org.lsposed/dexsql

What it mainly works on, as our AI model read its tool descriptions: files and code on the machine it runs on.

2 of 12 tools are described as changing something (creating, editing, deleting, sending or running).

• close_datasetdescribed as changing data

  “Close a dataset and release its worker.”

  Publisher declares: read-only no · destructive no · open-world no

  1 input, 1 required

  • dataset_idstringrequired
• decodeon 2 other serversreads or searches

  “Inspect a method or class.”

  Publisher declares: read-only yes · destructive no · open-world no

  13 inputs, 1 required

  • classstring or null
  • compactboolean“Opt in to one structuredContent representation (content is empty).”
  • dataset_idstringrequired
  • file_idinteger or null
  • max_bytesinteger or null
  • max_linesinteger or null“Maximum lines in one text page, default 200, maximum 1000.”
  • methodstring or null“Exact DEX descriptor.”
  • method_idxinteger or null“DEX-local method index; requires file_id.”
  • method_limitinteger or null“Methods per class page, default 20, maximum 50.”
  • method_offsetinteger“Class method-list offset, ordered by method_idx.”
  • modenull“Defaults to summary for a class, smali for a method.”
  • offsetinteger“UTF-8 byte offset into one method's smali/context text; continue with next_offset.”
  • timeout_msinteger or null
• describe_tableon 23 other serversreads or searches

  “Describe a built-in SQL table or view; no dataset is needed.”

  Publisher declares: read-only yes · open-world no

  1 input, 1 required

  • namestringrequired
• get_manifeston 10 other serversreads or searches

  “Read an APK Manifest as a summary (including paged permissions) or paged decoded XML.”

  Publisher declares: read-only yes · open-world no

  8 inputs, 1 required

  • compactboolean“Opt in to one structuredContent representation (content is empty).”
  • dataset_idstringrequired
  • input_indexinteger or null“Index in open_dataset.inputs; required when several archive inputs are present.”
  • limitinteger or null
  • max_bytesinteger or null
  • mode
  • offsetinteger“Permission-row offset in summary mode, UTF-8 byte offset in XML mode.”
  • timeout_msinteger or null
• get_manifest_componentsreads or searches

  “Page Manifest components, names/descriptors, launcher intent filters, aliases and exported configuration.”

  Publisher declares: read-only yes · open-world no

  9 inputs, 1 required

  • compactboolean“Opt in to one structuredContent representation (content is empty).”
  • dataset_idstringrequired
  • input_indexinteger or null
  • kindstring or null“Optional activity, activity-alias, service, receiver, or provider filter.”
  • limitinteger or null
  • max_bytesinteger or null
  • offsetinteger
  • only_exportedboolean“Filter by manifest-derived exported state; does not imply runtime accessibility.”
  • timeout_msinteger or null
• list_datasetson 56 other serversreads or searches

  “List open datasets and server quotas/usage.”

  Publisher declares: read-only yes · open-world no

  Takes no inputs.

• list_resource_filesreads or searches

  “Page archive entry names and sizes, optionally filtered by prefix (res/, assets/, lib/).”

  Publisher declares: read-only yes · open-world no

  8 inputs, 1 required

  • compactboolean“Opt in to one structuredContent representation (content is empty).”
  • dataset_idstringrequired
  • input_indexinteger or null
  • limitinteger or null
  • max_bytesinteger or null
  • offsetinteger
  • prefixstring or null“Case-sensitive archive-entry prefix, for example res/layout/ or assets/.”
  • timeout_msinteger or null
• list_tableson 30 other serversreads or searches

  “List all built-in SQL tables and views; no dataset is needed.”

  Publisher declares: read-only yes · open-world no

  Takes no inputs.

• open_datasetdescribed as changing data

  “Open local DEX/APK/JAR/ZIP paths as an isolated reusable dataset.”

  Publisher declares: read-only no · destructive no · open-world no

  2 inputs, 1 required

  • inputsarrayrequired“Local DEX/APK/JAR/ZIP paths, resolved relative to the server working directory.”
  • timeout_msinteger or null“Optional shorter operation deadline; cannot exceed the server's timeout.”
• queryon 36 other serversruns code or commands

  “Run a read-only SQL batch with exact typed cells, byte/row budgets and per-statement next_offset.”

  Publisher declares: read-only yes · destructive no · open-world no

  9 inputs, 2 required

  • compactboolean“Opt in to one structuredContent representation (content is empty).”
  • dataset_idstringrequired
  • limitinteger or null“Returned rows per statement, default 200; use a deterministic ORDER BY when paging.”
  • max_bytesinteger or null“Optional lower serialized result-byte budget; rows are never silently clipped.”
  • named_temp_queriesarray“Lazy named SELECT definitions, retained in this dataset with the same lifetime as TEMP tables.”
  • offsetinteger“Rows to skip in each statement's result, default 0.”
  • sqlarrayrequired“Read-only SQL statements.”
  • timeout_msinteger or null
  • timingboolean
• query_resourcesreads or searches

  “Query resources.arsc by numeric ID, exact type/name, type, name substring or configuration.”

  Publisher declares: read-only yes · open-world no

  12 inputs, 1 required

  • compactboolean“Opt in to one structuredContent representation (content is empty).”
  • configurationstring or null“Exact qualifier string from a previous result.”
  • containsstring or null“Case-sensitive substring of the resource name.”
  • dataset_idstringrequired
  • input_indexinteger or null
  • limitinteger or null
  • max_bytesinteger or null
  • namestring or null“Exact type/name or package:type/name, for example string/app_name.”
  • offsetinteger
  • resource_idinteger or null“Resource ID, for example 2130771968 (0x7f010000).”
  • resource_typestring or null“Resource type, for example string, layout, id, style, or array.”
  • timeout_msinteger or null
• read_resourceon 4 other serversreads or searches

  “Read one exact APK archive entry in bounded pages.”

  Publisher declares: read-only yes · open-world no

  8 inputs, 2 required

  • compactboolean“Opt in to one structuredContent representation (content is empty).”
  • dataset_idstringrequired
  • format
  • input_indexinteger or null
  • max_bytesinteger or null
  • namestringrequired“Exact archive entry name.”
  • offsetinteger“Byte offset in decoded UTF-8 text, or original bytes when encoding is hex.”
  • timeout_msinteger or null

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.