Hunt-Droid Mobile MCP (banditPradyun/hunt-droid-mobile-mcp) is an MCP server listed on the M8ven Trust Index. It scores 0 out of 100, grade F. It declares 6 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
F
Warning
0/100

Hunt-Droid Mobile MCP

An MCP server that enables AI agents to drive real Android apps, capture API traffic, and test mobile-native attack surfaces, similar to Playwright for mobile.

→ banditPradyun/hunt-droid-mobile-mcp· listed on glama

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

banditPradyun

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

⏳ This MCP is queued for scoring. Check back in a few minutes.
// key findings
🚨
Reads files from sensitive locations
Touches: [blue]Credentials saved to:[/] {Path(credential_path).expanduser()}
🔐
You'll be asked for 3 credentials: ANTHROPIC_API_KEY, LITELLM_API_KEY, OPENAI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configANTHROPIC_BASE_URL
🔐 secretANTHROPIC_API_KEY
configLITELLM_MODEL
configMM_MAX_TOKENS
configMM_TEMPERATURE
configMM_REASONING_MODEL
configMM_EMPTY_RETRIES
configMM_VISION_MODEL
configMM_DEVICE_SERIAL(auto) pin a device serial (else the connected one / mobile_start_session's device arg)
configANDROID_SERIAL
configMM_EXPLORE_MAX_STEPS
configMM_EXPLORE_MAX_ROUNDS
configMM_EXPLORE_PATIENCE
configMM_EXPLORE_REASONING
configMM_EXPLORE_ROUND_TIMEOUT
configMM_EXPLORE_SUBAGENTS
configMM_PROXY_HOST
configMM_PROXY_PORT18080 mitmproxy listen port
configMM_FRIDA_ENABLED1 SSL-unpinning on/off
configMM_FRIDA_SPAWN
configMM_ACTIVE_SCAN_ENABLED
configMM_ACTIVE_MODE
configMM_AUTHMATRIX_ENABLED
configMM_PASSIVE_SCAN_WORKERS
configMM_FORENSICS_ENABLED
configMM_BIZLOGIC_ENABLED
configMM_BIZLOGIC_DESTRUCTIVE
configMM_BIZLOGIC_MAX_CASES
configMM_VICTIM_CREDENTIALS
configMM_CREDENTIALS
configMM_CROSSUSER_ENABLED
configMM_PROXY_REWRITE
configMM_REPORT_DIRreports where captured traffic/artifacts are stored
configMM_UPLOAD_DIR
configMM_SCOUT_REPORT_DIR
configMM_REDIS_URL
configMM_SCAN_ID
configMM_NO_GUI_LAUNCH
configMM_SCRCPY_ENABLED
configMM_SCRCPY_PORT
configLITELLM_BASE_URL
🔐 secretLITELLM_API_KEY
configMM_MCP_ALLOW_SHELL0 1 exposes mobile_adb_shell (arbitrary adb — powerful)
configMM_MCP_HOST0.0.0.0 bind address (127.0.0.1 = localhost-only, safer)
configMM_MCP_PORT8765 port
configMM_MCP_LOGLEVEL
configMM_MCP_TRANSPORTstreamable-http streamable-http or sse
configTOKENIZERS_PARALLELISM
configGRPC_ENABLE_FORK_SUPPORT
configMOBILERUN_AUTH_URL
🔐 secretOPENAI_API_KEY
configMOBILERUN_CONFIG
configDROIDRUN_CONFIG
configphoenix_url
configphoenix_project_name
configMOBILERUN_TELEMETRY_ENABLED
configDROIDRUN_TELEMETRY_ENABLED
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

6/6 tools missing one or more hints — get_ui (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); tap (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); input_text (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +3 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool inputs are validated

4/6 tool handlers declare input schemas (67%)

Declare an inputSchema with zod/joi/yup on every tool definition.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

No access to sensitive paths

Reads sensitive paths: [blue]Credentials saved to:[/] {Path(credential_path).expanduser()}

Remove reads of sensitive system paths. If you genuinely need them, document why in the README.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/banditpradyun/hunt-droid-mobile-mcp?variant=verified)](https://m8ven.ai/mcp/banditpradyun/hunt-droid-mobile-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 8abb35052478261efc26902bd34508b99e61c075
code hash: fe299f1003092d7c0dfc1bea98fe03e0cf92ffaf932832399fe95fb1547ea507
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client