deobfuscate

This MCP server provides tooling to deobfuscate and navigate minified/bundled JavaScript bundles. It exposes a set of commands that let you unpack bundles, inspect their structure, and retrieve targeted pieces of code without loading the entire file into memory. Key capabilities include deobfuscation, analysis of structure, listing modules, retrieving specific modules, and performing semantic searches across all modules. This is designed to help LLMs understand complex bundles by turning them into a searchable, token-efficient representation rather than a single enormous text blob.

Prerequisites:

• Node.js and npm installed on your system
• Basic familiarity with using npm packages and command line

Install from npm (recommended):

npm install -g deobfuscate-mcp-server

Build from source (optional):

git clone https://github.com/ricardodeazambuja/deobfuscate-mcp-server.git
cd deobfuscate-mcp-server
npm install
npm run build

Pack and install (optional):

npm pack
npm install -g ./deobfuscate-mcp-server-1.0.0.tgz

Note: If you plan to run directly from the repository, ensure dependencies are installed with npm install before starting the server.

Tips:

• The server is designed to work with minified bundles (Webpack/Browserify). Use deobfuscate with skipVendor to focus on application code.
• You can enable mangle and jsx options to balance token usage and readability.
• When testing, start with deobfuscate(code=...) to see a quick summary, then progressively request get_module, search_modules, or get_symbol_source for targeted results.
• Memory usage can be high for very large bundles since unbundled modules are cached in RAM; monitor consumption on constrained environments.
• If configuring through clients, prefer the provided npx or node config and adjust paths as needed. Ensure network access if installing via npm is restricted in your environment.