> FRIDA_MCP_BRIDGES_DIR=<value> FRIDA_MCP_COMPILER_PROJECT_DIR=<value> FRITAP_AGENT_PATH=<value> FRITAP_VERSION=<value> FRITAP_AGENT_SHA256=<value> claude mcp add io.github.monkeywave-frida-mobile-mcp -- npx -y frida-mobile-mcp@0.7.3

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.monkeywave-frida-mobile-mcp": {4      "command": "npx",5      "args": [6        "-y",7        "[email protected]"8      ],9      "env": {10        "FRIDA_DEVICE_ID": "<value>",11        "FRIDA_MCP_ALLOW_CUSTOM_SCRIPTS": "<value>",12        "FRIDA_MCP_MEMORY_WRITE": "<value>",13        "FRIDA_MCP_ALLOW_NATIVE_INJECTION": "<value>",14        "FRIDA_MCP_ALLOW_ADB_SHELL": "<value>",15        "FRIDA_MCP_SNAPSHOTS": "<value>",16        "FRIDA_MCP_EVIDENCE": "<value>",17        "FRIDA_MCP_EVIDENCE_PATH": "<value>",18        "FRIDA_MCP_EVIDENCE_MAX_MB": "<value>",19        "FRIDA_MCP_REMOTE": "<value>",20        "FRIDA_MCP_REMOTE_TOKEN": "<secret>",21        "FRIDA_MCP_REMOTE_CERT": "<value>",22        "FRIDA_MCP_SCHEMA_PROFILE": "<value>",23        "FRIDA_MCP_TOOL_PROFILE": "<value>",24        "FRIDA_MCP_TOOLS_EXCLUDE": "<value>",25        "FRIDA_MCP_MAX_RESPONSE_CHARS": "<value>",26        "FRIDA_MCP_HTTP_TOKEN": "<secret>",27        "FRIDA_MCP_RUNTIME": "<value>",28        "FRIDA_MCP_DEBUG": "<value>",29        "FRIDA_MCP_BRIDGES_DIR": "<value>",30        "FRIDA_MCP_COMPILER_PROJECT_DIR": "<value>",31        "FRITAP_AGENT_PATH": "<value>",32        "FRITAP_VERSION": "<value>",33        "FRITAP_AGENT_SHA256": "<value>"34      }35    }36  }37}

claude_desktop_config.json

Local · npmPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

From the publisher

Documentation

README is not crawled yet. Open the repository

Add this server

Documentation

Host a copy with our keys and logs.

Server facts

Frida Mobile MCP

Tools

Questions