Log inSubmit server
Jshookmcp logo

Jshookmcp

Reverse-engineers JavaScript, browsers, network traffic, WASM, native processes, and APKs through search-first MCP tools.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Jshookmcp

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "jshookmcp": {
      "command": "npx",
      "args": [
        "-y",
        "@jshookmcp/jshook@latest"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Install not yet sandbox-tested— we haven't run this command through our automated sandbox yet. Not a red flag; we're working through the catalog.

Overview

jshookmcp connects AI agents to a broad reverse-engineering workspace spanning JavaScript analysis, browser automation, network interception, WASM, native processes, and Android packages. Its search-first profiles expose a small searchable catalog by default, while workflow and full profiles expand access as needed. Streamable HTTP sessions preserve activated domains, browser attachment, and coverage state across reconnects, with client-isolated browser state. Reach for it when an agent needs to inspect runtime behavior, deobfuscate code, capture traffic, instrument processes, or assemble repeatable analysis workflows.

Use cases

  • Deobfuscate a minified JavaScript bundle
  • Capture and replay an OAuth or GraphQL flow
  • Reverse-engineer a WASM cryptography routine
  • Triage an Android APK and its native libraries
  • Instrument a live process with Frida

Key features

  • Search-first tool profiles with workflow and full modes
  • Chromium and Camoufox automation through CDP
  • WASM disassembly, decompilation, and instrumentation
  • Network interception with GraphQL and Burp Suite bridges
  • Native process, memory, Frida, Ghidra, and IDA tooling
  • Hot-reload plugins and declarative workflows

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

11/12 checks healthy over the last 38d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 1Low 0

Scanned 7d ago via OSV.dev · @jshookmcp/jshook@latest (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars2.1kStargazers on the source repository.
npm downloads4.3kPackage downloads in the last 30 days.
Last commit1d agoMost recent push to the default branch.
Directory activity2 viewsConfig copies, upvotes, and views on AllMCPs.

How Jshookmcp works

What jshookmcp does

jshookmcp gives MCP clients access to tools for front-end reverse engineering and runtime analysis. Its coverage includes JavaScript deobfuscation, AST inspection, source-map recovery, script extraction, browser control, HTTP and WebSocket capture, GraphQL inspection, WASM analysis, native process and memory work, binary instrumentation, APK triage, encoding transforms, and multi-step workflows.

The project organizes capabilities into 36 self-discovered domains. Examples include browser, network, proxy, GraphQL, WASM, memory, process, binary instrumentation, workflow, and extension-registry domains. This makes the server suitable for investigations that move between static files, live browser sessions, intercepted traffic, and running processes.

How it works

The server uses profiles to control how much tool metadata an agent loads. The search profile provides a compact catalog and BM25 plus hybrid vector ranking for finding relevant tools. Agents can then move to workflow for composite scripts or full for the complete catalog of 735 tools. Schema-oriented helpers such as search_tools, describe_tool, and call_tool support discovery, argument validation, and invocation without loading every schema into the initial context.

Browser automation uses Chromium and Camoufox through CDP, including attachment to existing targets. Other runtime features include anti-detection presets, explicit-input CAPTCHA solving, popup and download interception, HTTPS interception with an automatically generated CA, and HTTP/2 frame construction.

Streamable HTTP sessions restore activated domains, browser attachment state, and coverage state after reconnects. Browser-side state is isolated per client, allowing multiple agents to use separate CDP sessions. Background tasks support progress reporting, cancellation, and asynchronous operation.

Setup and configuration

Add jshookmcp to an MCP client configuration rather than installing it globally. The project targets Node.js 22.22.2 or newer, or Node.js 24.15 or newer, and uses pnpm 10.x for its package workflow. It is implemented in strict TypeScript and supports the current MCP specification.

The server supports Streamable HTTP, including session recovery. Its extension model also supports hot-reload plugins, declarative workflows, and automatically discovered domains. These mechanisms allow custom capabilities and workflows to be added without redeploying the core server.

Tools and capabilities

  • Deobfuscate JavaScript, detect crypto routines, inspect ASTs, reconstruct source maps, and search or replay scripts.
  • Automate Chromium and Camoufox pages, attach to CDP targets, capture screenshots, and handle browser events.
  • Start a MITM proxy, capture WebSocket traffic, inspect GraphQL operations, and bridge to Burp Suite.
  • Disassemble, decompile, optimize, parse, diff, and instrument WASM using wabt, Binaryen, and TypeScript tooling.
  • Scan native FFI usage, inspect PE files, attach to processes, read guarded memory regions, and set hardware breakpoints.
  • Connect Frida, Ghidra, and IDA workflows, including syscall hooks, TLS key logging, and Mojo IPC analysis.
  • Triage APKs, inspect manifests and DEX files, decode or build with apktool, decompile with jadx, sign packages, and use unidbg emulation.
  • Run encoding and transformation operations for URL, Base64, Hex, JWT, and Protobuf data.

Limitations and notes

The full profile exposes a large catalog and can consume substantially more context than search-first operation: the project reports approximately 3K tokens for search metadata and approximately 109K for all 735 tools at the stated measurement point. Tool counts and corresponding metadata size can change as the catalog grows.

CAPTCHA solving is designed around explicit input rather than automatic page or feature probing. Browser, process, memory, native, and APK workflows may also depend on the relevant external runtime, command-line utility, device, or target process being available.

The project is licensed under AGPLv3 and requires a Node.js version in its supported range.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Jshookmcp

jshookmcp is an MCP server that connects AI agents to JavaScript analysis, browser automation, network interception, WASM reverse engineering, native process inspection, binary instrumentation, and APK analysis tools. Its main tools support search-first discovery, validated tool calls, workflows, deobfuscation, browser control, traffic capture, and runtime instrumentation.

Add jshookmcp to your MCP client configuration instead of installing it globally. Use Node.js 22.22.2 or newer, or Node.js 24.15 or newer; the project uses pnpm 10.x.

Use the `search_tools` capability in the search profile to find relevant tools by name or purpose. Use `describe_tool` to inspect a selected schema, then call it through `call_tool` with argument validation.

Yes, Streamable HTTP session recovery restores activated domains, browser attachment state, and coverage state after reconnects. Browser-side state is isolated per client.

Yes, jshookmcp supports declarative workflows, hot-reload plugins, and auto-discovered domains. Extension workflows can be listed and executed through the workflow capabilities.

Related MCP servers

All in Developer Tools All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewJshookmcp AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/jshookmcp?style=directory)](https://allmcps.com/mcp/jshookmcp)
HTML Embed
<a href="https://allmcps.com/mcp/jshookmcp"><img src="https://allmcps.com/api/badge/jshookmcp?style=directory" alt="Jshookmcp on AllMCPs" /></a>