Skip to content
Agentmart
Submit a tool

hexvero

Electron release diff for security review: what changed in IPC, contextBridge, windows and hosts.

Connector by maximilianfeix · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 8
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/maximilianfeix-hexvero

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Electron release diff for security review: what changed in IPC, contextBridge, windows and hosts.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools
4 read · 7 write · 0 delete · 5 not yet classified
Secrets
None asked for
Install scripts
None found
Runs as
Node.js package

Tools by what they do 16

Read from the source code; the running server may list different tools.

Read 4 · Look things up without changing anything.

  • hexvero_bytes
  • hexvero_compare
  • hexvero_list
  • hexvero_providers

Write 7 · Create, change, send or run things.

  • hexvero_call_graph
  • hexvero_close
  • hexvero_export
  • hexvero_open
  • hexvero_provider_run
  • hexvero_recover
  • hexvero_unknowns

Not yet classified 5 · We could not tell from the name and description.

  • hexvero_analyze
  • hexvero_check
  • hexvero_collection
  • hexvero_sourcemap
  • hexvero_strings

Network hosts it talks to 12

  • console.dev · found in code
  • dev.to · found in code
  • ghidra-sre.org · found in code
  • github.com · found in code
  • glama.ai · found in code
  • json.schemastore.org · found in code
  • lobste.rs · found in code
  • maximilianfeix.github.io · found in code
  • raw.githubusercontent.com · found in code
  • releases.electronjs.org · found in code
  • rizin.re · found in code
  • x-canary.invalid · found in code

Files it touches

  • /dev/fd/1
  • /dev/stdout
  • /etc/group
  • /etc/passwd
  • /Library/Developer/CommandLineTools/usr/bin/nm
  • Your home directory (~)
  • C:\\win\\escape.js
  • C:\\x.js
  • Any path the agent passes to its tools

Tools (16)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • hexvero_analyzeAnalyze target

    Run the built-in analyzer for the target's format (ELF/PE/Mach-O, Go, .NET, WASM, EVM, SQLite, plist, APK, ZIP, Electron ASAR, JavaScript apps, source maps, HAR). Returns a summary, findings with confidence, limitations, a compact overview and the collections available for paging. Large JavaScript apps are read in batches: when `complete` is false, `coverage` says how many files are unread and every list covers the scanned part only; call again with scan to read more.

  • hexvero_bytesRead bytes

    Read a bounded window (max 64 KiB) of the target as hex plus an ASCII gutter.

  • hexvero_call_graphCall graph

    Bounded call-graph neighborhood around a function (callers, callees or both, by depth and node count), or the shortest call path from root to goal. One engine run per target, cached; levels state what was cut.

  • hexvero_checkCheck release policy

    Apply a release policy (inline JSON or file) to two builds, as `hexvero check`: status pass, fail or incomplete, and findings paged by offset. Reads a baseline, never writes one.

  • hexvero_closeClose target

    Release a target and its retained analysis.

  • hexvero_collectionPage a collection

    Page through one named list from the analysis, e.g. symbols, imports, exports, sections, libraries, types, methods, pinvokes, selectors, instructions, tables, columns, requests, endpoints, permissions, components, modules, edges, ipcChannels, findings. Use hexvero_analyze to see which exist.

  • hexvero_compareCompare collections

    Diff one collection between two targets: added, removed, changed (with the fields that differ) and unchanged items, matched by key (auto-detected: name, channel, id, path, url, type+name … or pass key, a+b for composites). States completeness; unknown items are neither added nor removed. Each list pages on its own (list + offset). Without collection: counts per shared collection, to pick one.

  • hexvero_exportExport analysis

    Write the complete analysis as JSON to a file and return its path and size. Use this instead of paging when you need everything.

  • hexvero_listList targets

    List targets opened in this session.

  • hexvero_openOpen target

    Register a local file or directory for analysis. Returns its id, size, hash and detected format. Ids are stable per content.

  • hexvero_provider_runRun provider operation

    Run one engine operation on a target: functions, disassemble, decompile, strings, imports, xrefs (references to an address), callers, callees, callgraph or search (names + strings). Output is bounded and cached.

  • hexvero_providersProviders

    Detect optional external engines (radare2/rizin, Ghidra) and the operations each supports.

  • hexvero_recoverRecover sources

    Write recoverable sources into a new directory: the modules of a webpack/Rspack/browserify/esbuild bundle (one file each plus hexvero-bundle.json with requires/exports), or the original files embedded in a source map (sourcesContent). No engine needed; nothing is executed.

  • hexvero_sourcemapResolve source map position

    Map a generated line/column of a source map target back to its original source, line, column and name.

  • hexvero_stringsStrings

    Printable ASCII (and optional UTF-16LE) strings with offsets and tags (url, path, email, ip, format, secret-ish, base64-ish).

Show 1 more tools
  • hexvero_unknownsUnknowns ledger

    Record a material question the investigation could not answer (with what was already checked), list open or resolved unknowns, or resolve one. Unknowns are exported with the analysis so reports never silently drop them.

Compare and alternatives

    Featured in

    Signals

    Stars
    8
    Forks
    0
    Open issues
    14
    Last commit
    Oct 18, 2026 (10 days ago)
    Last release
    Oct 18, 2026 (10 days ago)

    From GitHub (fetched Oct 24, 2026).

    Details

    Registry name
    io.github.maximilianfeix/hexvero
    Version
    0.11.1
    Auth
    No auth
    Packages
    npm hexvero
    License
    MIT
    Repository
    github.com/maximilianfeix/hexvero
    Website
    maximilianfeix.github.io/hexvero/
    First seen
    Oct 24, 2026
    Last checked
    Oct 24, 2026
    Source
    Official MCP Registrygithub-graphql

    More from maximilianfeix

    Cite this page

    hexvero MCP server. Agent Mart. https://agentmart.dev/connectors/maximilianfeix-hexvero (last updated 2026-10-24)