Skip to main content
Glama
kings0527

WebTrace MCP Server

by kings0527
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Local

WebTrace

AI-driven JSVMP Auto-Reversal Chrome/Edge Extension with MCP Server

Features

  • MCP Server: Expose reverse engineering capabilities via MCP protocol for AI Agents

  • JSVMP Auto-Detection: Automatically identify VM dispatch loops (while-switch/if-else/handler-table)

  • QuickJS WASM Sandbox: Execute and trace JSVMP bytecode in isolated environment

  • Stealth Engine: Three-layer stealth (Extension hiding + Proxy Hook cloaking + Timing alignment)

  • Babel AST Instrumentation: Auto-instrument VM dispatch loops for trace collection

  • Cross-browser: Chrome & Edge (Manifest V3)

Related MCP server: ghidraMCP

Quick Start

Build

npm install
npm run build

Load Extension

  1. Open chrome://extensions/

  2. Enable "Developer mode"

  3. Click "Load unpacked" → select dist/ directory

Connect AI Agent

See docs/SKILL-INTEGRATION.md

Architecture

┌─────────────────────────────────────────────────────┐
│                   AI Agent (MCP Client)              │
│            Qoder / Cursor / Claude Code             │
└────────────────────┬────────────────────────────────┘
                     │ MCP Protocol (WebSocket/Port)
┌────────────────────▼────────────────────────────────┐
│              Service Worker (Background)              │
│  ┌─────────┐  ┌──────────┐  ┌──────────────────┐   │
│  │MCP Server│  │Tab Manager│  │Offscreen Manager │   │
│  └─────────┘  └──────────┘  └────────┬─────────┘   │
└───────────────────────────────────────┼─────────────┘
                                        │
┌───────────────────────────────────────▼─────────────┐
│              Offscreen Document                       │
│  ┌──────────────────┐  ┌─────────────────────────┐  │
│  │QuickJS WASM      │  │Babel AST Engine         │  │
│  │(Sandbox + Trace) │  │(Detect + Instrument)    │  │
│  └──────────────────┘  └─────────────────────────┘  │
└─────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────┐
│              Target Web Page                          │
│  ┌────────────┐  ┌────────────┐  ┌──────────────┐  │
│  │Stealth     │  │VM Tracer   │  │API Hooks     │  │
│  │Bootstrap   │  │(Proxy)     │  │(fetch/XHR)   │  │
│  └────────────┘  └────────────┘  └──────────────┘  │
└─────────────────────────────────────────────────────┘

MCP Tools

Tool

Description

detect_protection

Detect page protection type and level

analyze_jsvmp

Analyze JSVMP code structure

trace_execution

Execute in sandbox with full trace

extract_bytecode

Extract bytecode arrays from page

hook_api

Set up API hooks on page

get_hook_logs

Retrieve hook logs

page_state

Get page state (cookies/storage/scripts)

deobfuscate

Deobfuscate JS code

Integration

Tech Stack

  • TypeScript + Vite

  • Chrome Extension Manifest V3

  • MCP (Model Context Protocol)

  • QuickJS WASM (quickjs-emscripten)

  • Babel AST (@babel/parser + traverse)

License

MIT

This server cannot be installed

F
license - not found
-
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/kings0527/web-trace'

If you have feedback or need assistance with the MCP directory API, please join our Discord server