jshookmcp is a powerful but highly specialized MCP server for JavaScript security and reverse engineering. It offers a comprehensive toolset and flexible configuration, but requires technical expertise and has a steep learning curve. Despite sensitive features, the project is AGPL-3.0 licensed and community-driven, making it a professional and effective solution.
jshookmcp is an MCP server that provides AI agents with 600+ built-in tools across 34 domains for JavaScript analysis and security research. It integrates browser automation, CDP debugging, network interception, JS hooks, LLM-powered code analysis, process/memory forensics, WASM reverse engineering, source-map reconstruction, AST transforms, and composite workflows. A progressive tool profile (search → workflow → full) optimizes context consumption. Requires Node.js 22.12+ and uses strict TypeScript.
npm_config_omit and restart.{
"mcpServers": {
"jshook": {
"command": "npx",
"args": [
"-y",
"@jshookmcp/jshook@latest"
],
"env": {
"MCP_TOOL_PROFILE": "search",
"npm_config_omit": "optional"
}
}
}
}