jshookmcp
jshook is an MCP server for front-end and binary reverse engineering. It groups 735 tools into 36 domains: browser automation over CDP (Chromium and Camoufox), network interception with HTTP/2 frame building and a MITM proxy, LLM-assisted JavaScript deobfuscation and source-map reconstruction, WASM disassembly through wabt and Binaryen, Frida, Ghidra and IDA bridges, process memory forensics, and Android APK analysis with apktool, jadx and unidbg.
The main design problem it tackles is context size. The default search profile loads about 3K tokens of tool metadata with BM25 plus vector ranking, and agents move up to workflow or full (all 735 tools, about 109K tokens by the project's own 2026-10-10 measurement) only as needed. Streamable HTTP sessions restore activated domains and browser attach state after reconnects, and per-client browser state is isolated.
It runs with npx -y @jshookmcp/jshook@latest on Node.js 22+, and is licensed AGPL-3.0. The toolset includes anti-detection presets and a CAPTCHA solver alongside its analysis tools, so it is aimed at security researchers and should only be pointed at targets you are authorised to test.
Features
Why choose it
Trade-offs
Maintenance check
- Last commit
- 2026-10-25
- Commits, last 90 days
- 100+
- Releases, last 90 days
- 1
- Latest release
- v0.4.2 (2026-10-10)
- Open issues
- 1
- Recent issues with at least one comment
- 5/5
Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.
Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.
Compatibility
Quick start
Use cases
Alternatives
Comments
No comments yet. Be the first!