Appium
Mobile automation testing for iOS and Android devices with intelligent test generation
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
xmldom: Uncontrolled recursion in XML serialization leads to DoS
xmldom has XML injection through unvalidated DocumentType serialization
process.env. You'll be asked to provide them before it can run.AI_VISION_API_BASE_URL— Required when AI_VISION_ENABLED=true Base URL of the OpenAI-compatible vision model APIAI_VISION_API_KEY— Required when AI_VISION_ENABLED=true API key for the vision model providerAI_VISION_COORD_TYPE— Optional Coordinate type: normalized (default) or absoluteAI_VISION_IMAGE_MAX_WIDTH— Optional Max image width in pixels before compression (default: 1080)AI_VISION_IMAGE_QUALITY— Optional JPEG quality 1–100 for compressed screenshots sent to the vision API (default: 80)AI_VISION_MODEL— Optional Vision model name (default: Qwen3-VL-235B-A22B-Instruct)APPIUM_MCP_EVIDENCEAPPIUM_MCP_ON_CLIENT_DISCONNECTAPPIUM_MCP_OTEL_ENABLED— Optional Set to true to enable OpenTelemetry tracing (disabled by default).APPIUM_MCP_OTEL_INCLUDE_ARGUMENT_VALUES— Optional Set to true to include sanitized non-sensitive argument values in spans; disabled by default because values may contain sensitive data.APPIUM_MCP_PERSIST_REMOTE_SESSIONS_PATH— Optional Directory path for persisted attached remote session info. When set, attached remote sessions are stored as JSON files in that directory and can be rehydrated after restart.APPIUM_MCP_WDA_APP_PATHCAPABILITIES_CONFIG— "": "/path/to/your/capabilities.json"NO_UI— Optional Set to true or 1 to disable HTML UI components — faster responses, fewer tokens. See [NO_UI Mode](#no_ui-mode)REMOTE_SERVER_URL_ALLOW_REGEX— Optional Regex pattern that remote Appium server URLs must match. Defaults to ^https?://SCREENSHOTS_DIR— Optional Directory where screenshots and screen recordings are saved. Defaults to the current working directory[](https://m8ven.ai/mcp/appium-appium-mcp-1a0fp4)