Labsco
vmoranv logo

JsHookMcp

β˜… 1,700

from vmoranv

The js hook toolkit that all you need

πŸ”₯πŸ”₯πŸ”₯πŸ”₯βœ“ VerifiedFreeQuick setup
#automation#browser#git#finance#security#memory

@jshookmcp/jshook

English | δΈ­ζ–‡

An MCP server that gives AI agents 402 tools across 36 domains for JavaScript analysis and security research β€” browser automation, CDP debugging, network interception, JS hooks, LLM-powered code analysis, process/memory forensics, WASM reverse engineering, source-map reconstruction, AST transforms, and composite workflows in a single server.

Quick Links

🌟 Highlights

  • πŸ€– AI-Driven Analysis β€” LLM-powered deobfuscation, crypto detection, AST comprehension

  • ⚑ Search-First Context Efficiency β€” search profile β‰ˆ 3K tokens vs full β‰ˆ 40K+ tokens

  • 🎯 Progressive Tiers β€” search β†’ workflow β†’ full, activate on demand

  • 🌐 Full-Stack Browser Automation β€” Chromium/Camoufox + CDP + anti-detection + CAPTCHA handling

  • πŸ” Runtime Recovery and Session Isolation β€” HTTP sessions restore activated domains, browser attach state, coverage state, and isolate browser-side session state per client

  • 🧭 Schema-First Meta Tools β€” describe_tool, validated call_tool, and coverage_report reduce parameter errors and make tool coverage visible

  • πŸ“‘ Network Interception β€” HTTP/2 frame building, MiTM capture, GraphQL, Burp Suite bridge

  • πŸ› οΈ Reverse Engineering Toolchain β€” WASM disassembly, binary analysis, Frida, Ghidra/IDA bridges

  • 🧰 Process & Memory Forensics β€” Native FFI scanning, hardware breakpoints, PE introspection

  • 🧩 Dynamic Extensibility β€” Hot-reload plugins, declarative workflows, auto-discovered domains

Recent Runtime Notes

  • HTTP transport now multiplexes independent MCP sessions and restores runtime state after reconnects.

  • proxy_start auto-generates a local HTTPS interception CA when needed.

  • Browser CAPTCHA solving is now explicit-input driven: pass taskKind, siteKey, imageBase64, callbackName, and responseSelector as needed. Built-in widget/page signature probing is intentionally not used.

Architecture

  • Runtime Registry β€” Domains auto-discovered via manifest.ts; add a domain by creating one file

  • Lazy Initialization β€” Handlers instantiated on first call, not at startup

  • BM25 + Vector Search β€” search_tools meta-tool with hybrid ranking and adaptive weights

  • MCP ToolAnnotations β€” Every tool carries readOnlyHint / destructiveHint / idempotentHint / openWorldHint

Registry Snapshot

The built-in surface below is generated from the runtime registry and checked in CI.

  • Package version: 0.3.3

  • Built-in Tools: 489

  • Domains: adb-bridge, binary-instrument, boringssl-inspector, browser, canvas, coordination, core, cross-domain, dart-inspector, debugger, encoding, exploit-dev, extension-registry, graphql, instrumentation, maintenance, memory, mojo-ipc, native-emulator, network, platform, process, protocol-analysis, proxy, sourcemap, streaming, syscall-hook, trace, transform, v8-inspector, wasm, webgpu, workflow

  • Note: this snapshot is generated from the runtime registry; do not edit the counts by hand.

View the complete Tool Reference β†—

Project Stats