DexSQLMCP Server

DexSQL is a native tool from the LSPosed team that lets you inspect Android binaries by writing SQL. Instead of paging through decompiler output, an AI agent can combine signatures, string literals and call relationships in a single query across one or many APK and DEX files and get back only the structured rows it needs. Queries can be generated, refined and saved as scripts, so an analysis you ran once is easy to repeat on the next release of an app.

The same executable serves both a CLI (dexsql query --input app.apk --sql "...") and a built-in stdio MCP server (dexsql mcp), so there is no GUI or separate JVM to run. It reads DEX data directly and keeps loaded datasets in memory for repeated low-latency queries; the project publishes benchmarks against tools such as JADX, DexDec and others, including a replayed real agent session on a 343 MiB Douyin APK with 56 DEX files. The server exposes its schema and documentation through MCP resources, can show relevant Smali for a match, and parses APKs locally without modifying the input. It is listed in the official MCP Registry as org.lsposed/dexsql, ships a Claude Desktop .mcpb bundle for macOS, x86_64 Linux and x86_64 Windows, and has an install-dexsql agent skill that downloads a checksum-verified binary and wires up the MCP config.

It is aimed at reverse engineers, Android security researchers and developers auditing third-party SDKs. DexSQL itself is closed-source freeware under the DexSQL Binary License 1.0, which allows personal and commercial use and redistribution of the binary; the installer skill and docs are MIT.