Atlas / MCP servers / dawnslab / Jeb

JebBLOCK

Name: Jeb
Author: dawnslab

mcp/dawnslab/jeb

MCP server by dawnslab · jeb · jeb python scripts · mcp · Audited 2026-10-06

⚑ Report / re-scan Source ↗

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

19 17r · 2w · 0d

Transport

sse · stdio

License

—

Stars

260

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://mseep.ai/app/flankerhqd-jebmcp)

A quick-and-dirty MCP server&Plugin for JEB Pro. Tested on Cline & Cursor & RooCode.

Reference: https://github.com/mrexodia/ida-pro-mcp

Requirements

Python >= 3.11
uv: https://docs.astral.sh/uv/getting-started/installation/

Usage

COPY the src/jebmcp/MCP.py to $JEBINSTALLATION_DIR/scripts. Make sure the jython file is also present
Choose and Start the script in JEB GUI (File->Scripts->Scripts selector...), check for desired output:

[MCP] Plugin loaded
[MCP] Plugin running
[MCP] Server started at http://127.0.0.1:16161

Add this MCP server's config in cline/cursor/etc, as in the sample

安装

要求:

安装 python3.11及以上版本
安装 uv https://docs.astral.sh/uv/getting-started/installation/

RooCode 使用方法:

使用 vscode 打开该工具,此时目录结构如下:

.
├── README.md
├── jeb-mcp
│   ├── pyproject.toml
│   ├── src
│   │   └── jeb_mcp
│   │       ├── MCP.py
│   │       ├── server.py
│   │       └── server_generated.py
│   └── uv.lock
└── sample_cline_mcp_settings.json

点击左侧活动栏 rooCode 图标,然后继续点击 RooCode 对话框右上角 ...,最后点击编辑项目 MCP 按钮,

会在当前目录下产生一个 .roo 目录,其中包含 mcp.json 文件。

修改 mcp.json 文件为下列内容:

{
"mcpServers": {
"jeb": {
"command": "uv",
"args": ["--directory", "jeb-mcp/src/jeb_mcp", "run", "server.py"],
"timeout": 1800,
"disabled": false,
"autoApprove": [
"ping",
"check_connection",
"get_manifest",
"get_all_exported_activities",
"get_exported_activities_count",
"get_an_exported_activity_by_index",
"get_class_decompiled_code",
"get_method_decompiled_code",
"get_method_overrides",
"get_method_callers",
"get_superclass",
"get_interfaces",
"get_class_methods",
"get_class_fields",
"rename_class

Read from source at commit c9fb1804ce47OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add jeb-mcp -- uvx jeb-mcp

claude-desktop

{
  "mcpServers": {
    "jeb-mcp": {
      "command": "uvx",
      "args": [
        "jeb-mcp"
      ]
    }
  }
}

Exposed tools (19)

17 read · 2 write · 0 destructive.

Tool	Risk	Description
`add_comment`	write
`check_connection`	read	Check if the JEB plugin is running
`check_java_identifier`	read
`export_all_resources`	read
`get_all_classes`	read	List all class signatures in the APK (from the main DEX unit).
`get_apk_all_files`	read	Retrieve all file names for a given category (resource or asset) present in the APK.
`get_apk_file_content`	read
`get_class_hierarchy`	read	Get the superclass or interfaces of the given class.
`get_class_members`	read	Get a list of all method or field signatures defined in the given class.
`get_decompiled_code`	read
`get_exported_components`	read
`get_manifest`	read
`get_method_overrides`	read
`get_smali_code`	read
`list_cross_references`	read	Retrieve callers (XREFs) of the item at the provided address or signature.
`list_dex_strings`	read	Retrieve all strings from the DEX constant pools. Useful for searching hardcoded keys or URLs.
`perform_security_scan`	read
`rename_code_item`	write
`search_in_project`	read

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: declared (1 observation(s))
Dependencies: pinned
Secrets in source: none-found

Findings (4)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

jeb-mcp/src/jeb_mcp/server.py:80

exec(compile(code, GENERATED_PY, "exec"))

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWInventory / provenance · inv.no_license · CWE-1104

Why it matters. no LICENSE file and no repo licence

Fix. add a licence

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

README.md:21

[MCP] Server started at http://127.0.0.1:16161

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

README.md:116

[MCP] Server started at http://127.0.0.1:16161

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-06 · audit v0.4.1 · source sha c9fb1804ce47full audit observations/trust-audit/mcp-server/dawnslab__jeb.json · Report an issue / request a re-scan

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

Date	Source	Verdict	Grade	Score	Change
2026-10-06	`c9fb1804ce47`	BLOCK	D	69	first audit

Questions

What tools does Jeb expose?

19 in total: 17 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Jeb safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What credentials does Jeb need?

No credential environment variables were found in its source, so it appears to need none.

How does Jeb run?

It speaks sse and stdio, so it runs as a local process your client starts. It is published on PyPI as jeb-mcp.

How current is this page?

The grade is for one exact copy of the source (c9fb1804ce47), read on 2026-10-06. The repository is watched and re-audited when it changes.

Source	dawnslab/jebmcp
PyPI	`jeb-mcp`
Transports	sse · stdio
Activity	pushed 162d ago