Jshookmcp

vmoranv/jshookmcp

This is a Swiss Army knife for JavaScript reverse engineering and browser automation. It ships 402 tools across 36 domains including Chrome DevTools Protocol integration, network interception with HTTP/2 frame building, WASM disassembly, Frida hooks, and LLM-powered deobfuscation. The search profile keeps token usage around 3K while full mode exposes the entire toolkit. Use it when you need to analyze obfuscated code, automate Chromium with anti-detection, intercept GraphQL traffic, or run memory forensics on JS runtimes. HTTP transport handles session recovery, and the runtime registry lets you hot-reload custom domains. Built for security audits and deep instrumentation work that goes beyond typical browser automation.

GitHub stars: 2.1K
tools: 8
transport: STDIO
last updated: Oct 10, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp @jshookmcp/jshook --name jshookmcp

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add jshookmcp -- npx -y @jshookmcp/jshook

Run in your terminal. Replace YOUR_* placeholders with real values; add --scope user to install for every project.

Tools

Verified live · 8 tools

Verified live against the running server on Jun 10, 2026.

search_toolsSearch 0 tools across 0 capability domains. This includes built-in tools plus any loaded plugin/workflow tools (0 currently loaded). In search-tier sessions, call this before assuming a capability is unavailable. Use activate_tools for exact matches, activate_domain for an ent...3 params

Search 0 tools across 0 capability domains. This includes built-in tools plus any loaded plugin/workflow tools (0 currently loaded). In search-tier sessions, call this before assuming a capability is unavailable. Use activate_tools for exact matches, activate_domain for an ent...

Parameters* required

auto_activateboolean

Auto-activate found tools so they are immediately callable. Set false to only search without activating (default: true)

query*string

Before calling, distill your intent into 2-5 key concepts: what action, on what target, in which domain. Pass only those distilled keywords — not the original user request.

top_knumber

Max results to return (default: 10, max: 30)

route_toolOne-stop tool router: accepts a natural language task description, returns recommended tools and next actions. Automatically detects workflow patterns, recommends activation order, and provides example arguments. Use this instead of search_tools when you want guided tool disco...2 params

One-stop tool router: accepts a natural language task description, returns recommended tools and next actions. Automatically detects workflow patterns, recommends activation order, and provides example arguments. Use this instead of search_tools when you want guided tool disco...

Parameters* required

contextobject

Optional context hints for routing

task*string

Natural language description of the task you want to accomplish

describe_toolGet detailed information about a specific tool, including its input schema. Use this to see the exact parameters a tool expects before calling it.1 params

Get detailed information about a specific tool, including its input schema. Use this to see the exact parameters a tool expects before calling it.

Parameters* required

name*string

Tool name to describe

activate_toolsDynamically register specific tools by name, regardless of current base tier. Use after search_tools to enable exactly the tools you need. In search-tier sessions this is usually enough; you do not need boost_profile just to use a few exact tools. Activated tools appear in the...1 params

Dynamically register specific tools by name, regardless of current base tier. Use after search_tools to enable exactly the tools you need. In search-tier sessions this is usually enough; you do not need boost_profile just to use a few exact tools. Activated tools appear in the...

Parameters* required

names*value

Array of tool names to activate (from search_tools results). Also accepts a JSON stringified array for clients that serialize arrays as strings.

deactivate_toolsRemove previously activated tools to free context. Only affects tools added via activate_tools, not base profile tools.1 params

Remove previously activated tools to free context. Only affects tools added via activate_tools, not base profile tools.

Parameters* required

names*value

Array of tool names to deactivate

activate_domainActivate all tools in a domain at once. Domains: . Use reload_extensions first to include external plugin/workflow domains.2 params

Activate all tools in a domain at once. Domains: . Use reload_extensions first to include external plugin/workflow domains.

Parameters* required

domain*string

Domain name to activate (e.g. "debugger", "network")

ttlMinutesnumber

Auto-deactivate after N minutes (default: 30, set 0 for no expiry)

call_toolExecute an already-active tool by name. Use this when activate_tools/activate_domain registered a tool but your client did not refresh its tool list. Does not auto-activate inactive tools.4 params

Execute an already-active tool by name. Use this when activate_tools/activate_domain registered a tool but your client did not refresh its tool list. Does not auto-activate inactive tools.

Parameters* required

argsobject

Arguments object to pass to the tool

argumentsstring

Another alternative: MCP clients that stringify the entire arguments wrapper. Carries the same nested {name, args/parameters} payload as a JSON string.

name*string

The tool name to execute (from search_tools or describe_tool results)

parametersstring

Alternative: JSON-serialized arguments string. Some MCP clients serialize the nested arguments as a single stringified-JSON field.

coverage_reportReport which tools have been called in the current runtime and which known tools remain uncalled. Loads all domains first so the uncalled list reflects the full tool catalog, not just currently active tools.

Report which tools have been called in the current runtime and which known tools remain uncalled. Loads all domains first so the uncalled list reflects the full tool catalog, not just currently active tools.

No parameters. Call it with no arguments.

Readme

@jshookmcp/jshook

A search-first, profile-aware reverse-engineering workspace for AI agents.

View the full README on GitHub

Details

Repository: github.com/vmoranv/jshookmcp
Website: vmoranv.github.io/jshookmcp
Category: Search & Web Crawling
Package: @jshookmcp/jshook
Transport: STDIO
Registry: MCP registry, active
Resources: 40
Prompts: 2
Tools verified: Jun 10, 2026

Related Search & Web Crawling MCP servers

View all

Remocn: Remotion MCP serverremocn/remocnHosted MCP for Remotion videos: search Remocn components, read docs, plan a video, preview it.1.7Kstars

Slackkorotovsky/slack-mcp-serverProvides Slack workspace access via MCP with channels, DMs, history, search, and safe posting via multiple transports.1.6Kstars

Minutessilverstein/minutesThe private, owned conversation-memory layer for AI. Record, transcribe, and search every meeting.1.6Kstars

Docsproxysoul/empryoSearch and read Empryo's documentation. Read-only, no auth, no local access.1.6Kstars

SoloMDzhitongblog/solomdRead and search a folder of Markdown notes: search, backlinks, tags, tasks, outlines, git history.1.5Kstars

Autotswinedarksea/autotsAutomated time series forecasting with model search, anomaly detection, and event risk analysis1.4Kstars