Frida MCP Server

A comprehensive MCP (Model Context Protocol) server that exposes the full power of Frida's dynamic instrumentation toolkit to AI agents.

Features

55 tools covering all major Frida capabilities:

Device & Process Management

• frida_list_devices - List all available Frida devices
• frida_get_device_info - Get detailed device information
• frida_list_processes - List running processes
• frida_list_applications - List installed applications
• frida_get_process - Get process details by name/PID
• frida_spawn - Spawn a new process (suspended)
• frida_resume - Resume a spawned process
• frida_kill - Kill a process

Session Management

• frida_attach - Attach to a running process
• frida_detach - Detach from a session

Script Injection

• frida_inject_script - Inject and run JavaScript in a process
• frida_unload_script - Unload an injected script
• frida_rpc_call - Call RPC functions in scripts
• frida_evaluate - Evaluate arbitrary JavaScript

Function Hooking

• frida_hook_function - Hook native functions
• frida_intercept_method - Intercept ObjC/Java methods
• frida_trace - Trace function calls with patterns

Memory Operations

• frida_memory_scan - Scan memory for patterns
• frida_memory_read - Read bytes from memory
• frida_memory_write - Write bytes to memory
• frida_search_strings - Search for strings in memory

Module Enumeration

• frida_list_modules - List loaded modules
• frida_list_exports - List module exports
• frida_list_imports - List module imports
• frida_resolve_exports - Find functions by pattern (ApiResolver)

Java (Android)

• frida_java_enumerate_classes - List Java classes
• frida_java_hook_method - Hook Java methods
• frida_java_find_instances - Find class instances on heap
• frida_java_call_method - Call Java methods

Objective-C (iOS/macOS)

• frida_objc_enumerate_classes - List ObjC classes
• frida_objc_hook_method - Hook ObjC methods
• frida_objc_find_instances - Find class instances on heap

Advanced

• frida_stalker_trace - Instruction-level tracing
• frida_inject_library - Inject shared libraries
• frida_enable_spawn_gating - Intercept new processes
• frida_disable_spawn_gating - Disable spawn gating
• frida_get_pending_spawn - Get pending spawned processes
• frida_get_process_info - Detailed process information

File Operations

• frida_pull_file - Download file from device
• frida_push_file - Upload file to device

Installation

# Install dependencies
pip3 install frida frida-tools mcp

# Or with --break-system-packages on newer Ubuntu
pip3 install --break-system-packages frida frida-tools mcp

Usage

As stdio MCP server

python3 server.py

Example MCP configuration

{
  "mcpServers": {
    "frida": {
      "command": "python3",
      "args": ["/path/to/frida-mcp/server.py"]
    }
  }
}

Example Workflows

1. List processes and attach

1. Call frida_list_processes to see running processes
2. Call frida_attach with target="processName" or target=1234 (PID)
3. Use the returned session_id for further operations

2. Hook a function

1. frida_attach to the target process
2. frida_hook_function with the session_id, function name, and optional onEnter/onLeave code
3. Observe the script_id and retrieve logs with frida_unload_script when done

3. Trace SSL/crypto calls

1. frida_attach to a network application
2. frida_trace with include=["*SSL*", "*crypto*"] to see all SSL-related calls

4. Android app analysis

1. frida_list_applications on USB device to find the app
2. frida_attach to the app
3. frida_java_enumerate_classes to explore classes
4. frida_java_hook_method to intercept specific methods
5. frida_java_find_instances to find live objects

5. Memory forensics

1. frida_attach to the target process
2. frida_search_strings to find interesting strings
3. frida_memory_read to dump specific memory regions
4. frida_memory_scan for byte patterns

Device Types

• local - Local system (default)
• usb - USB-connected device (Android/iOS with frida-server)
• remote - Remote frida-server over TCP

Requirements

• Python 3.8+
• Frida 16.0+ (pip install frida frida-tools)
• MCP SDK (pip install mcp)

For mobile device support:

• Android: Install frida-server on the device
• iOS: Install frida via jailbreak or use frida-gadget

Security Notes

⚠️ Frida is a powerful tool that can be used for both security research and malicious purposes. Only use on systems you own or have explicit permission to test.

License

MIT

Memory Management (NEW)

• frida_memory_alloc - Allocate memory in target process
• frida_memory_protect - Change memory page permissions
• frida_enumerate_ranges - List memory ranges/maps

Thread Operations (NEW)

• frida_enumerate_threads - List all threads with state
• frida_backtrace - Get stack backtrace

Symbol Resolution (NEW)

• frida_debug_symbol - Resolve symbols from address/name
• frida_list_symbols - List debug symbols from module

Native Calling (NEW)

• frida_native_function - Call native functions directly
• frida_cmodule - Compile and load inline C code

ObjC Extended (NEW)

• frida_objc_call_method - Call ObjC methods on class/instance

Java Extended (NEW)

• frida_java_load_dex - Load DEX files dynamically

Network (NEW)

• frida_socket_connect - Create socket connections from process