Skip to content

Reference Overview

There are 24 built-in domains and 337 domain tools in the current build.

  1. Start with browser / network / workflow to understand the day-to-day path.
  2. Continue with debugger / hooks / streaming for runtime analysis.
  3. Finish with core / sourcemap / transform / wasm / process / platform for deeper reverse-engineering coverage.

Domain matrix

DomainTitleTool countProfilesTypical use
antidebugAntiDebug6fullAnti-anti-debug domain focused on detecting and bypassing browser-side anti-debugging protections.
browserBrowser63workflow, fullPrimary browser control and DOM interaction domain; the usual entry point for most workflows.
coordinationCoordination7workflow, fullCoordination domain for session insights and MCP Task Handoff, bridging the planning and execution boundaries of LLMs.
coreCore14workflow, fullCore static and semi-static analysis domain for script collection, deobfuscation, semantic inspection, webpack analysis, source map recovery, and crypto detection.
debuggerDebugger37workflow, fullCDP-based debugging domain covering breakpoints, stepping, call stacks, watches, and debugger sessions.
encodingEncoding5workflow, fullBinary format detection, encoding conversion, entropy analysis, and raw protobuf decoding.
evidenceEvidence6workflow, fullEvidence-graph domain that models provenance between URLs, scripts, functions, hooks, and captured artifacts.
graphqlGraphQL5workflow, fullGraphQL discovery, extraction, replay, and introspection tooling.
hooksHooks7workflow, fullAI hook generation, injection, export, and built-in/custom preset management.
instrumentationInstrumentation10workflow, fullUnified instrumentation-session domain that groups hooks, intercepts, traces, and artifacts into a queryable session.
macroMacro2fullSub-agent macro orchestration domain that chains multiple tool calls into reusable macro workflows.
maintenanceMaintenance12search, workflow, fullOperations and maintenance domain covering cache hygiene, token budget, environment diagnostics, artifact cleanup, and extension management.
memoryMemory41workflow, fullMemory analysis domain for native scans, pointer-chain discovery, structure inference, and breakpoint-based observation.
networkNetwork29workflow, fullRequest capture, response extraction, HAR export, safe replay, and performance tracing.
platformPlatform15fullPlatform and package analysis domain covering miniapps, ASAR archives, and Electron apps.
processProcess26fullProcess, module, memory diagnostics, and controlled injection domain for host-level inspection, troubleshooting, and Windows process experimentation workflows.
sandboxSandbox1fullWASM-isolated QuickJS sandbox domain for secure custom script execution with MCP tool access.
shared-state-boardShared State Board10workflow, fullCross-agent state synchronization domain providing a global shared state board for multi-agent collaboration.
sourcemapSourceMap5workflow, fullSource map discovery, fetching, parsing, and source tree reconstruction.
streamingStreaming6workflow, fullWebSocket and SSE monitoring domain.
traceTrace7workflow, fullTime-travel debugging domain that records CDP events into SQLite for SQL-based querying and heap snapshot comparison.
transformTransform6workflow, fullAST/string transform domain plus crypto extraction, harnessing, and comparison tooling.
wasmWASM8fullWebAssembly dump, disassembly, decompilation, optimization, and offline execution domain.
workflowWorkflow9workflow, fullComposite workflow and script-library domain; the main built-in orchestration layer.

Key high-level entry points

  • web_api_capture_session — capture APIs, extract auth, and export HAR/report
  • register_account_flow — registration plus email verification flow
  • api_probe_batch — batch-probe OpenAPI / Swagger / API paths
  • js_bundle_search — fetch a bundle remotely and search it with multiple patterns
  • doctor_environment — diagnose dependencies and local bridge health
  • cleanup_artifacts — clean retained artifacts by age or size

Released under AGPL-3.0-only