# jshookmcp

Give an agent tools to inspect JavaScript apps, capture browser traffic, analyze WASM modules, and work with live processes.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 2061
- Author: vmoranv
- License: AGPL-3.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/vmoranv/jshookmcp
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/jshookmcp

## What it does

jshookmcp provides tools for JavaScript reverse engineering and browser analysis. It can automate Chromium and Camoufox, capture HTTP and WebSocket traffic, and assist with GraphQL and source maps. The `search` profile helps locate tools; `workflow` supports composite tasks.

The server also handles WASM disassembly through wabt and bridges to Frida, Ghidra, and IDA. Its process and memory tools support live inspection, while its Android tooling covers APK analysis. Running it through `npx` requires Node.js 22.22.2 or later, so check your Node.js version before setup.

## Requirements
- Needs: Node.js (commands run via npx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add jshookmcp -- npx -y @jshookmcp/jshook
```

### Codex

**Platform CLI**
```bash
codex mcp add jshookmcp -- npx -y @jshookmcp/jshook
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "jshookmcp": {
            "command": "npx",
            "args": [
                "-y",
                "@jshookmcp/jshook"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "jshookmcp": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@jshookmcp/jshook"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add jshookmcp npx -y @jshookmcp/jshook
```

## When to use it
- capture a page’s HTTP and WebSocket traffic
- locate cryptographic routines in JavaScript
- disassemble a WASM module and inspect its functions
- attach to a browser and examine its targets
- inspect APK manifests and DEX code

## Example prompts
- Inspect this page’s JavaScript and find its cryptographic routines.
- Capture this page’s network traffic and examine its WebSocket messages.
- Disassemble this WASM module and list its functions and strings.

## Similar
- [frida-17](https://affpapa.org/en/nevibecode/skills/frida-17.md) — skill · 2600 installs
- [opencli-adapter-author](https://affpapa.org/en/nevibecode/skills/opencli-adapter-author.md) — skill · 16200 installs
- [proofreader-api](https://affpapa.org/en/nevibecode/skills/proofreader-api.md) — skill · 470 installs
- [webnn](https://affpapa.org/en/nevibecode/skills/webnn.md) — skill · 463 installs
- [binary-analysis-patterns](https://affpapa.org/en/nevibecode/skills/binary-analysis-patterns.md) — skill · 10900 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md