MCPSecurityDevToolsAI

MCP Evidence Pack: Make App Bundles Queryable for Agents

Give an agent an App Store link; it unpacks the bundle into searchable, citable evidence

Problem
A V2EX user describes: agents can read a repo for open-source projects, but a shipped app has no repo, only a signed bundle—compressed JS, a Mach-O, a plist, no entry. Asking 'how does this competitor do login' becomes an afternoon of unpacking, grepping, and pasting JSON into chat.
Solution
An MCP tool: input an App Store link or ipa, auto-unpack, extract metadata, entry points, and key strings into a source-annotated searchable store that agents can query, cite, and reason over. Not about reverse engineering, but standardizing the evidence-gathering workflow.
Users
Product managers doing competitor analysis, security researchers, developers analyzing third-party apps
MVP
Download and unzip ipa; extract Info.plist, Mach-O symbols, and resource manifest; build a keyword index; expose query interface via MCP; generate citation-backed evidence reports
Revenue
Per-bundle analysis credits or subscription; enterprise tier with batch jobs and private deployment
Why now
MCP is becoming the common interface for agents to access external tools, yet app-bundle analysis lacks standard tooling; an indie dev can enter with a vertical tool

Source discussions · 3

  1. Product HuntClick
  2. Product Huntagentmash
  3. V2EX[分享创造] 做了个 MCP 工具:给 agent 一个 App Store 链接,它把包拆成可检索的证据
← Back to list