Atlas / MCP servers / skwallace36 / Pepper

PepperBLOCK

Name: Pepper
Author: skwallace36

mcp/skwallace36/pepper

MCP server by skwallace36 · accessibility · ai agent · claude · Audited 2026-10-07

⚑ Report / re-scan Source ↗

iOS dynamic library MCP for agents

Verdict

BLOCK

Grade

Trust score

52 /100

Exposed tools

4 4r · 0w · 0d

Transport

stdio

License

MIT

Stars

105

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Pepper gives AI agents eyes and hands inside iOS Simulator apps.

It injects a shared library into any running simulator app — no source changes, no SDK, no build step. Your agent sees the screen as structured data, taps buttons, inspects live objects, intercepts network calls, reads the heap, and debugs layout issues. Dylib injection requires the simulator; device support uses a different mechanism.

https://github.com/user-attachments/assets/42ab3f1b-21f8-48e6-820f-7ca4012fb03b

Claude navigating and inspecting [Ice Cubes](https://github.com/Dimillian/IceCubesApp) (Mastodon client) with zero source access.

Works with Claude Code · Cursor · Claude Desktop · any MCP client

Quickstart

Requires macOS 14+, Python 3.10+, and an iOS Simulator runtime.

pip install pepper-ios
pepper-ctl deploy            # inject into the frontmost simulator app
pepper-ctl look              # see what's on screen

Then ask your agent:

"Tap through the onboarding flow and make sure every screen looks right"

That's it. The agent uses Pepper's MCP tools to see, tap, and inspect — no extra config needed.

Other MCP clients (Cursor, Claude Desktop, etc.)

{
"mcpServers": {
"pepper": {
"command": "pepper-mcp"
}
}
}

Homebrew

brew install --HEAD skwallace36/pepper/pepper

Tap: `skwallace36/homebrew-pepper`

What It Does

$ pepper-ctl look
Screen: navigation_stack  (9 interactive, 4 text)

seg  "Trending"                       → tap text:"Trending"
btn  "Sheryl Weikal, Right wing tech bros: we love St..."
→ tap text:"Sheryl Weikal, Right wing tech bros: we ..."
seg  "Settings"                       → tap text:"Settings"

$ pepper-ctl tap --text "Settings"
Action: Tapped Settings
Scree

Read from source at commit 85ea78e915deOBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add pepper-ios -- uvx pepper-ios

claude-desktop

{
  "mcpServers": {
    "pepper-ios": {
      "command": "uvx",
      "args": [
        "pepper-ios"
      ]
    }
  }
}

Exposed tools (4)

4 read · 0 write · 0 destructive.

Tool	Risk	Description
`nav_back`	read	Go back one screen in a navigation stack. For modals/sheets use dismiss; for jumping to a screen use navigate.
`nav_dismiss`	read	Close a modal, sheet, popover, or overlay. For navigation stack screens use back; for system dialogs use dialog.
`nav_keyboard`	read	Dismiss the on-screen keyboard. Call after input_text when you need to tap elements the keyboard covers.
`nav_screen`	read	Identify which screen is currently displayed. Returns screen name and view controller class — no element data.

Trust audit

BLOCKgrade F · trust 52/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: UNDECLARED (10 observation(s))
Network: declared (7 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

Makefile:103

@# Inject via SIMCTL_CHILD_ at exec() time instead (see simctl launch call below).

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table