io.github.vmoranv/jshookmcp

@jshookmcp/jshook

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 645/wk 2 tools GitHub npm

No known CVEs

AGPL-3.0 license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: stdio, sse, http

2 tools · ~198 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 14h ago

Edit this pageView history

io.github.vmoranv/jshookmcp is an MCP server that search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 95/100 on MCPpedia's security, maintenance and efficiency rubric.

Browser Security

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "jshook": {
      "env": {
        "JSHOOK_BASE_PROFILE": "search"
      },
      "args": [
        "-y",
        "@jshookmcp/jshook@latest"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-vmoranv-jshookmcp)](https://mcppedia.org/s/io-github-vmoranv-jshookmcp)

Read me

What io.github.vmoranv/jshookmcp does

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@jshookmcp/jshook' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

95/100across 5 weighted dimensions

How we score →

0255075100

−5

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-49856medium · fixedCVSS 4.3

@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization

## Summary The network domain has a central SSRF authorization policy that blocks private, loopback, link-local, and reserved targets unless an explicit authorization object allows private network access. The policy is enforced by raw HTTP/TCP/TLS RTT tools, but the ICMP probe and traceroute tools resolve the target and invoke the native ICMP/traceroute sink directly. An MCP client with access to an active network domain can therefore ask the jshookmcp server to probe internal addresses such a

Affected: >= 0.3.1Fixed in 0.3.2source →

Inventory

Tools (2)

Click any tool to inspect its schema.

~198 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.vmoranv/jshookmcp safe to use?: io.github.vmoranv/jshookmcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under AGPL-3.0.
How do I install io.github.vmoranv/jshookmcp?: io.github.vmoranv/jshookmcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.vmoranv/jshookmcp do?: io.github.vmoranv/jshookmcp provides 2 tools: 636, Architecture. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.vmoranv/jshookmcp?: io.github.vmoranv/jshookmcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.vmoranv/jshookmcp actively maintained?: io.github.vmoranv/jshookmcp is actively maintained - last commit was 0 days ago. It has 2,059 GitHub stars.

Similar servers

Others in browser / security

View all →

Apify Mcp Server95

Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡

12.4k 1

Firecrawl Mcp Server95

Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.

7.7k 4

io.github.achiya-automation/safari-mcp94

Native Safari browser automation for AI agents — 98 tools, zero Chrome overhead.

223 11

Malvex93

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

42 10

MCP Security Weekly

Get CVE alerts and security updates for io.github.vmoranv/jshookmcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

{ "mcpServers": { "jshook": { "env": { "JSHOOK_BASE_PROFILE": "search" }, "args": [ "-y", "@jshookmcp/jshook@latest" ], "command": "npx" } } }

Frequently Asked Questions

Is io.github.vmoranv/jshookmcp safe to use?

io.github.vmoranv/jshookmcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under AGPL-3.0.

How do I install io.github.vmoranv/jshookmcp?

io.github.vmoranv/jshookmcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.vmoranv/jshookmcp do?

io.github.vmoranv/jshookmcp provides 2 tools: 636, Architecture. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.vmoranv/jshookmcp?

io.github.vmoranv/jshookmcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.vmoranv/jshookmcp actively maintained?

io.github.vmoranv/jshookmcp is actively maintained - last commit was 0 days ago. It has 2,059 GitHub stars.