Js Reverse MCP logo

Js Reverse MCP

Verified

by zhizhuodemao

AI Agent-first JS 逆向 MCP Server:有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测,可选 CloakBrowser。

Set up this server

01 / Choose your client

02 / Before you connect

Authentication is not specified. Check the project instructions before connecting.

Install the runtime required by the project and make it available to your client.

Project instructions

Use names from the project instructions, separated by commas. Enter names only, never secret values.

03 / Add the configuration

Source: maintainer launch command

claude mcp add --transport stdio 'js-reverse-mcp' -- 'npx' '-y' 'js-reverse-mcp'

Run in your terminal after replacing any placeholders.

04 / Check it in your client

Open your client’s MCP settings and confirm the server connects and lists its tools. A copied configuration does not confirm a working connection.

anti-detectionbrowser-automationcdpchrome-devtoolsdebuggingjavascriptmcpmcp-serverpatchrightreverse-engineeringwebsocket

More in Search & Web

Browse the full directory

Badge

Show this listing on your README and website

You are one of MCPVault's first 100 verified servers: verified for good, badge or no badge. Put it on your README or site if you want a live Verified proof link for visitors.

Security profile

Exposure: Limited

Runs commands or loads code on your machine, but does not reach secrets or other agents.

What this server can reach, from a static read of the shipped code. Nothing was executed and nothing here is a verdict: a browser tool has to run commands and an API wrapper has to call its API. Decide what fits your setup.

NVIDIA SkillSpector v2.11.0, MCPVault MCP-server policy. Scanned yesterday @ bf7dc50.

Detected

  • Installs itself to run later7 places

    Writes startup entries, cron jobs or state files that outlive the session.

  • Runs unpinned packages at runtime2 places

    Executes npx or uvx without a version, so a compromised upstream release would run.

Not detected: reads environment variables in bulk, sends conversation content outward, runs shell commands, reads or writes other agents' configuration, accesses credential files, uses elevated privileges, matches a known malicious pattern.

Dependencies with known advisories

  • brace-expansion 1.1.16 High, CVE-2026-14257, CVE-2026-69152
  • brace-expansion 2.1.2 High, CVE-2026-14257, CVE-2026-69152
  • js-yaml 4.3.0 High, CVE-2026-84375, GHSA-5P4M-2WFM-XMQJ
  • @humanfs/node 0.16.7 Low, GHSA-P498-V437-472G
  • hono 4.13.3 Low, CVE-2026-84363, CVE-2026-84364, CVE-2026-84365, CVE-2026-39408

Left out of the profile

55 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.

How the profile works Maintainers see file, line and a fix for each item in their dashboard.
24Tools reported by the last successful handshake

0 of 0 tools · Observed tool names: 24/24

Observed tool names (24)

Reported by a complete handshake for the current saved configuration. Tools were listed, not invoked.

· 1.3.0

break_on_xhrclear_network_requestsclear_site_dataclick_elementevaluate_scriptget_paused_infoget_request_initiatorget_script_sourceget_websocket_messageslist_breakpointslist_console_messageslist_network_requestslist_scriptsnavigate_pagenew_pagepause_or_resumeremove_breakpointsave_script_sourcesearch_in_sourcesselect_frameselect_pageset_breakpoint_on_textsteptake_screenshot

Documented tools (0)

From project documentation. A server handshake does not verify each tool’s description or behavior.

Tool descriptions have not been documented here yet.

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

  1. Sep 21, 2026, 02:23 AM UTC

    Compared with Sep 13, 2026, 02:35 AM UTC

    No tool-name changes

FAQ

Questions about Js Reverse MCP Server

How do I connect Js Reverse MCP Server to Claude?
Run `claude mcp add js-reverse-mcp -- npx -y js-reverse-mcp` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.
Is Js Reverse MCP Server free?
The listed licence is Apache-2.0. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Js Reverse MCP Server do?
MCPVault has not yet recorded the tool list for Js Reverse MCP Server; it is captured when the server passes a live MCP handshake. The description above is what the project publishes.