The js hook toolkit that all you need
Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.
Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.
Version 0.3.5 declares 1 executable entrypoint.
npm install --save-exact @jshookmcp/jshook@0.3.5npx -y -p @jshookmcp/jshook@0.3.5 @jshookmcp/jshook{
"mcpServers": {
"@jshookmcp/jshook": {
"command": "npx",
"args": [
"-y",
"-p",
"@jshookmcp/jshook@0.3.5",
"@jshookmcp/jshook"
]
}
}
}| Canonical slug | jshookmcp-fed8418a | Deployment | Local Only |
|---|---|---|---|
| Canonical package | npm:@jshookmcp/jshook | Repository | vmoranv/jshookmcp |
| First published | — | Latest release | — |
| Last security verification | — | Classification confidence | 90% |
| Publication | Draft | Official distribution | Not verified |
| Channel | Identifier | Current version | Versions | Source |
|---|---|---|---|---|
| npm | @jshookmcp/jshook | 0.3.5 | 23 | Repository |
| Package | Version | Published / observed | Inventory | Security scan |
|---|---|---|---|---|
| npm@jshookmcp/jshook | 0.3.5Current | Sep 5, 2026 | 8 toolsSucceeded · 43 resources · 2 prompts | Evidence restricted |
Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.
No public current-version evidence is available yet.
| Tool | Category | Annotations | Risk |
|---|---|---|---|
activate_domainActivate all tools in a domain at once. Domains: . Use reload_extensions first to include external plugin/workflow domains.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain name to activate (e.g. \"debugger\", \"network\")"
},
"ttlMinutes": {
"description": "Auto-deactivate after N minutes (default: 30, set 0 for no expiry)",
"type": "number"
}
},
"required": [
"domain"
]
} | — | — | |
activate_toolsDynamically register specific tools by name, regardless of current base tier. Use after search_tools to enable exactly the tools you need. In search-tier sessions this is usually enough; you do not need boost_profile just to use a few exact tools. Activated tools appear in the tool list immediately. If tools do not appear after activation, use call_tool to invoke them directly.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"names": {
"anyOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"type": "string",
"description": "JSON stringified array for MCP clients that serialize arrays as strings"
}
],
"description": "Array of tool names to activate (from search_tools results). Also accepts a JSON stringified array for clients that serialize arrays as strings."
}
},
"required": [
"names"
]
} | — | — | |
call_toolExecute an already-active tool by name. Use this when activate_tools/activate_domain registered a tool but your client did not refresh its tool list. Does not auto-activate inactive tools.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"name": {
"type": "string",
"description": "The tool name to execute (from search_tools or describe_tool results)"
},
"args": {
"type": "object",
"propertyNames": {
"type": "string"
},
"additionalProperties": {},
"description": "Arguments object to pass to the tool"
},
"parameters": {
"type": "string",
"description": "Alternative: JSON-serialized arguments string. Some MCP clients serialize the nested arguments as a single stringified-JSON field."
},
"arguments": {
"type": "string",
"description": "Another alternative: MCP clients that stringify the entire arguments wrapper. Carries the same nested {name, args/parameters} payload as a JSON string."
}
},
"required": [
"name"
]
} | — | — | |
coverage_reportReport which tools have been called in the current runtime and which known tools remain uncalled. Loads all domains first so the uncalled list reflects the full tool catalog, not just currently active tools.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {}
} | — | — | |
deactivate_toolsRemove previously activated tools to free context. Only affects tools added via activate_tools, not base profile tools.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"names": {
"anyOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"type": "string",
"description": "JSON stringified array"
}
],
"description": "Array of tool names to deactivate"
}
},
"required": [
"names"
]
} | — | — | |
describe_toolGet detailed information about a specific tool, including its input schema. Use this to see the exact parameters a tool expects before calling it.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"name": {
"type": "string",
"description": "Tool name to describe"
}
},
"required": [
"name"
]
} | — | — | |
route_toolOne-stop tool router: accepts a natural language task description, returns recommended tools and next actions. Automatically detects workflow patterns, recommends activation order, and provides example arguments. Use this instead of search_tools when you want guided tool discovery with actionable next steps.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"task": {
"type": "string",
"description": "Natural language description of the task you want to accomplish"
},
"context": {
"type": "object",
"properties": {
"preferredDomain": {
"type": "string",
"description": "Domain preference (e.g., \"browser\", \"network\")"
},
"autoActivate": {
"description": "Whether to auto-activate recommended tools (default: false)",
"type": "boolean"
},
"maxRecommendations": {
"description": "Maximum number of recommendations (default: 5)",
"type": "number"
}
},
"description": "Optional context hints for routing"
}
},
"required": [
"task"
]
} | — | — | |
search_toolsSearch 668 tools across 34 capability domains. This includes built-in tools plus any loaded plugin/workflow tools (0 currently loaded). In search-tier sessions, call this before assuming a capability is unavailable. Use activate_tools for exact matches, activate_domain for an entire domain. Domains: browser (76) | native-emulator (54) | binary-instrument (44) | network (41) | memory (34) | boringssl-inspector (28) | process (28) | adb-bridge (26) | core (25) | v8-inspector (22) | debugger (21) | exploit-dev (21) | protocol-analysis (20) | platform (18) | streaming (17) | wasm (17) | dart-inspector (16) | syscall-hook (15) | maintenance (14) | instrumentation (13) | coordination (12) | workflow (12) | proxy (11) | trace (10) | canvas (9) | webgpu (9) | cross-domain (8) | mojo-ipc (8) | extension-registry (7) | graphql (7) | sourcemap (7) | transform (7) | native-bridge (6) | encoding (5). Query tip: before searching, distill your intent into key concepts (action verb + target + domain). The engine combines token matching, fuzzy names, profile context, and optional static embeddings.Input schema{
"$schema": "http://json-schema.org/draft-07/schema#",
"type": "object",
"properties": {
"query": {
"type": "string",
"description": "Before calling, distill your intent into 2-5 key concepts: what action, on what target, in which domain. Pass only those distilled keywords — not the original user request."
},
"top_k": {
"description": "Max results to return (default: 10, max: 30)",
"type": "number"
},
"auto_activate": {
"description": "Auto-activate found tools so they are immediately callable. Set false to only search without activating (default: true)",
"type": "boolean"
}
},
"required": [
"query"
]
} | — | — |
jshook://activation/stateCurrently activated tools, per-domain TTL remaining, and auto-pruner predictions.
jshook://browser/tabsList of currently open browser tabs with URL, title, and tabIndex.
jshook://cache/statsGlobal cache entry count, total size, and per-cache-instance hit rates.
jshook://domains/adb-bridge0 tools
jshook://domains/binary-instrument0 tools
jshook://domains/boringssl-inspector0 tools
jshook://domains/browser0 tools
jshook://domains/canvas0 tools
jshook://domains/coordination0 tools
jshook://domains/core0 tools
jshook://domains/cross-domain0 tools
jshook://domains/dart-inspector0 tools
jshook://domains/debugger0 tools
jshook://domains/encoding0 tools
jshook://domains/exploit-dev0 tools
jshook://domains/extension-registry0 tools
jshook://domains/graphql0 tools
jshook://domains/instrumentation0 tools
jshook://domains/maintenance0 tools
jshook://domains/memory0 tools
jshook://domains/mojo-ipc0 tools
jshook://domains/native-bridge0 tools
jshook://domains/native-emulator0 tools
jshook://domains/network0 tools
jshook://domains/platform0 tools
jshook://domains/process0 tools
jshook://domains/protocol-analysis0 tools
jshook://domains/proxy0 tools
jshook://domains/sourcemap0 tools
jshook://domains/streaming0 tools
jshook://domains/syscall-hook0 tools
jshook://domains/trace0 tools
jshook://domains/transform0 tools
jshook://domains/v8-inspector0 tools
jshook://domains/wasm0 tools
jshook://domains/webgpu0 tools
jshook://domains/workflow0 tools
jshook://evidence/graphSerializable snapshot of the current reverse evidence graph.
jshook://evidence/graph.mdMarkdown report for the current reverse evidence graph.
jshook://instrumentation/sessionsExpanded snapshots for all active instrumentation sessions.
jshook://search/statusCurrent status of the multi-signal tool search engine.
jshook://token-budget/statsCurrent token budget usage, top-10 tool distribution, and optimization suggestions.
jshook://tools/coverageCalled vs uncalled tools in the current runtime, with last-call metadata.
jshook://domains/{domainName}Per-domain tool listing and activation state.
jshook://instrumentation/session/{sessionId}Expanded snapshot for a single instrumentation session.
analyze_anti_debugRunbook and scripts for defeating debugger protections and traps.
hook_generation_guideInstructions on how to deploy and use hooks generated by the hook builder.
| Endpoint | Transport | Authentication | Health | Observed |
|---|---|---|---|---|
| No verified remote endpoint is linked. | ||||
Install the selected package version with: npm install --save-exact @jshookmcp/jshook@0.3.5
JsHookMcp MCP Server exposed 8 tools during independent protocol observation, including activate_domain, activate_tools, call_tool, coverage_report, deactivate_tools, describe_tool, route_tool, search_tools.
The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.
Curated product and capability guides containing this catalog record.