# SO Analyzer MCP MCP server

Agent View of the PolicyLayer registry record for SO Analyzer MCP: identity, probed posture, risk grade, and all 56 tools classified. HTML page: https://policylayer.com/tools/1600822305-so-analyzer-mcp

## Facts

- Server id: `1600822305/so-analyzer-mcp`
- Homepage: https://github.com/1600822305/so-analyzer-mcp
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 56
- Tool categories present: Destructive, Execute, Read, Write
- Tags: 1600822305 so analyzer mcp, admin, automation
- Record last modified: 2026-09-28T17:23:10.681Z

## Tools (56)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `blutter_export_hooks` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/blutter-export-hooks.md |
| `blutter_search_vip` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/blutter-search-vip.md |
| `flutter_analyze_apk` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-analyze-apk.md |
| `flutter_analyze_libapp` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-analyze-libapp.md |
| `flutter_generate_hook` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-generate-hook.md |
| `flutter_patch_apk` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-patch-apk.md |
| `flutter_patch_ssl` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-patch-ssl.md |
| `flutter_ssl_offset_v2` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-ssl-offset-v2.md |
| `so_decompile` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-decompile.md |
| `so_patch_branch` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-patch-branch.md |
| `so_patch_nop` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-patch-nop.md |
| `so_patch_return` | Execute | High | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-patch-return.md |
| `blutter_func_detail` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/blutter-func-detail.md |
| `blutter_parse` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/blutter-parse.md |
| `blutter_search_func` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/blutter-search-func.md |
| `blutter_search_string` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/blutter-search-string.md |
| `flutter_check_blutter` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-check-blutter.md |
| `flutter_detect` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-detect.md |
| `flutter_extract_strings` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-extract-strings.md |
| `flutter_find_ssl` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-find-ssl.md |
| `flutter_find_vip` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-find-vip.md |
| `flutter_get_version` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/flutter-get-version.md |
| `so_analyze_function` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-analyze-function.md |
| `so_analyze_function_advanced` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-analyze-function-advanced.md |
| `so_callees` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-callees.md |
| `so_callers` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-callers.md |
| `so_callgraph` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-callgraph.md |
| `so_check_env` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-check-env.md |
| `so_check_ghidra` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-check-ghidra.md |
| `so_check_radare2` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-check-radare2.md |
| `so_detect_encryption` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-detect-encryption.md |
| `so_disassemble` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-disassemble.md |
| `so_exports` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-exports.md |
| `so_extract` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-extract.md |
| `so_find_function` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-find-function.md |
| `so_find_function_v2` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-find-function-v2.md |
| `so_find_instruction` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-find-instruction.md |
| `so_find_vip` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-find-vip.md |
| `so_get_cfg` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-get-cfg.md |
| `so_get_entrypoints` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-get-entrypoints.md |
| `so_get_function_bytes` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-get-function-bytes.md |
| `so_get_sections` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-get-sections.md |
| `so_imports` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-imports.md |
| `so_info` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-info.md |
| `so_list_all_functions` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-list-all-functions.md |
| `so_list_globals` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-list-globals.md |
| `so_list_libs` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-list-libs.md |
| `so_patch_templates` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-patch-templates.md |
| `so_search_bytes` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-search-bytes.md |
| `so_search_symbol` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-search-symbol.md |
| `so_strings` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-strings.md |
| `so_trace_register` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-trace-register.md |
| `so_xref_string` | Read | Low | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-xref-string.md |
| `so_patch_bytes` | Write | Medium | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-patch-bytes.md |
| `so_patch_hex` | Write | Medium | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-patch-hex.md |
| `so_replace_bytes` | Write | Medium | https://policylayer.com/tools/1600822305-so-analyzer-mcp/so-replace-bytes.md |

## Tool descriptions

- `blutter_export_hooks` — 为指定函数生成Frida Hook脚本。类型:trace/modify/log
- `blutter_search_vip` — ⭐在Blutter输出中搜索VIP/会员相关函数，自动生成修改建议
- `flutter_analyze_apk` — ⭐完整分析Flutter APK：解压→提取SO→Blutter分析→生成Hook脚本
- `flutter_analyze_libapp` — ⭐使用Blutter分析libapp.so，恢复Dart符号和函数（核心工具）
- `flutter_generate_hook` — 生成Flutter Frida Hook脚本。类型:trace/modify/args
- `flutter_patch_apk` — 自动patch Flutter APK的SSL验证（一键操作）
- `flutter_patch_ssl` — Patch SSL验证（绕过证书检测，用于抓包）
- `flutter_ssl_offset_v2` — ⭐核心工具！模拟IDA分析流程：1.搜索ssl_client 2.xrefs_to 3.智能选择函数 4.生成脚本
- `so_decompile` — ⭐反编译函数生成伪代码。支持radare2(默认,轻量)/ghidra(高质量)/simple(无依赖)
- `so_patch_branch` — 修改分支跳转指令。force_jump=强制跳转/no_jump=不跳转/invert=反转条件
- `so_patch_nop` — 将指令替换为NOP(空操作)，用于跳过检测代码
- `so_patch_return` — ⭐修改函数直接返回指定值(VIP破解核心工具)。支持:0/1/true/false/-1/max/自定义数值
- `blutter_func_detail` — 获取指定地址函数的详细信息和汇编代码
- `blutter_parse` — ⭐解析Blutter输出目录，获取包、函数、类、字符串等完整信息
- `blutter_search_func` — 搜索Blutter解析出的函数。类型:name/address/package/class
- `blutter_search_string` — 搜索Blutter解析出的字符串（从pp.txt）
- `flutter_check_blutter` — 检查Blutter环境是否可用（用于分析libapp.so）
- `flutter_detect` — 检测是否是Flutter应用
- `flutter_extract_strings` — 从libapp.so提取字符串和包名（无需Blutter）
- `flutter_find_ssl` — 查找SSL验证函数
- `flutter_find_vip` — ⭐在Flutter libapp.so中查找VIP/会员相关函数
- `flutter_get_version` — 获取Flutter版本
- `so_analyze_function` — 分析函数特征，判断是否是SSL验证函数
- `so_analyze_function_advanced` — ⭐全面分析函数特征：调用关系、系统调用、字符串引用、复杂度、类型判断(SSL/加密/网络)
- `so_callees` — ⭐获取函数调用的所有函数（IDA callees功能）
- `so_callers` — ⭐获取调用指定函数的所有位置（IDA callers功能）
- `so_callgraph` — ⭐分析函数调用关系图，识别BL/BLR调用指令，生成DOT格式调用图
- `so_check_env` — 检查SO分析环境（lief库是否可用）
- `so_check_ghidra` — 检查Ghidra环境是否可用
- `so_check_radare2` — 检查Radare2环境是否可用
- `so_detect_encryption` — ⭐检测字符串加密/混淆：分析熵值、检测XOR/Base64、查找解密函数
- `so_disassemble` — 反汇编指定地址的代码
- `so_exports` — 获取SO导出函数列表
- `so_extract` — 从APK中提取SO文件
- `so_find_function` — 根据地址查找所属的函数
- `so_find_function_v2` — ⭐改进版函数查找 - 修复边界检测问题
- `so_find_instruction` — ⭐搜索指令模式。支持:简单指令(bl/svc/ret)、预定义模式(syscall/compare/xor)、正则表达式、指令序列(stp;mov;bl)
- `so_find_vip` — ⭐自动查找VIP/会员验证函数（isVip/isPremium/checkLicense等）
- `so_get_cfg` — ⭐生成函数的控制流图(CFG)，识别基本块和分支边，生成DOT格式图
- `so_get_entrypoints` — ⭐获取SO文件所有入口点：ELF入口、_init/_fini、构造/析构函数、JNI_OnLoad等
- `so_get_function_bytes` — 获取函数的字节码
- `so_get_sections` — 获取所有代码段信息
- `so_imports` — 获取SO导入函数列表
- `so_info` — 获取SO文件基本信息（架构、导出/导入数量、依赖等）
- `so_list_all_functions` — ⭐识别所有函数（包括未导出的内部函数），通过扫描函数开头特征识别
- `so_list_globals` — ⭐列出全局变量：.data/.bss/.rodata/.got段中的数据，显示名称、地址、大小、值预览
- `so_list_libs` — 列出APK中的所有SO库
- `so_patch_templates` — 获取所有预设Patch模板(return_true/return_false/nop/infinite_value等)
- `so_search_bytes` — 搜索字节模式
- `so_search_symbol` — 搜索符号（导出+导入函数）
- `so_strings` — 提取SO文件中的字符串
- `so_trace_register` — ⭐数据流分析：追踪寄存器值的来源，分析参数传递和返回值
- `so_xref_string` — ⭐核心工具！查找字符串交叉引用 - 返回函数上下文（IDA级功能）
- `so_patch_bytes` — 在指定偏移处修改字节
- `so_patch_hex` — 自定义Patch-直接写入十六进制字节（高级用户）
- `so_replace_bytes` — 查找并替换字节

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Apibase (1384 tools) — https://policylayer.com/tools/io-github-whiteknightonhorse-apibase.md
- Delx Mcp A2a (1068 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- MCP Framework Personal (912 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Hermoso (896 tools) — https://policylayer.com/tools/hermoso.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- Altium-MCP-Suite (817 tools) — https://policylayer.com/tools/altium-mcp-suite.md
- Eda Agent (777 tools) — https://policylayer.com/tools/eda-agent.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=1600822305-so-analyzer-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/1600822305-so-analyzer-mcp