Js Reverse MCP Server
JavaScript reverse engineering and debugging suite for AI coding assistants.
Data last scanned today · Reviewed today
Overview
Js Reverse MCP Server provides an AI-native interface for analyzing and debugging browser-based JavaScript. Instead of mapping raw Chrome DevTools commands, it reconstructs browser interactions—such as script inspection, breakpoint management, network traffic logging, and WebSocket analysis—into primitives designed for continuous AI agent reasoning. It supports anti-detection features, defaulting to Patchright stealth protocols with optional CloakBrowser integration for bypassing complex bot protections. Developers can use this server to automate the reverse engineering workflow, including exporting network payloads and local script files for analysis. It includes features for persistent login states and browser state replaying, allowing agents to maintain session context across complex debugging sessions. The tool is compatible with Claude Code, Cursor, and VS Code Copilot via standard MCP configuration.
Our verdict
With a high-risk security score of 50/100, this tool requires careful deployment. The score reflects that it is a community-maintained project, not an official vendor product, and it has not yet undergone editorial review or security auditing. Because it executes browser operations and handles site authentication tokens, it should only be used by developers in controlled environments where they can monitor the agent's actions and limit its access to sensitive or production-facing websites.
- Native support for complex anti-detection and stealth browsing
- Optimized output formats for AI agent decision-making
- Persistent local storage and session replaying
- Minimal supply-chain risk with only 8 direct dependencies
- High-risk security score due to lack of professional audit
- Community-maintained without official vendor support
- Authentication methods remain unreviewed for security
Setup
{
"mcpServers": {
"js-reverse-mcp": {
"args": [
"-y",
"js-reverse-mcp"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| select_page | 列出打开的页面，或按索引选择调试上下文 | low |
| new_page | 创建新页面并导航到 URL | medium |
| navigate_page | 导航、后退、前进或刷新页面 | medium |
| select_frame | 列出所有 frame（iframe），或选择执行上下文 | low |
| click_element | 严格匹配并点击当前 frame 中的单个可见元素 | medium |
| take_screenshot | 截取页面截图 | low |
| list_scripts | 列出页面中所有加载的 JavaScript 脚本 | low |
| get_script_source | 获取脚本源码片段，支持行范围或字符偏移 | low |
| save_script_source | 保存完整脚本源码到本地文件（适用于大型/压缩/WASM文件） | medium |
| search_in_sources | 在所有脚本中搜索字符串或正则表达式 | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What are the system requirements for running this MCP server?
You need Node.js version 20.19 or newer and a stable version of Google Chrome installed on your system.
›How can I run the server without local installation?
You can use the npx command by adding the provided JSON configuration block to your MCP client's settings.
›What is the difference between the default mode and the --cloak mode?
The default mode uses your installed Google Chrome for persistence, while the --cloak mode utilizes a custom CloakBrowser binary to provide source-level fingerprinting patches for sites with strong anti-bot protections.
›Does the server maintain session state between runs?
Yes, by default it stores browser profiles in ~/.cache/chrome-devtools-mcp/ to ensure cookies and localStorage persist across sessions, though --isolated mode provides a fresh environment.
›How should I configure the server for use with Cursor or VS Code?
For Cursor, add the npx configuration via the MCP settings menu; for VS Code Copilot, use the code --add-mcp command with the provided JSON configuration string.
›Does the server use JS injection to handle anti-detection?
No, the server performs zero JS injection to avoid detection; instead, it relies on protocol-level handling via Patchright and optional source-level binary patching.
Changelog
Badge
Maintain this server? Add the live badge to your README.