Frida Mobile MCP

Package (npm 0.6.0)

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "frida-mobile-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "FRIDA_DEVICE_ID": "<YOUR_VALUE>",
        "FRIDA_MCP_ALLOW_CUSTOM_SCRIPTS": "<YOUR_VALUE>",
        "FRIDA_MCP_MEMORY_WRITE": "<YOUR_VALUE>",
        "FRIDA_MCP_REMOTE": "<YOUR_VALUE>",
        "FRIDA_MCP_SCHEMA_PROFILE": "<YOUR_VALUE>",
        "FRIDA_MCP_MAX_RESPONSE_CHARS": "<YOUR_VALUE>",
        "FRIDA_MCP_HTTP_TOKEN": "<YOUR_VALUE>",
        "FRIDA_MCP_RUNTIME": "<YOUR_VALUE>",
        "FRIDA_MCP_DEBUG": "<YOUR_VALUE>",
        "FRIDA_MCP_BRIDGES_DIR": "<YOUR_VALUE>",
        "FRIDA_MCP_COMPILER_PROJECT_DIR": "<YOUR_VALUE>",
        "FRITAP_AGENT_PATH": "<YOUR_VALUE>",
        "FRITAP_VERSION": "<YOUR_VALUE>"
      }
    }
  }
}

• FRIDA_DEVICE_ID — Default Frida device ID to use (e.g. emulator-5554 or a USB serial). Can also be set with --device.
• FRIDA_MCP_ALLOW_CUSTOM_SCRIPTS — Set to "1" to enable execution of custom Frida scripts (execute_script and custom hook_function handlers). Disabled by default.
• FRIDA_MCP_MEMORY_WRITE — Set to "1" to enable the write_memory tool. Disabled by default for safety.
• FRIDA_MCP_REMOTE — host[:port] of a remote frida-server to add as a remote device at startup (port defaults to 27042).
• FRIDA_MCP_SCHEMA_PROFILE — Tool schema profile. "compact" shortens tool schemas and descriptions for clients with small context windows.
• FRIDA_MCP_MAX_RESPONSE_CHARS — Maximum number of characters in a single tool response; longer output is truncated.
• FRIDA_MCP_HTTP_TOKEN secret — Bearer token required by HTTP clients. Only used with --transport http (required when --host is not loopback); unused for the default stdio transport.
• FRIDA_MCP_RUNTIME — Frida script runtime to use for injected agents.
• FRIDA_MCP_DEBUG — Set to "1" to enable debug logging on stderr. Can also be set with --debug.
• FRIDA_MCP_BRIDGES_DIR — Directory with prebuilt Java/ObjC bridge bundles (defaults to dist/bridges inside the package)
• FRIDA_MCP_COMPILER_PROJECT_DIR — Cache directory for the frida.Compiler project used to compile ES module scripts
• FRITAP_AGENT_PATH — Path to a friTap fritap_agent.js bundle for capture_tls (otherwise the installed friTap Python package or a pinned download is used)
• FRITAP_VERSION — friTap release tag to download when no local agent is found (default v2.5.2)