Dejared MCP server

by HuynhKhanh1402·io.github.HuynhKhanh1402/dejared·v1.0.0·6 stars

No reviews yet

Explore, analyze, and decompile Java JAR files via MCP

A88/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A88/100

full report

Adoption

New

6 stars

Reviews

Write one

Nobody has reviewed Dejared yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Dejared tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings

Code scan6 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 37 days ago12/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Dejared compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 88/100; higher than 75% of 48,255 servers
GitHub stars: 6; more than 85% of 28,688 servers

Install Dejared in Claude Code, Cursor or VS Code

Runs npx -y dejared-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add dejared -- npx -y dejared-mcp

Add to Cursor

What the publisher says

From the Dejared repository's README, as published. We do not edit it. Read it on GitHub

dejared-mcp: Java decompiler MCP server

dejared-mcp is a Java decompiler and JAR analyzer that speaks the Model Context Protocol. It lets an AI coding agent (Claude Code, Codex, Cursor, VS Code) open a .jar, .war, .ear, or .aar, list what is inside, search its bytecode, and decompile any class back to Java source using CFR, Vineflower, or Procyon.

Overview
Prerequisites
Quick Start
Install as a plugin (recommended)
Install as an MCP server
Features
Decompiler Engines
Custom Java Path
Server Configuration
How It Works
FAQ and Troubleshooting
Contributing

Overview

dejared-mcp is a Java-based MCP server distributed as an npm package. It provides nine tools organized into three categories: discovery, hunting, and deep analysis. AI assistants use these tools to navigate JAR file structures, search for classes and string literals in bytecode, and decompile .class files back to readable Java source code.

Reach for it whenever a dependency ships without sources: reading what a third-party library actually does, recovering an application.yml or MANIFEST.MF embedded in a JAR, following a stack trace into a library you have no source for, or inspecting an obfuscated plugin or mod. It replaces hand-running jar tf, unzip, javap, or a desktop decompiler.

Any ZIP-based Java archive works: .jar, .war, .ear, .aar, and Spring Boot fat-jars.

The npm package acts as a thin wrapper that downloads and caches the server JAR on first run, then spawns it via java -jar using stdio transport.

Prerequisites

Node.js 20 or later
Java 17 or later (JRE is sufficient)

Quick Start

The best install is the plugin. One command pair gives your agent both halves: the nine MCP tools, and the jar-analysis skill that tells it when to reach for them instead of shelling out to jar tf, unzip, or javap.

claude plugin marketplace add hqkh4nh/dejared-mcp
claude plugin install dejared@dejared-mcp-marketplace

Codex carries the same bundle. See Install as a plugin. Every other client takes the plain MCP config.

Install as a plugin (recommended)

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Dejared: common questions

Is Dejared MCP server safe?: Yes, by our scan: it is graded A (88/100). Read the Dejared safety report
How do I install Dejared?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Dejared need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Dejared maintained?: The last commit was 75 days ago (2026-08-21). The latest release is v1.0.0.
How does Dejared compare with other MCP servers?: safety score 88/100 (higher than 75% of 48,255 servers); github stars 6 (more than 85% of 28,688 servers). Full comparison.