Dejared MCP server
io.github.hqkh4nh/dejared·v1.2.1·8 starsJava decompiler MCP server. Explore, search, and decompile JAR, WAR, EAR, and AAR bytecode.
8 stars221 downloads/wk
Reviews
Write oneNobody has reviewed Dejared yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Dejared tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it
- Code scan7 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 72 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Dejared compares
Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 80% of 3,470 Web search servers
- GitHub stars
- 8
- more than 84% of 1,786 Web search servers
- Downloads a week
- 221
- more than 72% of 827 Web search servers with a package
Install Dejared in Claude Code, Cursor or VS Code
Runs npx -y dejared-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add dejared -- npx -y dejared-mcp
What the publisher says
From the Dejared repository's README, as published. We do not edit it. Read it on GitHub
dejared-mcp: Java decompiler MCP server
dejared-mcp is a Java decompiler and JAR analyzer that speaks the Model Context Protocol. It lets an AI coding agent (Claude Code, Codex, Cursor, VS Code) open a .jar, .war, .ear, or .aar, list what is inside, search its bytecode, and decompile any class back to Java source using CFR, Vineflower, or Procyon.
Table of Contents
- Overview
- Prerequisites
- Quick Start
- Install as a plugin (recommended)
- Install as an MCP server
- Features
- Decompiler Engines
- Custom Java Path
- Server Configuration
- How It Works
- FAQ and Troubleshooting
- Contributing
Overview
dejared-mcp is a Java-based MCP server distributed as an npm package. It provides nine tools organized into three categories: discovery, hunting, and deep analysis. AI assistants use these tools to navigate JAR file structures, search for classes and string literals in bytecode, and decompile .class files back to readable Java source code.
Reach for it whenever a dependency ships without sources: reading what a third-party library actually does, recovering an application.yml or MANIFEST.MF embedded in a JAR, following a stack trace into a library you have no source for, or inspecting an obfuscated plugin or mod. It replaces hand-running jar tf, unzip, javap, or a desktop decompiler.
Any ZIP-based Java archive works: .jar, .war, .ear, .aar, and Spring Boot fat-jars.
The npm package acts as a thin wrapper that downloads and caches the server JAR on first run, then spawns it via java -jar using stdio transport.
Prerequisites
- Node.js 20 or later
- Java 17 or later (JRE is sufficient)
Quick Start
The best install is the plugin. One command pair gives your agent both halves: the nine MCP tools, and the jar-analysis skill that tells it when to reach for them instead of shelling out to jar tf, unzip, or javap.
claude plugin marketplace add hqkh4nh/dejared-mcp
claude plugin install dejared@dejared-mcp-marketplaceCodex carries the same bundle. See Install as a plugin. Every other client takes the plain MCP config.
Install as a plugin (recommended)
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Dejared: common questions
- Is Dejared MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Dejared safety report
- How do I install Dejared?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Dejared need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Dejared maintained?
- The last commit was 75 days ago (2026-08-21). The latest release is v1.2.1.
- What can I use instead of Dejared?
- Servers from other publishers that do the same job: AIHOT MCP server, Claude Code Explorer MCP server and Claude Code Explorer MCP server.
- How does Dejared compare with other Web search MCP servers?
- safety score 88/100 (higher than 80% of 3,470 Web search servers); github stars 8 (more than 84% of 1,786 Web search servers); downloads a week 221 (more than 72% of 827 Web search servers with a package). Full comparison.
Alternatives to Dejared
Same job from other publishers: the closest match first, then the best rated.
- AIHOTChinese AI news: search topics, explore hot events, and read daily, weekly and monthly briefs.not reviewedEstablishedB
- Claude Code Explorer MCPExplore the Claude Code CLI source — browse tools, commands, search code, and more.not reviewedEstablishedA
- Claude Code Explorer MCPExplore the Claude Code CLI source — browse tools, commands, search code, and more.not reviewedEstablishedA