High-risk tools in JS Reverse MCP

One-shot reverse workflow: collect code, run security/crypto analysis, optional deobfuscation, and hook timeline correlation.

Create a resumable env-fix loop plan from runtime errors and observed capabilities.

Manage JavaScript breakpoints: set, remove, or list active breakpoints.

Click an element by selector.

RECOMMENDED: Create hook script for function/fetch/xhr/property/cookie/websocket/eval/timer. Hooks run without pausing page execution and are the preferred approach over breakpo...

AI-assisted JavaScript deobfuscation.

Emulate a common mobile device profile.

Evaluates a JavaScript expression in the context of a specific call frame while paused. This allows you to inspect variables and execute code in the paused scope.

Evaluate a JavaScript function inside the currently selected page. Returns the response as JSON so returned values have to JSON-serializable.

Build a minimal function slice draft with direct helper dependencies and a Node env shim.

Recommended default for reverse engineering: hook a function and log calls/args/results without pausing execution.

Hover over an element by selector.

Inject an existing hook into the current page.

Register a JavaScript snippet that will run on future document loads before page scripts execute. Use this for preload hooks, environment patches, and early instrumentation.

Inject anti-detection stealth scripts to current page.

Navigates the currently selected page to a URL, or performs back/forward/reload navigation. Waits for DOMContentLoaded event (not full page load). Default timeout is 10 seconds.

Creates a new page and navigates to the specified URL. Waits for DOMContentLoaded event (not full page load). Default timeout is 10 seconds.

High-level reverse-task orchestrator that syncs task state, picks the primary next step, and returns a compact execution plan.

Pauses JavaScript execution at the current point. Use this to interrupt running code.

Press a keyboard key on the active page.

Replay recorded page flow actions through PageController.

Resumes JavaScript execution after being paused at a breakpoint. Execution continues until the next breakpoint or completion.

One-shot reverse agent entry: repeatedly plans and executes the main reverse chain until blocked, stalled, or reaching the analysis checkpoint.

Scroll the page to absolute x/y coordinates.

Selects a frame (by index from list_frames) as the execution context for evaluate_script, hook_function, inspect_object, and other tools that run JavaScript in the page.

Select one or more values in a native select element.

Select a page as a context for future tool calls.

Sets a breakpoint on specific code (function name, statement, etc.) by searching for it and automatically determining the exact position. Works with both normal and minified fil...

Steps into the next function call. Use this to enter and debug function bodies.

Steps out of the current function, continuing until the function returns. Use this to quickly exit a function.

Steps over to the next statement, treating function calls as a single step. Use this to move through code without entering function bodies.

Stops an event monitor.

Traces calls to a function by its name in the source code. Works for ANY function including module-internal functions (webpack/rollup bundled). Uses

Type text into an input element.

Wait for selector to appear.

Wait until the page network becomes idle.

Set or remove an XHR/Fetch breakpoint by URL substring match.