ModelsAtlas
Explore
Atlas / MCP servers / getsentry / Mobile Build

Mobile BuildBLOCK

mcp/getsentry/mobile-build
MCP server by getsentry · mcp · mcp server · model context protocol · Audited 2026-09-24
⚑ Report / re-scanSource ↗

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

Verdict
BLOCK
Grade
D
Trust score
64 /100
Exposed tools
4 4r · 0w · 0d
Transport
stdio
License
MIT
Stars
6,416
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

[](https://github.com/getsentry/MobileBuildMCP/actions/workflows/ci.yml) [](https://badge.fury.io/js/mobilebuildmcp) [](https://opensource.org/licenses/MIT) [](https://nodejs.org/) [](https://developer.apple.com/xcode/) [](https://www.apple.com/macos/) [](https://modelcontextprotocol.io/) [](https://deepwiki.com/getsentry/MobileBuildMCP) [](https://www.agentaudit.dev/skills/xcodebuildmcp) [](https://pkg.pr.new/~/getsentry/MobileBuildMCP)

Installation

MobileBuildMCP ships as a single package with two modes: a CLI for direct terminal use and an MCP server for AI coding agents. Either install method gives you both.

Option A — Homebrew

brew tap getsentry/xcodebuildmcp
brew install mobilebuildmcp

Option B — npm (Node.js 18+)

npm install -g mobilebuildmcp@latest

Verify either install:

mobilebuildmcp --help

Connect your MCP client

Drop-in config snippets for Cursor, Claude Code, Codex, can be found in the

Read from source at commit a8e6e2fdb267OBSERVED · 2026-09-24
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (npm)
claude mcp add mobilebuildmcp -- npx -y [email protected]
03

Exposed tools (4)

4 read · 0 write · 0 destructive.

ToolRiskDescription
Alpharead
Betaread
Gammaread
TriggerChangeread
04

Trust audit

BLOCKgrade D · trust 64/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (7 observation(s))
Network
declared (7 observation(s))
Shell
declared (6 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (18)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/utils/axe-helpers.ts:204
const res = await exec([axePath, '--version'], 'AXe Version', true);
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHPrompt injection · prompt.tool_poisoning · CWE-94, CWE-1427
src/snapshot-tests/__fixtures__/cli/text/project-scaffolding/scaffold-ios--success.txt:12
1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.
Why it matters. a tool description carrying instructions to the agent
Fix. tool descriptions describe the tool; nothing else
HIGHPrompt injection · prompt.tool_poisoning · CWE-94, CWE-1427
src/snapshot-tests/__fixtures__/cli/text/project-scaffolding/scaffold-macos--success.txt:12
1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.
Why it matters. a tool description carrying instructions to the agent
Fix. tool descriptions describe the tool; nothing else
HIGHPrompt injection · prompt.tool_poisoning · CWE-94, CWE-1427
src/snapshot-tests/__fixtures__/mcp/text/project-scaffolding/scaffold-ios--success.txt:8
1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.
Why it matters. a tool description carrying instructions to the agent
Fix. tool descriptions describe the tool; nothing else
HIGHPrompt injection · prompt.tool_poisoning · CWE-94, CWE-1427
src/snapshot-tests/__fixtures__/mcp/text/project-scaffolding/scaffold-macos--success.txt:8
1. Important: Before working on the project make sure to read the README.md file in the workspace root directory.
Why it matters. a tool description carrying instructions to the agent
Fix. tool descriptions describe the tool; nothing else
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
src/snapshot-tests/preflight/xcode-state.ts:6
'YnBsaXN0MDDUAQIDBAUGBwpYJHZlcnNpb25ZJGFyY2hpdmVyVCR0b3BYJG9iamVjdHMSAAGGoF8QD05TS2V5ZWRBcmNoaXZlctEICVRyb290gAGnCwwVFhwdHlUkbnVsbNMNDg8QEhRXTlMua2V5c1pOUy5vYmplY3RzViRjbGFzc6ERgAKhE4ADgAZcQWN0aXZlU2N
LOWInventory / provenance · inv.hidden_file · CWE-1104
.axe-version
.axe-version
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.prettierignore
.prettierignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.prettierrc.js
.prettierrc.js
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/utils/__tests__/generate-version-validation.test.ts:58
expect(() => new Function(generated)).not.toThrow();
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/utils/__tests__/generate-version-validation.test.ts:69
expect(() => new Function(code)).not.toThrow();
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
benchmarks/claude-ui/run-directory.ts:2
import { runDirectory } from '../../src/benchmarks/claude-ui/run-directory.ts';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
benchmarks/claude-ui/run.ts:2
import { main } from '../../src/benchmarks/claude-ui/harness.ts';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
eslint.config.js:90
'../../utils/index.js',
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
eslint.config.js:91
'../../../utils/index.js',
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
eslint.config.js:94
'../../utils/index.ts',
LOWObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
README.md:4
[![npm version](https://badge.fury.io/js/mobilebuildmcp.svg)](https://badge.fury.io/js/mobilebuildmcp) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/lic
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@clack/prompts, @modelcontextprotocol/sdk, @sentry/node, bplist-parser, chokidar, glob, uuid, yaml
Why it matters. 28 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-09-24 · audit v0.4.1 · source sha a8e6e2fdb267full audit observations/trust-audit/mcp-server/getsentry__mobile-build.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-09-24a8e6e2fdb267BLOCKD64first audit
06

Questions

What is the Mobile Build MCP server?

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

What tools does Mobile Build expose?

4 in total: 4 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Mobile Build safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (64/100) and found 5 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Mobile Build need?

It reads GITHUB_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Mobile Build run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as mobilebuildmcp at 2.7.1.

How current is this page?

The grade is for one exact copy of the source (a8e6e2fdb267), read on 2026-09-24. The repository is watched and re-audited when it changes.

Advertisement