AgentIndex icon
AgentIndex
bluerock logo
bluerock
★ 35
vs
jshookmcp logo
jshookmcp
★ 2.1k

bluerock vs jshookmcp

bluerock: BlueRock is a lightweight runtime security sensor for Python MCP servers. It monitors MCP tool calls, resource access, session lifecycle, and module imports with zero code changes, emitting structured NDJSON events for every operation.; jshookmcp: jshook is an MCP server that gives AI agents a front-end and binary reverse-engineering workspace: 735 tools across 36 domains for hooking pages, capturing network traffic, deobfuscating bundles, disassembling WASM and instrumenting processes. A search-first profile loads only about 3K tokens of tool metadata so agents are not flooded with schemas.

01

TL;DR

bluerock logo
bluerockSecurity & Safety · ★ 35

Security teams monitoring MCP agents in production

Read bluerock full review →
jshookmcp logo
jshookmcpSecurity & Safety · ★ 2.1k

Letting an agent analyse and deobfuscate a web app's JavaScript and network protocol

Read jshookmcp full review →
02

Side-by-Side Comparison

Field
bluerock logobluerock
jshookmcp logojshookmcp
Category
Security & Safety
Security & Safety
Stars
★ 35
★ 2.1k
License
Apache-2.0
AGPL-3.0
Install Command
pip install bluerock[oss]
npx -y @jshookmcp/jshook@latest
Updated
1d ago
3d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-security, agents, ai-agents
ai-agents, anti-detection, browser-automation
03

Features

bluerock logobluerock
01Zero code changes required
02Two-layer hooking: sys.meta_path for imports and wrapt for MCP
03Full MCP coverage: tool calls, resources, sessions, transports
04Hooks activate before your code runs
05Open source under Apache 2.0
jshookmcp logojshookmcp
01search, workflow and full tool profiles; search loads ~3K tokens, full exposes all 735 tools (~109K tokens)
02Chromium and Camoufox automation over CDP, with HTTP/2 frame building and an on-demand MITM proxy CA
03WASM reverse engineering via wabt (wasm2wat, wasm-decompile, wasm-objdump, wasm2c) and Binaryen
04Frida, Ghidra and IDA bridges, hardware breakpoints, PE introspection and memory read/write
05Android APK triage with apktool, jadx decompilation, DEX scanning and unidbg emulation
06Streamable HTTP sessions restore browser and domain state after reconnects
04

Use Cases

bluerock logobluerock
↳Security teams monitoring MCP agents in production
↳AppSec engineers auditing tool calls and data flows
↳AI developers understanding runtime behavior of MCP servers
jshookmcp logojshookmcp
↳Letting an agent analyse and deobfuscate a web app's JavaScript and network protocol
↳WASM and native binary analysis with Ghidra/IDA/Frida driven from chat
↳Android APK static triage and decompilation for security research
FAQ

FAQ

What is the difference between bluerock and jshookmcp?
Both bluerock and jshookmcp are in the Security & Safety category. bluerock has 35 stars, while jshookmcp has 2.1k stars.
Which is better, bluerock or jshookmcp?
The best choice depends on your use case. Choose bluerock if Security teams monitoring MCP agents in production, and jshookmcp if Letting an agent analyse and deobfuscate a web app's JavaScript and network protocol.
Is bluerock free or open source?
Yes, bluerock is open source on GitHub (Apache-2.0).
Is jshookmcp free or open source?
Yes, jshookmcp is open source on GitHub (AGPL-3.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to bluerock →Alternatives to jshookmcp →bluerock details →jshookmcp details →