APSA mobile app security audit MCP Server

by ictechgyio.github.ictechgy/apsav1.6.0

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

0Pythonstdioofficial registry

context tax

pending

security

97/100

cold start

pending

freshness

Activetoday

Our reading of APSA mobile app security audit, from the data

APSA mobile app security audit is a security MCP server from ictechgy, listed in the official MCP Registry.

We haven't measured its tool list yet, so its token cost is unknown.

Maintenance is active: the last public signal was in the last day (2026-10-18). For comparison, 67% of security servers are active or maintained.

With 0 GitHub stars it ranks #579 of 1,263 security servers we index.

It runs locally on your machine over stdio.

Install APSA mobile app security audit MCP server

claude mcp add apsa -- uvx apsa mcp --root '<project-directory>'

{
  "mcpServers": {
    "apsa": {
      "command": "uvx",
      "args": [
        "apsa",
        "mcp",
        "--root",
        "<project-directory>"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "apsa": {
      "command": "uvx",
      "args": [
        "apsa",
        "mcp",
        "--root",
        "<project-directory>"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "apsa": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "apsa",
        "mcp",
        "--root",
        "<project-directory>"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "apsa": {
      "command": "uvx",
      "args": [
        "apsa",
        "mcp",
        "--root",
        "<project-directory>"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Security signals

97/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Deductions

No security policy (SECURITY.md)-3

Checks

✓Repository hygiene (archived, activity, license, security policy)
○Package metadata (install scripts, provenance) — pending
○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
○Source scan (secrets, CVEs, risky code) by vectra-guard — pending

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal today. The newest of the signals below sets the band.

Last commit (default branch)
2026-10-18 · today · GitHub
Latest release
2026-10-18 · today · GitHub · v1.6.0
Package published
no data · npm/PyPI
Registry entry updated
2026-10-18 · today · official registry · v1.6.0

How it compares in Security

Against the most-starred security servers we index. Token cost is per model turn, measured from each server's live tool list.

Server	Stars	Tools	Tokens / turn	Freshness	Runs
APSA mobile app security audit (this)	0	—	not measured	Active	local
Semgrep	17,123	—	not measured	Active	—
Ida Pro	13,002	—	not measured	Active	—
Ghidra	11,390	—	not measured	Active	—
Robin: AI-Powered Dark Web OSINT	7,591	—	not measured	Active	local
Claude Code Ultimate Guide	6,196	—	not measured	Active	local

All security MCP servers

FAQ

›How do I install the APSA mobile app security audit MCP server in Claude Code?

Run: claude mcp add apsa -- uvx apsa mcp --root '<project-directory>'. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does APSA mobile app security audit require an API key?

No required environment variables are declared in its published metadata.

›Can I use APSA mobile app security audit as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is APSA mobile app security audit in the official MCP registry?

Yes, as io.github.ictechgy/apsa.

Sources and method

Official MCP Registry entry: updated 2026-10-18
GitHub repository: fetched 2026-10-19
Package registry (npm / PyPI): listed
Security signals, computed by us: 2026-10-19
Last checked against all sources: 2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.