FlyTrap runs your real Android or iOS build on real devices and records what happened: screens, bugs with screenshots and logs, network traffic, SDKs and permissions. The FlyTrap MCP server hands that evidence to the agent you already code with, so "why does onboarding break?" gets answered from a run id and a screenshot, not a guess.
read unless you want the agent to queue crawls.
{
"mcpServers": {
"flytrap": {
"command": "npx",
"args": ["-y", "@flytrap-qa/mcp@latest"],
"env": {
"FLYTRAP_API_KEY": "ft_live_..."
}
}
}
} Claude Code:
claude mcp add flytrap -e FLYTRAP_API_KEY=ft_live_... -- npx -y @flytrap-qa/mcp@latest
Then ask. Without a key the public catalog tools still work. Node 20 or newer is the only requirement; nothing else is installed on your machine.
"Why does onboarding break in my app?"
Calls list_projects, list_bugs, get_bug_evidence
"In run 992, BUG-102 fails at step 1 (Start the app): a system error dialog blocks the screen. Logcat shows the crash in the launch activity; see screenshot 0001_post_launch_launchApp.png." The agent then opens the stack frame in your code.
"Which third parties get data before the consent screen?"
Calls get_network_hosts, get_sdks, lookup_sdk
Hosts with call counts and the screen they were first seen on, matched to the SDK that owns them. Pre-consent analytics traffic stands out.
"What changed between build 1180 and 1184?"
Calls list_builds, compare_builds
New SDKs and permissions, hosts added or removed, bugs that appeared or disappeared, screen and size deltas. A release gate in one answer.
Every answer carries the crawl run id, the bug id and the artifact path it came from, so you can open the same evidence in the dashboard. The shipped SKILL.md tells the agent exactly that: cite the run, quote the log line, say when evidence is missing instead of filling the gap.
Thin wrappers over the FlyTrap REST API. Access control stays on the server: a key sees exactly the projects its owner can see.
Apps the key owner can read, with the selected crawl run for each.
q : string. Substring of name or package id. platform : android | ios. Filter by platform. One-screen state of the selected crawl run.
project_id (required) : number. Project id from list_projects. Bugs FlyTrap found in the selected run, sorted by severity.
project_id (required) : number. Project id from list_projects. status : open | resolved. Filter by status. severity : critical | high | medium | low. Filter by severity. Everything recorded for one bug, ready to paste into a fix.
project_id (required) : number. Project id from list_projects. bug_id (required) : string. Bug id from list_bugs, e.g. BUG-102. Screens reached and the tap edges between them.
project_id (required) : number. Project id from list_projects. Hosts the build talked to during the crawl.
project_id (required) : number. Project id from list_projects. limit : number. Max hosts, default 50. What the build ships: SDKs, permissions, deep links.
project_id (required) : number. Project id from list_projects. Diff two builds of the same project.
project_id (required) : number. Project id from list_projects. base_build_id (required) : number. Older build (from list_builds). head_build_id (required) : number. Newer build. Describe an app in plain language, get the crawled apps whose observed features cover it.
query (required) : string. What the app should do, e.g. budgeting with shared expenses. platform : android | ios. Filter by platform. Your build's features next to the same feature in competitor and same-genre apps.
project_id (required) : number. Project id from list_projects. match : genre | overlap. Pick apps by store genre (default) or by shared functions. Competitors pinned to a project's benchmark.
project_id (required) : number. Project id from list_projects. Search crawled public apps and Google Play for apps to pin.
project_id (required) : number. Project id from list_projects. q (required) : string. App name or package id. Pin a crawled app, or create a store project from a Google Play package and pin it.
project_id (required) : number. Project id from list_projects. competitor_project_id : number. A crawled app from find_competitors. package_name : string. Google Play package; creates and crawls a store project first. confirm : true. Required when a new project would be created. Unpin a competitor.
project_id (required) : number. Project id from list_projects. competitor_project_id (required) : number. Pinned project id. Queue a new crawl of the current build. The only tool that changes anything.
project_id (required) : number. Project id from list_projects. confirm (required) : true. Must be true; the agent has to ask you first. Search the public catalog of 1,500+ crawled store apps.
q (required) : string. App name or package id. sdk : string. Only apps containing these SDK ids. SDKs, permissions and labels for one public app.
package_name (required) : string. Package or bundle id, e.g. com.booking. Find SDK ids by name, vendor or category.
q : string. Substring; omit to list categories. Explain an Android permission or find permissions by keyword.
q (required) : string. Permission id or keyword. read can only read; crawl
adds the tools that change something: start_crawl, add_competitor
and remove_competitor. Anything that queues a crawl also needs an explicit
confirm: true from the agent. No key can manage keys, billing or team.
api.flytrap.dev over HTTPS and never
writes it to disk or logs. Screenshots and XML come as short-lived signed URLs.
curl -H "Authorization: Bearer $FLYTRAP_API_KEY" \ https://api.flytrap.dev/project/projects/1248/bugs/BUG-102/evidence
Upload a build or pick a store app, let FlyTrap crawl it, then let your agent read the results. Free to start.