// SCAN REPORT

SO Analyzer MCP

56 tools. 15 can modify or destroy data without limits.

15 write tools that can modify data. Rate limits recommended.

Last updated: 28 Sept 2026

15 can modify or destroy data

41 read-only

56 tools total

Community server · catalogue entry checked 28/09/2026

How to control SO Analyzer MCP ↓

TOOL MAP

What SO Analyzer MCP exposes to your agents

Read (41) Write / Execute (15) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous SO Analyzer MCP tools

Execute · High so_decompile This tool executes a decompilation engine (radare2, Ghidra, or a built-in disassembler) against a binary to produce pseudocode. Execute · High blutter_export_hooks This tool generates Frida hook scripts that can intercept, modify, and log function calls at runtime. Execute · High flutter_generate_hook This tool generates Frida hook scripts for Flutter applications. Execute · High flutter_patch_apk This tool modifies APK binaries to bypass SSL/TLS certificate validation.

15 of SO Analyzer MCP's 56 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control SO Analyzer MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and SO Analyzer MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "so_patch_bytes": {
    "limits": [
      {
        "counter": "so_patch_bytes_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "blutter_func_detail": {
    "limits": [
      {
        "counter": "blutter_func_detail_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register SO Analyzer MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SO ANALYZER →

Instant setup, no code required.

FULL CATALOGUE

All 56 SO Analyzer MCP tools

EXECUTE 12 tools

Execute blutter_export_hooks 为指定函数生成Frida Hook脚本。类型:trace/modify/log Execute blutter_search_vip ⭐在Blutter输出中搜索VIP/会员相关函数，自动生成修改建议 Execute flutter_analyze_apk ⭐完整分析Flutter APK：解压→提取SO→Blutter分析→生成Hook脚本 Execute flutter_analyze_libapp ⭐使用Blutter分析libapp.so，恢复Dart符号和函数（核心工具） Execute flutter_generate_hook 生成Flutter Frida Hook脚本。类型:trace/modify/args Execute flutter_patch_apk 自动patch Flutter APK的SSL验证（一键操作） Execute flutter_patch_ssl Patch SSL验证（绕过证书检测，用于抓包） Execute flutter_ssl_offset_v2 ⭐核心工具！模拟IDA分析流程：1.搜索ssl_client 2.xrefs_to 3.智能选择函数 4.生成脚本 Execute so_decompile ⭐反编译函数生成伪代码。支持radare2(默认,轻量)/ghidra(高质量)/simple(无依赖) Execute so_patch_branch 修改分支跳转指令。force_jump=强制跳转/no_jump=不跳转/invert=反转条件 Execute so_patch_nop 将指令替换为NOP(空操作)，用于跳过检测代码 Execute so_patch_return ⭐修改函数直接返回指定值(VIP破解核心工具)。支持:0/1/true/false/-1/max/自定义数值

WRITE 3 tools

Write so_patch_bytes 在指定偏移处修改字节 Write so_patch_hex 自定义Patch-直接写入十六进制字节（高级用户） Write so_replace_bytes 查找并替换字节

READ 41 tools

Read blutter_func_detail 获取指定地址函数的详细信息和汇编代码 Read blutter_parse ⭐解析Blutter输出目录，获取包、函数、类、字符串等完整信息 Read blutter_search_func 搜索Blutter解析出的函数。类型:name/address/package/class Read blutter_search_string 搜索Blutter解析出的字符串（从pp.txt） Read flutter_check_blutter 检查Blutter环境是否可用（用于分析libapp.so） Read flutter_detect 检测是否是Flutter应用 Read flutter_extract_strings 从libapp.so提取字符串和包名（无需Blutter） Read flutter_find_ssl 查找SSL验证函数 Read flutter_find_vip ⭐在Flutter libapp.so中查找VIP/会员相关函数 Read flutter_get_version 获取Flutter版本 Read so_analyze_function 分析函数特征，判断是否是SSL验证函数 Read so_analyze_function_advanced ⭐全面分析函数特征：调用关系、系统调用、字符串引用、复杂度、类型判断(SSL/加密/网络) Read so_callees ⭐获取函数调用的所有函数（IDA callees功能） Read so_callers ⭐获取调用指定函数的所有位置（IDA callers功能） Read so_callgraph ⭐分析函数调用关系图，识别BL/BLR调用指令，生成DOT格式调用图 Read so_check_env 检查SO分析环境（lief库是否可用） Read so_check_ghidra 检查Ghidra环境是否可用 Read so_check_radare2 检查Radare2环境是否可用 Read so_detect_encryption ⭐检测字符串加密/混淆：分析熵值、检测XOR/Base64、查找解密函数 Read so_disassemble 反汇编指定地址的代码 Read so_exports 获取SO导出函数列表 Read so_extract 从APK中提取SO文件 Read so_find_function 根据地址查找所属的函数 Read so_find_function_v2 ⭐改进版函数查找 - 修复边界检测问题 Read so_find_instruction ⭐搜索指令模式。支持:简单指令(bl/svc/ret)、预定义模式(syscall/compare/xor)、正则表达式、指令序列(stp;mov;bl) Read so_find_vip ⭐自动查找VIP/会员验证函数（isVip/isPremium/checkLicense等） Read so_get_cfg ⭐生成函数的控制流图(CFG)，识别基本块和分支边，生成DOT格式图 Read so_get_entrypoints ⭐获取SO文件所有入口点：ELF入口、_init/_fini、构造/析构函数、JNI_OnLoad等 Read so_get_function_bytes 获取函数的字节码 Read so_get_sections 获取所有代码段信息 Read so_imports 获取SO导入函数列表 Read so_info 获取SO文件基本信息（架构、导出/导入数量、依赖等） Read so_list_all_functions ⭐识别所有函数（包括未导出的内部函数），通过扫描函数开头特征识别 Read so_list_globals ⭐列出全局变量：.data/.bss/.rodata/.got段中的数据，显示名称、地址、大小、值预览 Read so_list_libs 列出APK中的所有SO库 Read so_patch_templates 获取所有预设Patch模板(return_true/return_false/nop/infinite_value等) Read so_search_bytes 搜索字节模式 Read so_search_symbol 搜索符号（导出+导入函数） Read so_strings 提取SO文件中的字符串 Read so_trace_register ⭐数据流分析：追踪寄存器值的来源，分析参数传递和返回值 Read so_xref_string ⭐核心工具！查找字符串交叉引用 - 返回函数上下文（IDA级功能）

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about SO Analyzer MCP

How do I prevent bulk modifications through SO Analyzer MCP? +

The SO Analyzer MCP server has 3 write tools including so_patch_bytes, so_patch_hex, so_replace_bytes. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach SO Analyzer MCP.

How many tools does the SO Analyzer MCP server expose? +

56 tools across 4 categories: Destructive, Execute, Read, Write. 41 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on SO Analyzer MCP? +

Register the SO Analyzer MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every SO Analyzer MCP tool call.

Deterministic rules across all 56 SO Analyzer MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SO ANALYZER →

Instant setup, no code required.

56 SO Analyzer MCP tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from SO Analyzer's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →