jshookmcp
js hook toolkit that all you need
jshookmcp is a comprehensive MCP server designed for front-end reverse engineering and security research, providing AI agents with 723 tools organized across 34 specialized domains. It offers a search-first, profile-aware approach that scales from a lightweight 3K-token metadata surface to the full 40K-token tool registry as analysis tasks grow more complex. The server combines browser automation (Chromium and Camoufox with anti-detection), network interception with HTTPS MITM proxying, WASM disassembly via Binaryen, Frida/Ghidra/IDA bridges for binary instrumentation, and runtime session recovery for multi-agent workflows. Developers can use it to deobfuscate minified JavaScript, reverse engineer WebAssembly modules, capture and replay OAuth flows, analyze native processes, and build custom automation workflows through hot-reload plugins.
Key Features
Use Cases
- 01Deobfuscating and analyzing minified JavaScript bundles to extract API endpoints and authentication logic
- 02Reversing CAPTCHA challenges by driving anti-detection browsers, capturing screenshots, and replaying explicit user input
- 03Capturing OAuth flows with HTTPS interception, dumping GraphQL queries, and replaying authentication sequences
- 04Disassembling WebAssembly crypto routines and tracing memory access patterns with binary instrumentation hooks
- 05Auditing live Node.js processes by scanning memory for credentials and sensitive patterns
- 06Building reusable automation workflows with YAML pipelines that chain multiple reverse-engineering operations
Related MCP Servers
View moremarkitdown
Python tool for converting files and office documents to Markdown.
firecrawl
The context API to search, scrape, and interact with the web at scale. 🔥
prompts.chat
f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.
langflow
Langflow is a powerful tool for building and deploying AI-powered agents and workflows.
jshookmcp — FAQ
What is jshookmcp?+
jshookmcp is an MCP server that exposes 723 reverse-engineering tools across 34 domains for browser automation, network interception, JavaScript deobfuscation, WASM disassembly, and binary instrumentation. It uses a profile-aware approach to keep token costs low while giving AI agents access to the full toolkit when needed.
How do I install jshookmcp in Claude Desktop?+
Add a configuration block to your claude_desktop_config.json file with the command set to "npx" and args including "-y" and "@jshookmcp/jshook@latest". Set the MCP_TOOL_PROFILE environment variable to "search" for the lightweight 3K-token profile, or remove npm_config_omit when full runtimes are required.
Which AI clients work with jshookmcp?+
jshookmcp supports any MCP client including Claude Desktop, Cursor, and other editors that implement the Model Context Protocol via stdio or Streamable HTTP transports.
Does jshookmcp require API keys or external services?+
No API keys are required for core functionality. The server runs locally and includes all necessary runtimes (Chromium, Camoufox, Binaryen, Frida bridges) which are downloaded on first use depending on the selected profile.
Is jshookmcp free to use?+
Yes, jshookmcp is open-source software licensed under AGPLv3, which means it's free to use but derivative works must also be released under the same license.
What are the system requirements for jshookmcp?+
jshookmcp requires Node.js 22.12 or later (22.22.2+ or 24.15+ recommended) and pnpm 10.x. Optional components like ONNX embeddings, Z3 solver, Binaryen, Camoufox, and Playwright are downloaded automatically based on the tool profile you select.
How do I install jshookmcp?+
Open the source repository on GitHub and follow its README. jshookmcp is a mcp server — MCP Agents Market links you directly to the official repo.
Is jshookmcp free?+
jshookmcp is an open-source project hosted on GitHub. Check the repository for its license and any usage requirements.