# zhizhuodemao/js-reverse-mcp

AI Agent-first JS 逆向 MCP Server：有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测，可选 CloakBrowser。

Repository: https://github.com/zhizhuodemao/js-reverse-mcp
Canonical: https://ross.abutalabs.com/products/js-reverse-mcp
Language: TypeScript
License: Apache-2.0
License Family: permissive
Topics: anti-detection, browser-automation, cdp, chrome-devtools, debugging, javascript, mcp, mcp-server, patchright, reverse-engineering, websocket
Last push: 2026-08-25T07:03:19+00:00

## Health v2 (maintenance only)
Score: 83/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 98, longevity 19
- inputs: {"age_days": 277, "days_push": 8, "days_rel": 13, "gap_med": 0.0, "n_releases_24m": 37}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2608, forks 341 (observed 2026-08-28T04:07:04.191997+00:00)

## What it is
An MCP server that gives AI coding agents (Claude, Cursor, Copilot) tools for JavaScript reverse engineering in a headed Chrome browser, including script inspection, breakpoints, network/WebSocket analysis, and state replay. It ships a dedicated Patchright fork for protocol-level anti-detection, with optional CloakBrowser for strongly protected sites.

## Use cases
- reverse engineer javascript on a webpage with an AI agent
- debug website scripts with breakpoints via Claude or Cursor
- analyze network requests and websocket messages for reverse engineering
- bypass anti-bot detection while automating chrome
- inspect and format minified js from a site
- replay cookies and storage to reproduce risk-control flows
- export network payloads and script sources for later analysis

## When to choose
- you want an AI coding assistant to perform multi-step JS reverse engineering autonomously
- you need headed Chrome debugging with persistent login state
- you need built-in stealth/anti-detection for protected sites

## When to avoid
- you only need simple headless web scraping without debugging
- you require guaranteed undetectability (the project explicitly does not promise this)
- you cannot run Chrome locally

## Facets
- artifact type: service
- maturity: active
- function: mcp, reverse-engineering, web-scraping, security, developer-tools
- domain: reverse-engineering, security, developer-tools, web-development
- platform: cli, cross-platform
- tags: mcp-server, chrome-devtools, cdp, anti-detection, patchright, stealth, browser-automation, websocket-analysis, breakpoints, ai-agent, debugging, automation, nodejs

## Member repositories
- zhizhuodemao/js-reverse-mcp (main) score 83

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:04.191997+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:20:56.177071+00:00, confidence not recorded.
  - readme: https://github.com/zhizhuodemao/js-reverse-mcp (fetched 2026-08-28T04:07:04.191997+00:00, sha a27c8989886d)
  - registry_npm: https://registry.npmjs.org/js-reverse-mcp (fetched 2026-08-29T10:03:57.658459+00:00, sha bf00bd87880b)
- Data as of 2026-08-30T08:39:29.467469+00:00.