Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions
Directory / Android Developer MCP by Nova (CIVAI)
Android Developer MCP by Nova (CIVAI)
by nova.civai.co · https://nova.civai.co/mcp/agents/mcp-android_developer
Ship a new Android app from chat. AI runs Google Play Console listings, screenshots, releases, uplo…
Partial: 9 of 12 checks · 2 Nov 2026
Is Android Developer MCP by Nova (CIVAI) server safe?
- None of the hidden-instruction wordings we know were found in its tool descriptions.
- 0 of its 38 tools are labeled read-only; the others may change or send things.
- Overall it scored 82/100 on 2 Nov 2026.
A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.
What it can do
38 tools, in the server's own words.
list_tracksList an app's release tracks and their track_id — call this first to find the track_id other release tools need.
get_trackGet one release track's current state by track_id, including every release on that track with its release_id, name, status and lifecycle state.
create_releaseCreate a new draft release on a track.
upload_bundleUpload a signed .aab.
check_package_name_availabilityCheck whether a package name is available before creating a new app.
create_appCreate a brand-new Android app on Google Play — the one thing the official Android Publisher API cannot do.
list_appsList apps on this Play Console developer account.
list_accountsList which Google accounts are signed in to this browser session, with their X-Goog-AuthUser slot index.
update_store_listingUpdate an app's main store listing (title, short/full description) for one language using Play Console's own web session.
update_store_listing_screenshotsReorder or remove an app's existing store-listing screenshots for one language.
get_releaseGet a release's current state, including currently-attached artifacts and validation status — check this before start_rollout.
start_rolloutRoll out a release — this IS Android's publish action for the release.
update_ads_declarationDeclare whether the app contains ads, using Play Console's own web session.
update_sign_in_detailsDeclare whether any part of the app is restricted (requires account sign-in, payment, referral/QR codes, OTP, biometrics, or actions on another device).
update_target_audience_contentDeclare the app's target audience & content, using Play Console's own web session.
update_policy_declarationSet a simple Yes/No App content policy declaration, using Play Console's own web session.
update_content_ratingSubmit and apply the mandatory IARC content rating questionnaire, using Play Console's own web session.
update_privacy_policySet the app's privacy policy URL, using Play Console's own web session.
update_data_safetySubmit the Data safety declaration.
update_none_option_declarationDeclare 'none of the above' for a multi-select feature-checklist App content declaration, using Play Console's own web session.
upload_screenshot_assetUpload an image into the app's Asset Library.
promote_releasePromote an existing release to another track WITHOUT re-uploading the bundle.
get_pre_submit_statusRead-only: what Google Play still requires before this app is review-eligible.
upload_store_listing_graphicUpload an image AND attach it to a store-listing slot in one call — phone screenshot, feature graphic or app icon.
and 14 more
Test results
Safe mode: only tools labeled read-only were run. How the test works
- !Ready for the newest MCP versionnote
1 warning
- !Uses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
- !Tools are labeled safe or dangerousnote
1 warning
- !38 of 38 tools have no safety label (read-only or dangerous): list_tracks, get_track, create_release, upload_bundle, check_package_name_availability, create_app, list_apps, list_accounts, update_store_listing, update_store_listing_screensho
- !Follows MCP best practices (not scored yet)note
3 tips (not scored)
- !38 tools not labeled read-only don't say whether running them twice is safe (idempotentHint): list_tracks, get_track, create_release, upload_bundle, check_package_name_availability, create_app and 32 more
- !38 tools don't say whether they reach outside services like the web (openWorldHint): list_tracks, get_track, create_release, upload_bundle, check_package_name_availability, create_app and 32 more
- !The tool list is about 70 KB (roughly 17k tokens). AI apps send it with every message, so it takes that much of the AI's memory before any work starts.
- !Resources and prompts worknote
2 warnings (2 resources)
- !civai-secops://android_developer/SKILLS.md: The content contains "don't tell the user". If an AI reads this, it may follow it. Check where this text comes from.
- !civai-secops://android_developer/@public/CAPTCHA_AGENT.md: The content contains "don't tell the user". If an AI reads this, it may follow it. Check where this text comes from.
- and 2 more
- ✓ConnectsConnected in 366 mspass
- ✓Lists its toolsFound 38 toolspass
- ✓Every tool is describedAll 38 tools and their inputs are describedpass
- ✓No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.pass
- ✓Fast enoughpass
All good
- ✓Connecting took 366 ms
- ✓Listing tools took 267 ms
- –Tools work with good inputsnot tested
Not tested
- –list_tracks: Not run: no safety label (if you own this server, test again in owner mode)
- –get_track: Not run: no safety label (if you own this server, test again in owner mode)
- –create_release: Not run: no safety label (if you own this server, test again in owner mode)
- –upload_bundle: Not run: no safety label (if you own this server, test again in owner mode)
- –check_package_name_availability: Not run: no safety label (if you own this server, test again in owner mode)
- –create_app: Not run: no safety label (if you own this server, test again in owner mode)
- –list_apps: Not run: no safety label (if you own this server, test again in owner mode)
- –list_accounts: Not run: no safety label (if you own this server, test again in owner mode)
- and 30 more
- –Bad inputs give a clean errorNot testednot tested
- –Tools work togetherNo safe tool returned data to start a chain from, so chains were not tested (not counted either way)not tested
- –No secrets leakedNo error messages to checknot tested
Test it yourself
Free and open source. Same checks, same score.
npx qamcp-cli https://nova.civai.co/mcp/agents/mcp-android_developerShow this score on GitHub
Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.
[](https://qamcp.dev/s/co-civai-nova-mcp-android-developer.html)Score over time
- 2 Nov 202682
One test so far. New tests will show here.
Reviews
Coming soon: reviews from people who use Android Developer MCP by Nova (CIVAI), signed in with GitHub, one per person. Reviews never change the score.
QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.
Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works