MMRL

MMRL, short for Magisk Module Repo Loader, is a store app for root modules. It describes itself as “an app for managing, sharing, and exploring Magisk modules across repositories”. It doesn’t root anything: installing goes through the root solution already on your phone, using that solution’s own command (magisk --install-module, ksud module install or apd module install).

What it works with

When you first open it, you pick a working mode: Magisk, KernelSU (and the rsuntk and 5ec1cff forks of it), KernelSU Next, APatch, SukiSU Ultra, or Non-Root. Without root, MMRL can browse repositories and download modules, but not install them.

On KernelSU and KernelSU Next, installing through MMRL still runs their own installer, so their rules apply: KernelSU Next’s check for known malicious modules, for example, and the need for a metamodule before modules are mounted.

Repositories

MMRL adds one repository by default, the Googlers Magisk Repo, run by MMRL’s developer. Its guidelines say a moderator approves each submission, and they forbid “deleting core files, breaking system intentionally, adware, spyware, or any kind of module harmful to the end user”; programs included in a module need their source code. An Explore screen suggests about ten more repositories from other people, each added only if you choose to; their rules are their own.

Two things MMRL adds on top:

• A blacklist, kept by the MMRL project and checked at every start, which warns about modules it lists; its notes on one entry read “Sends device specs to external server - Includes APK without source - Includes obfuscated scripts”.
• Anti-features, labels in the style of F-Droid’s that a repository can set on a module, such as Ads, Tracking, non-free network services, obfuscated code, or written by an AI model.

Neither is a malware scan. Before installing, a module’s page shows the files it contains and what it changes.

Other features

• Installing several modules at once, and handling dependencies between modules.
• Module pages with descriptions, screenshots, version history and the developer’s donation link.
• Shortcuts on the home screen for modules with a web interface. Those interfaces now open in the separate app WebUI X: Portable, which MMRL asks you to install the first time.
• Optional background services that check repositories and module updates, all off by default, and an optional encrypted-DNS workaround for countries that block repository sites, also off.

What goes online

From the v34296 source code:

• The MMRL blacklist, from mmrl.dev, each time the app starts. There is no setting for it.
• An update check against a changelog file on mmrl.dev each time you open the home screen; on by default, and it can be turned off. The Download button opens the GitHub release in your browser.
• Repository lists from each repository’s own server when you refresh or add one, and module covers, screenshots and readmes from wherever the module’s developer hosts them, when you open a module.

We found no analytics, crash-reporting or advertising code. The home screen has a permanent Support Me card that links to the developer’s GitHub Sponsors page. F-Droid labels the app as depending on its developer’s servers.

About this file

• This is the developer’s own build of version v34296, published on GitHub on 9 March 2026 Hong Kong time, delivered through IzzyOnDroid: byte for byte the GitHub release MMRL-v34296-release-official.apk, signed by Jimmy Boehm (Der_Googler). Its release notes only list translations.
• It is the latest release outside Google Play. Development has gone on since: the main branch is 59 commits ahead, with code changes until July 2026, and Google Play has builds from June 2026 that aren’t on GitHub. The project hasn’t said why. One change since this release adds a component from a package repository that isn’t public, so we’ll check that newer versions can still be built from public source before hosting them.
• We don’t host the spoofed build, which is the same app under a random package name, generated once per release.
• A known problem: several users report that the app crashes on Android 17 (#652, open).
• The screenshots are the project’s own, from December 2024, older than this version; we left out one that shows another project’s module.
• The 7.5 MB file runs on Android 8.0 and later and declares 15 permissions, mostly for downloads, notifications and the optional background services. Root actions go through your root solution, not Android permissions.
• MMRL is licensed under the GPL-3.0. Its terms of service say anyone may “Host and distribute the original or modified versions”, and ask for a link to the official site, which is https://mmrl.dev. The source of this version is at https://github.com/MMRLApp/MMRL/tree/v34296.

CPU types in this build: arm64-v8a (64-bit ARM, almost every phone since 2017); armeabi; armeabi-v7a (32-bit ARM, older and budget phones); mips; mips64; x86 (32-bit Intel, emulators); x86_64 (64-bit Intel, emulators and Chromebooks).

Versions currently kept in the IzzyOnDroid repository. We host and check only the newest one. Full changelog.