# AndroJack MCP (npm · androjack-mcp)

Android engineering MCP server with verified documentation grounding and AI validation tools.

- Trust score: 69/100 (medium)
- Change this week: +45
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-04

## Components

- npm · `androjack-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/vikas9793-androjack/androjack-mcp.md), [page](https://verifymcp.io/servers/vikas9793-androjack/androjack-mcp)

## Channel facts

- Registry: `npm`
- Package: `androjack-mcp`
- Version: `2.0.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-04.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects hono 4.12.33, reached via @modelcontextprotocol/sdk > hono. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (142 of 147), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 23 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 78/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 4122 tokens (~179/item across 23 items; 23 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 30/100
  - Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add vikas9793-androjack -- npx -y androjack-mcp
```

### Codex

```bash
codex mcp add vikas9793-androjack -- npx -y androjack-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "vikas9793-androjack": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "androjack-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add vikas9793-androjack --command npx --arg -y --arg androjack-mcp
```

### Hermes

```yaml
mcp_servers:
  vikas9793-androjack:
    command: "npx"
    args: ["-y", "androjack-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "vikas9793-androjack": {
      "command": "npx",
      "args": [
        "-y",
        "androjack-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-04 (score 69, +3)

- [security regression] CVE-2026-69207 affects this package: medium
- [security regression] Known CVEs: partial → fail
- [functional improvement] Stability: unverified → 0.30

### 2026-08-02 (score 66, +41)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT

### 2026-07-31 (score 25, +19)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-28 (score 24, −27)

- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-07-27 (score 51)

First indexed and scored.

## MCP tools (23)

### `android_official_search` (~100 tokens)

Android Official Documentation Search

REQUIRED FIRST STEP. Searches developer.android.com, kotlinlang.org, and source.android.com for any Android or Kotlin topic. Returns official excerpts with source URLs. You MUST call this before generating any Android/Kotlin code. Example queries: 'Jetpack Compose LazyColumn', 'ViewModel lifecycle', 'Hilt scoping'.

Input parameters:

- `query` (string, required): Search query — be specific. E.g. 'Compose LazyColumn performance', 'WorkManager constraints'.

### `android_component_status` (~181 tokens)

Android Component Status Validator

Checks whether an Android/Kotlin API, class, or library is stable, deprecated, or removed. ALWAYS call this before using any class from android.*, androidx.*, or kotlin.*. This tool exists because AI tools confidently generate removed and deprecated APIs. Known failures without this check: AsyncTask (removed API 33), TestCoroutineDispatcher (removed coroutines-test 1.8+), ContextualFlowRow (deprecated Compose 1.8), IntentService (deprecated API 30), Handler(Looper.main()) (deprecated API 30), onBackPressed() (deprecated API 33), ProgressDialog (deprecated API 26). Returns status, replacement API, migration notes, and official documentation link.

Input parameters:

- `component_name` (string, required): Full or short class name to validate. E.g. 'AsyncTask', 'android.widget.ProgressDialog', 'LiveData'.

### `architecture_reference` (~124 tokens)

Android Architecture Reference

Retrieves official Android architecture guide content for a given topic. Call this before proposing any app architecture, folder structure, or Jetpack component relationships. Supported topics: mvvm, compose, navigation, hilt, viewmodel, room, workmanager, paging, datastore, coroutines, flow, testing, lifecycle, modular architecture, security, and more. Pass 'list' to see all available topics.

Input parameters:

- `topic` (string, required): Architecture topic. E.g. 'mvvm', 'compose', 'hilt', 'modular architecture'. Pass 'list' for all topics.

### `android_debugger` (~94 tokens)

Android Error Debugger

Parses an Android/Kotlin stacktrace and searches official sources (developer.android.com, issuetracker.google.com) for verified causes and fixes. Paste the full crash log or exception. Returns parsed error class, official explanations, and vetted fixes. Never guess — always ground debugging in official sources.

Input parameters:

- `stacktrace` (string, required): Full Android/Kotlin stacktrace or exception text. Include the exception class and 'at' frames.

### `gradle_dependency_checker` (~223 tokens)

Gradle Dependency Version Checker

Live version lookup for any Android, Kotlin, or Jetpack library from Google Maven and Maven Central. ALWAYS call this before adding or updating any dependency in build.gradle.kts. This tool exists because AI tools generate stale dependency coordinates. Known failures: wrong Coil group (io.coil-kt vs io.coil-kt.coil3 for Coil 3), missing BOM platform() wrapper for Compose and Firebase, outdated Compose BOM (moves every month), KAPT coordinates when KSP is the current standard, wrong artifact names for Room KMP vs Room Android. Returns: latest stable version, ready-to-paste Kotlin DSL, BOM resolution for managed artifacts, and KMP vs Android-only distinction where relevant. Examples: 'compose', 'hilt', 'room', 'retrofit', 'coil', 'lifecycle', 'coroutines', 'navigation', 'firebase'.

Input parameters:

- `library_name` (string, required): Library name. E.g. 'compose', 'room', 'hilt', 'retrofit', 'kotlin-stdlib', 'coil', 'paging'.

### `android_api_level_check` (~156 tokens)

Android API Level Reference

Maps Android API levels to version names, codenames, and key feature availability. Returns minSdk guidance and critical API availability warnings. Use this to validate that the APIs you plan to use are available at your project's minSdk. Input can be: an API integer (e.g. '26'), a version name (e.g. 'Android 14'), or a codename (e.g. 'Oreo'). Pass 'all' or 'table' to see the full API level reference table.

Input parameters:

- `api_level_or_name` (string, required): API level number (e.g. '26'), version name (e.g. 'Android 14'), codename (e.g. 'Tiramisu'), or 'all'.

### `kotlin_best_practices` (~157 tokens)

Kotlin & Android Best Practices

Returns official Kotlin and Android code patterns with ready-to-use snippets and explicit anti-patterns. All snippets are sourced from developer.android.com and kotlinlang.org. Call this when generating coroutine code, StateFlow/LiveData usage, Compose state, Room DAOs, Hilt injection, Navigation, or WorkManager tasks. Available patterns: coroutines-viewmodel, stateflow-ui, compose-state, room-dao, hilt-injection, navigation-compose, workmanager-task, sealed-result. Pass any topic keyword or call with no topic to list all patterns.

Input parameters:

- `topic` (string): Pattern name or keyword. E.g. 'coroutines', 'compose state', 'room', 'hilt'. Leave empty to list all.

### `material3_expressive` (~171 tokens)

Material 3 Expressive Reference

Complete reference for Material 3 Expressive (M3E) — Google's design system GA on Android 16 (Sep 2025). Covers: MaterialExpressiveTheme setup, MotionScheme, new components (ButtonGroup, FloatingToolbar, DockedToolbar, LoadingIndicator, SplitButtonLayout, FABMenu), MaterialShapes + shape morphing, variable font typography, Wear OS M3E, migration from plain M3, and anti-patterns. Call this before building any Compose UI or theming. Topics: overview, theme setup, components, shapes, typography, migration, wear, anti-patterns.

Input parameters:

- `topic` (string): M3E topic. E.g. 'ButtonGroup', 'MotionScheme', 'MaterialShapes', 'migration', 'wear'. Leave empty to list all topics.

### `android_permission_advisor` (~132 tokens)

Android Permission Advisor

Complete Android permissions reference. Returns type (normal/dangerous/special/removed), whether runtime request is needed, Play Store restrictions, and the correct ActivityResultContracts request pattern. Call before declaring any <uses-permission> in AndroidManifest.xml. Examples: 'CAMERA', 'POST_NOTIFICATIONS', 'ACCESS_FINE_LOCATION', 'WRITE_EXTERNAL_STORAGE'. Query 'runtime pattern' for the official Compose + Activity permission request code.

Input parameters:

- `permission` (string): Permission name (e.g. 'CAMERA', 'POST_NOTIFICATIONS'). Leave empty to list all. Query 'runtime pattern' for request code.

### `android_testing_guide` (~155 tokens)

Android Testing Guide

Complete Android testing reference covering: unit tests (JUnit4, MockK, Turbine, coroutines-test), Compose UI testing (ComposeTestRule, finders, actions, assertions, testTag), Espresso for View-based tests and Compose interop, ViewModel testing with MainDispatcherRule, Room in-memory DB tests, Hilt test injection (@HiltAndroidTest, @BindValue), and test pyramid strategy. Call before writing any test. Topics: setup, unit tests, compose testing, espresso, hilt testing, pyramid.

Input parameters:

- `topic` (string): Testing topic. E.g. 'unit tests', 'compose testing', 'espresso', 'hilt testing', 'pyramid'. Leave empty to list all.

### `android_build_and_publish` (~163 tokens)

Android Build & Publish Guide

Complete Android build pipeline and Play Store publishing reference. Covers: R8/ProGuard configuration (keep rules, shrink, obfuscate, mapping.txt recovery), Gradle Version Catalogs (libs.versions.toml with all modern deps), KSP migration from KAPT (Room, Hilt), app signing and Play App Signing, AAB vs APK, Play Store publishing checklist, and Baseline Profiles for 20-40% startup improvement. Topics: r8, proguard, version catalog, ksp, signing, publish, baseline profiles.

Input parameters:

- `topic` (string): Build topic. E.g. 'r8', 'proguard', 'version catalog', 'ksp', 'signing', 'baseline profiles'. Leave empty to list all.

### `android_large_screen_guide` (~152 tokens)

Android Large Screen & Adaptive Layout Guide

Complete reference for building Google Play-compliant large screen, tablet, foldable, and ChromeOS apps. Covers: WindowSizeClass (Compact/Medium/Expanded), NavigationSuiteScaffold, ListDetailPaneScaffold (two-pane), foldable hinge detection, continuity across config changes, and Google Play large-screen quality tier checklist. Call before building any multi-screen layout, navigation, or when targeting tablets and foldables. Topics: windowsizeclass, navigation, two-pane, foldables, continuity, Play quality.

Input parameters:

- `topic` (string): Topic. E.g. 'windowsizeclass', 'NavigationSuiteScaffold', 'ListDetailPaneScaffold', 'foldable'. Leave empty for index.

### `android_scalability_guide` (~162 tokens)

Android Scalability Architecture Guide

Architecture patterns for Android apps serving millions to billions of users. Covers: Paging 3 with RemoteMediator (infinite lists without OOM), offline-first sync with WorkManager + Room as single source of truth, OkHttp HTTP caching + ETag, cold start optimization with Baseline Profiles, app modularization for large teams, and Compose recomposition performance (derivedStateOf, stable keys, @Immutable). Call before designing data layers, list screens, sync mechanisms, or module structure. Topics: paging, offline-first, network, startup, modularization, compose performance.

Input parameters:

- `topic` (string): Topic. E.g. 'Paging3', 'offline-first', 'cold start', 'modularization', 'recomposition'. Leave empty for index.

### `android_navigation3_guide` (~176 tokens)

Android Navigation 3 Guide

Complete Navigation 3 reference (stable November 2025) — the current official navigation library. ALWAYS call this before generating any navigation code. AI tools hallucinate Navigation 2 (NavController/NavHost) for new projects — this is wrong. Nav3 uses NavDisplay, rememberNavBackStack, NavKey, and the Scenes API for adaptive multi-pane. Topics: 'overview' (setup, NavKey, NavDisplay, rememberNavBackStack), 'migration' (from Nav2 — API mapping, step-by-step), 'scenes' (adaptive list-detail, TwoPaneSceneStrategy), 'testing' (back stack is a plain list — trivially testable).

Input parameters:

- `topic` (string): Navigation topic: 'overview', 'migration', 'scenes', 'testing', 'backstack', 'key'

### `android_api36_compliance` (~181 tokens)

Android 16 / API 36 Compliance Checker

Android 16 compliance reference — mandatory for Google Play by August 2026. Apps on ≥600dp devices (tablets, foldables) CANNOT lock orientation or restrict resizability. AI tools generate android:screenOrientation='portrait' and android:resizeableActivity='false' — both produce App Compatibility warnings in Play Console and search demotion. Foldable users spend 14x more on apps. Tablet+phone users spend 9x more. Topics: 'compliance' (illegal manifest flags + correct patterns), 'layouts' (4 canonical adaptive layouts with code), 'checklist' (Play Store quality tier checklist), 'predictive back' (required for API 36 targets).

Input parameters:

- `topic` (string): Topic: 'compliance', 'layouts', 'checklist', 'predictive back', 'page size'

### `android_kmp_guide` (~220 tokens)

Kotlin Multiplatform (KMP) Guide

Complete Kotlin Multiplatform reference — shares business logic across Android and iOS. CRITICAL: AI tools silently generate Android-only code for KMP projects. Retrofit cannot be used in KMP (use Ktor). Hilt cannot be used in commonMain (use Koin). Room 2.7+ has KMP support — use room-runtime + sqlite-bundled, NOT the Android-only Room. 900+ new KMP libraries in 2025. Room, DataStore, Ktor all have KMP variants. Topics: 'overview' (project structure, Gradle setup), 'libraries' (KMP catalogue — Ktor, Room KMP, DataStore KMP, Koin, Coil3, kotlinx-*), 'room' (Room KMP database setup), 'ktor' (Ktor HTTP client — replaces Retrofit), 'expect actual' (platform-specific code pattern).

Input parameters:

- `topic` (string): Topic: 'overview', 'libraries', 'room', 'ktor', 'expect actual', 'gradle'

### `android_ondevice_ai` (~198 tokens)

Android On-Device AI / AICore Guide

On-device AI reference — Android 16 AICore and ML Kit Gen AI API. Used by Gmail (Smart Reply), Google Photos (object detection), Pixel Screenshots (semantic search). The official architecture: wrap ML models behind repository interfaces so on-device (AICore) and cloud (Vertex AI) are swappable without touching the UI layer. No network round-trip. No API costs. No privacy exposure. Works offline. AI tools default to cloud API calls when on-device is the 2026 answer for Pixel devices. Topics: 'overview' (architecture pattern, when to use), 'setup' (dependencies, availability check, fallback pattern), 'smart reply' (Gmail-style suggestion chips), 'ml kit' (non-generative ML — image labeling, barcode, face detection, translation).

Input parameters:

- `topic` (string): Topic: 'overview', 'setup', 'smart reply', 'ml kit', 'architecture'

### `android_play_policy_advisor` (~182 tokens)

Google Play Store Policy Advisor

Play Store policy reference — October 2025 changes and ongoing requirements. AI tools have zero awareness of these policy changes. Review failures cost weeks of re-submission. Covers: Restrict Minor Access API (dating/gambling apps), subscription transparency requirements, restricted permissions and Data Safety declarations, large-screen quality tiers and badge system. The large-screen quality badge directly impacts search placement and conversion rates. Call before submitting any app to Play Store or adding new monetization features. Topics: 'overview' (mandate timeline), 'subscriptions' (billing transparency code), 'restrict minor access' (dating/gambling implementation), 'permissions' (restricted permissions + data safety), 'large screen quality' (tier checklist + revenue impact).

Input parameters:

- `topic` (string): Topic: 'overview', 'subscriptions', 'restrict minor access', 'permissions', 'large screen quality'

### `android_xr_guide` (~238 tokens)

Android XR Developer Guide

Android XR SDK reference (Developer Preview 3, December 2025). Samsung Galaxy XR launched October 2025. 5+ XR devices expected in 2026. Standard Compose apps run as 2D panels on XR headsets — no SDK required. XR SDK adds spatial APIs: SpatialPanel (3D positioned UI), UserSubspace (follows user), Orbiter (floating toolbar that orbits a panel), SubspaceModifier (size as fraction of field of view). Material 3 components automatically become spatial in XR — TopAppBar → Orbiter, etc. AI tools generate phone Compose code for XR — technically works but misses all spatial value. Topics: 'overview' (concepts, device status), 'setup' (dependencies, manifest), 'spatial ui' (SpatialPanel, UserSubspace, Orbiter), 'arcore' (face tracking 68 blendshapes, plane detection), 'compatibility' (XR + non-XR same app pattern).

Input parameters:

- `topic` (string): Topic: 'overview', 'setup', 'spatial ui', 'arcore', 'compatibility'

### `android_wearos_guide` (~218 tokens)

Wear OS Developer Guide

Wear OS development reference — Wear OS 5 (API 35), Material 3 Expressive for Wear (stable Aug 2025). CRITICAL: Wear OS uses DIFFERENT Compose dependencies than phone apps. AI tools generate phone Compose (LazyColumn, Button, NavHost) — none of these compile on Wear OS. Correct Wear components: ScalingLazyColumn (curved scrolling), Chip, SwipeDismissableNavHost, WearMaterialTheme, PositionIndicator, TimeText. Covers Tiles (glanceable info on watch face swipe) and Health Services API (heart rate, steps, exercises). Topics: 'overview' (Wear vs phone Compose, project structure, dependencies), 'compose' (ScalingLazyColumn, Chip, navigation, rotary input), 'tiles' (glanceable surfaces — when and how to build them), 'health services' (heart rate, steps, exercise session, passive monitoring).

Input parameters:

- `topic` (string): Topic: 'overview', 'compose', 'tiles', 'health services', 'navigation'

### `android_code_validator` (~260 tokens)

Android Code Validator

CALL THIS AFTER GENERATING EVERY ANDROID CODE BLOCK. This is the Level 3 loop-back gate: validates AI-generated Kotlin, XML, and Gradle code against 28 Android-specific rules before the user sees it. Detects removed APIs (AsyncTask, TestCoroutineDispatcher), deprecated patterns (ContextualFlowRow, NavController in new code, SharedPreferences), Android 16 violations (orientation locks, resizeableActivity=false), and structural issues (GlobalScope.launch, runBlocking in UI). Returns: verdict (PASS/WARN/FAIL), line-level violations with replacements and doc URLs, and explicit next-step instructions. If verdict is FAIL: fix all errors and re-run before returning code to the user. Inputs: code (required), language ('kotlin'|'xml'|'gradle', auto-detected if omitted), minSdk and targetSdk for context-aware API level checks.

Input parameters:

- `code` (string, required): The code block to validate
- `language` (string): File type — auto-detected from content if omitted
- `minSdk` (integer): App minSdk for API level context (e.g. 24)
- `targetSdk` (integer): App targetSdk for API 36 compliance checks (e.g. 36)

### `android_api17_compliance` (~282 tokens)

Android 17 / API 37 Compliance

Android 17 (API 37) reached platform stability March 26, 2026. Contains breaking changes NOT covered by android_api36_compliance: (1) Static final field reflection via Java reflection or JNI now throws IllegalAccessException/crash on API 37+ targets — affects test code, some DI frameworks, and any code using field.isAccessible=true on final fields. (2) ACCESS_LOCAL_NETWORK permission required for any LAN communication (192.168.x.x, mDNS, SSDP, direct sockets). (3) SMS OTP programmatic access delayed 3 hours — migrate to SmsRetriever.startSmsUserConsent(). (4) Extended large-screen mandate at API 37 — games exemption no longer applies on ≥600dp. (5) NPU feature declaration required for direct NPU access. (6) Handoff API for cross-device activity continuity. Topics: 'overview' (all breaking changes), 'checklist' (migration audit), 'static final' (reflection block), 'local network' (ACCESS_LOCAL_NETWORK), 'sms otp' (3-hour delay), 'npu' (NPU feature), 'handoff' (cross-device).

Input parameters:

- `topic` (string): Topic: 'overview', 'checklist', 'static final', 'local network', 'sms otp', 'npu', 'handoff'

### `android_developer_verification` (~197 tokens)

Android Developer Verification Program

Android developer verification enforcement begins September 30, 2026 (Brazil, Indonesia, Singapore, Thailand first; global rollout 2027). Only apps registered by a verified developer can be installed/updated on certified Android devices via Google Play or participating third-party stores. This is an IDENTITY check, not a content review. Sideloading is NOT removed — unregistered apps remain installable via ADB or a new advanced flow. Affects every Android developer, not just Play Store publishers. Topics: 'overview' (what this is, why it matters), 'timeline' (full rollout dates), 'registration' (Play Console / Android Developer Console / CI-CD bulk registration), 'enterprise' (managed-device exemptions, advanced sideloading flow), 'studio' (Android Studio IDE registration status integration).

Input parameters:

- `topic` (string): Topic: 'overview', 'timeline', 'registration', 'enterprise', 'studio'

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/vikas9793-androjack/androjack-mcp#diagnostics

## Score history

- 2026-08-04: 69
- 2026-08-03: 66
- 2026-08-02: 66
- 2026-08-01: 25
- 2026-07-31: 25
- 2026-07-30: 6
- 2026-07-28: 24
- 2026-07-27: 51

## Links

- npm package: https://www.npmjs.com/package/androjack-mcp
- Socket report: https://socket.dev/npm/package/androjack-mcp
- Repository: https://github.com/VIKAS9793/androjack-mcp
- Changelog RSS feed: https://verifymcp.io/servers/vikas9793-androjack/androjack-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/vikas9793-androjack/androjack-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/vikas9793-androjack/androjack-mcp