// SCAN REPORT

Js Reverse

31 tools. 14 can modify or destroy data without limits.

14 write tools that can modify data. Rate limits recommended.

Last updated: 2 Jul 2026

14 can modify or destroy data

17 read-only

31 tools total

Community server · catalogue entry verified 02/07/2026

How to control Js Reverse ↓

TOOL MAP

What Js Reverse exposes to your agents

Read (17) Write / Execute (14) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Js Reverse tools

Execute · High browser_launch Launching a browser instance is an Execute action because it starts an external application and establishes a connection to the internet/local services. Execute · High page_navigate Navigation to arbitrary URLs constitutes code/operation execution in a browser context. Execute · Critical generate_brute_script This tool generates and presumably executes brute-force attack scripts that automate login attempts against external systems. Execute · High generate_decrypt_script This tool generates executable scripts (Python or JavaScript) and automatically saves them to the output directory.

14 of Js Reverse's 31 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Js Reverse

PolicyLayer is an MCP gateway — it sits between your AI agents and Js Reverse, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "browser_close": {
    "limits": [
      {
        "counter": "browser_close_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "crypto_analyze_param": {
    "limits": [
      {
        "counter": "crypto_analyze_param_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Js Reverse — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON JS REVERSE →

Instant setup, no code required.

FULL CATALOGUE

All 31 Js Reverse tools

EXECUTE 13 tools

Execute browser_launch 启动Chrome浏览器实例，支持headless模式和代理设置 Execute crypto_verify_algorithm 使用本地加密库验证猜测的算法是否正确（输入明文+参数，对比是否能得到相同密文） Execute generate_brute_script 生成暴力破解脚本（包含加密+自动化登录尝试） Execute generate_decrypt_script 根据分析结果生成完整的解密脚本（Python或JavaScript），自动保存到output目录 Execute generate_encrypt_script 生成加密脚本（用于构造请求重放） Execute js_trace_call_chain 追踪指定函数的调用链（谁调用了它，它又调用了谁） Execute network_disable_intercept 关闭网络请求拦截 Execute network_enable_intercept 开启网络请求拦截，捕获所有HTTP请求（特别是登录请求） Execute page_navigate 导航到指定URL，等待页面加载完成 Execute runtime_call_function 调用页面中的指定全局函数，传入参数并获取返回值 Execute runtime_evaluate 在页面上下文中执行JavaScript代码（可用于填写表单、触发登录等） Execute runtime_hook_function Hook指定函数，记录每次调用的参数和返回值（用于捕获加密过程的输入输出） Execute script_test_run 测试运行生成的脚本（仅支持JavaScript，Python需要本地python环境）

WRITE 1 tools

Write browser_close 关闭浏览器实例，释放资源

READ 17 tools

Read crypto_analyze_param 分析指定请求参数的加密方式，通过密文格式和长度推断可能的算法 Read crypto_auto_detect 自动扫描页面所有JS代码，检测使用的加密算法和库（支持AES/DES/RSA/MD5/SHA/SM2/SM4/Base64） Read crypto_extract_key 尝试从JS源码和Runtime中提取加密密钥、IV、盐值等关键参数 Read crypto_identify_library 识别页面使用的加密库名称和版本 Read js_get_all_scripts 获取当前页面加载的所有JavaScript脚本列表 Read js_get_encryption_context 获取加密函数及其所有依赖的完整上下文（函数本身+引用的变量/函数） Read js_get_function_body 根据函数名提取完整的函数实现代码 Read js_get_script_source 获取指定脚本的完整源码（自动美化格式化） Read js_search_in_scripts 在所有JS脚本中搜索关键词/正则表达式，定位加密相关代码 Read network_compare_requests 对比多次请求的参数差异，帮助分析哪些参数是动态加密的 Read network_find_login_request 智能定位登录请求，自动识别包含密码/加密参数的POST请求 Read network_get_request_detail 获取单个请求的完整详情，包括请求头、请求体、响应 Read network_get_requests 获取已拦截的所有请求列表摘要 Read page_get_content 获取页面HTML内容或指定元素的内容 Read page_screenshot 截取当前页面截图，返回base64编码图片 Read runtime_get_global_vars 获取页面全局作用域中与加密相关的变量和对象 Read runtime_get_hook_logs 获取已Hook函数的调用记录（包含参数和返回值）

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Js Reverse

How do I prevent bulk modifications through Js Reverse? +

The Js Reverse server has 1 write tools including browser_close. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Js Reverse.

How many tools does the Js Reverse MCP server expose? +

31 tools across 3 categories: Execute, Read, Write. 17 are read-only. 14 can modify, create, or delete data.

How do I enforce a policy on Js Reverse? +

Register the Js Reverse MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Js Reverse tool call.

Deterministic rules across all 31 Js Reverse tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON JS REVERSE →

Instant setup, no code required.

31 Js Reverse tools catalogued and risk-classified — across an index of 43,000+ MCP servers.