Enable AI-driven automated Android dynamic analysis by controlling Frida through the Model Context Protocol for streamlined reverse engineering.
frida-mcp helps you analyze Android apps by automating Frida using AI commands. It connects your Android phone to your computer, runs analysis scripts automatically, and gives you results without needing to run commands yourself.
This tool works with rooted Android phones running Magisk and the zygisk-gadget module. It uses a server called MCP (Model Context Protocol) that talks to Frida and controls it to inspect apps dynamically.
Before starting, check the following:
If you don’t have Python or ADB installed, you will need to install them first. Both are free and easy to get.
Click the large button below to visit the GitHub page where you can download frida-mcp and find setup files.
On the GitHub page:
After downloading, follow these steps to install and configure frida-mcp on your PC:
pip install .This installs the main program and tools you will need.frida-mcp-setupThis command will register frida-mcp with MCP and install necessary “Skills” for it to work smoothly.~/.claude.json manually:{
"mcpServers": {
"frida-agent": {
"command": "frida-mcp"
}
}
}Save the file and retry running frida-mcp.adb can detect your device by running:adb devicesYour device should show up on the list.frida-mcp uses ADB to talk to the zygisk-gadget module on your phone.
To establish this connection:
frida-mcp connectfrida-mcp list_appsHere are the main commands you will use when running frida-mcp:
| Command | What it Does |
|---|---|
connect | Opens ADB port forwarding to connect to zygisk-gadget. |
list_apps | Shows third-party apps installed on your device. |
execute | Injects a Frida script into the running app. You can write the script directly or provide a file path. |
spawn_and_inject | Stops an app, restarts it, and injects a script in one step. Useful when hooking app startup. |
get_messages | Shows output from the injected scripts. Supports paging and file backup. |
logcat | Displays Android system logs to help find errors or crashes. |
launch_app | Starts an app you specify. |
kill_app | Forces an app to stop. |
reconnect | Restarts the connection if frida-mcp crashes. |
detach | Disconnects the current script injection session. |
If you need to download frida-mcp again or get the latest version:
Then repeat the installation commands as above to update your setup.
frida-mcp reconnect or check ADB connection.frida-mcp logcat to monitor crashes or issues in real time.spawn_and_inject to restart and inject fresh.The flow looks like this:
AI (Claude) → MCP Server → Frida CLI → zygisk-gadget (phone) → Results returnedThis means AI sends commands to MCP, which controls Frida. Frida works with the gadget installed on the phone to analyze apps and send data back to you.
Gindhar2112/frida-mcp
March 24, 2026
April 13, 2026
Python