/ 100

15 days ago

glama

Hunt-Droid Mobile MCP

Item: Hunt-Droid Mobile MCP
Rating: 0
Author: M8ven

An MCP server that enables AI agents to drive real Android apps, capture API traffic, and test mobile-native attack surfaces, similar to Playwright for mobile.

→ banditPradyun/hunt-droid-mobile-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: [blue]Credentials saved to:[/] {Path(credential_path).expanduser()}

🔐

You'll be asked for 3 credentials: ANTHROPIC_API_KEY, LITELLM_API_KEY, OPENAI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configANTHROPIC_BASE_URL

🔐 secretANTHROPIC_API_KEY

configLITELLM_MODEL

configMM_MAX_TOKENS

configMM_TEMPERATURE

configMM_REASONING_MODEL

configMM_EMPTY_RETRIES

configMM_VISION_MODEL

configMM_DEVICE_SERIAL— (auto) pin a device serial (else the connected one / mobile_start_session's device arg)

configANDROID_SERIAL

configMM_EXPLORE_MAX_STEPS

configMM_EXPLORE_MAX_ROUNDS

configMM_EXPLORE_PATIENCE

configMM_EXPLORE_REASONING

configMM_EXPLORE_ROUND_TIMEOUT

configMM_EXPLORE_SUBAGENTS

configMM_PROXY_HOST

configMM_PROXY_PORT— 18080 mitmproxy listen port

configMM_FRIDA_ENABLED— 1 SSL-unpinning on/off

configMM_FRIDA_SPAWN

configMM_ACTIVE_SCAN_ENABLED

configMM_ACTIVE_MODE

configMM_AUTHMATRIX_ENABLED

configMM_PASSIVE_SCAN_WORKERS

configMM_FORENSICS_ENABLED

configMM_BIZLOGIC_ENABLED

configMM_BIZLOGIC_DESTRUCTIVE

configMM_BIZLOGIC_MAX_CASES

configMM_VICTIM_CREDENTIALS

configMM_CREDENTIALS

configMM_CROSSUSER_ENABLED

configMM_PROXY_REWRITE

configMM_REPORT_DIR— reports where captured traffic/artifacts are stored

configMM_UPLOAD_DIR

configMM_SCOUT_REPORT_DIR

configMM_REDIS_URL

configMM_SCAN_ID

configMM_NO_GUI_LAUNCH

configMM_SCRCPY_ENABLED

configMM_SCRCPY_PORT

configLITELLM_BASE_URL

🔐 secretLITELLM_API_KEY

configMM_MCP_ALLOW_SHELL— 0 1 exposes mobile_adb_shell (arbitrary adb — powerful)

configMM_MCP_HOST— 0.0.0.0 bind address (127.0.0.1 = localhost-only, safer)

configMM_MCP_PORT— 8765 port

configMM_MCP_LOGLEVEL

configMM_MCP_TRANSPORT— streamable-http streamable-http or sse

configTOKENIZERS_PARALLELISM

configGRPC_ENABLE_FORK_SUPPORT

configMOBILERUN_AUTH_URL

🔐 secretOPENAI_API_KEY

configMOBILERUN_CONFIG

configDROIDRUN_CONFIG

configphoenix_url

configphoenix_project_name

configMOBILERUN_TELEMETRY_ENABLED

configDROIDRUN_TELEMETRY_ENABLED

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/banditpradyun-hunt-droid-mobile-mcp-55qyum)](https://m8ven.ai/mcp/banditpradyun-hunt-droid-mobile-mcp-55qyum)

commit: 8abb35052478261efc26902bd34508b99e61c075

code hash: fe299f1003092d7c0dfc1bea98fe03e0cf92ffaf932832399fe95fb1547ea507

verified: 7/16/2026, 8:45:46 AM

view raw JSON →