Super Trouper MCP Server

An MCP server for the Frida reverse engineering toolkit. Super Trouper runs an MCP server over STDIO that exposes Frida capabilities as tools for coding agents. It can connect to local, USB, and remote devices; inspect applications and processes; manage process sessions; and load, evaluate, and exchange messages with JavaScript instrumentation scripts. It can also search Frida CodeShare to discover community scripts…

People who work with application security, frida and pentesting and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-09-27 · ★ 32 · #29 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30

MIT · Go servers · how we verify → /methodology

01 · Install Super Trouper

before you install - you'll need

Set CGO_CFLAGS, CGO_LDFLAGS, CGO_ENABLED before connecting.

Claude Code

claude mcp add crissyfield-super-trouper -- npx -y @crissyfield/super-trouper

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "crissyfield-super-trouper": {
      "command": "npx",
      "args": [
        "-y",
        "@crissyfield/super-trouper"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-09-01 - young repo, little track record yet

license MIT - declared in the repository

npm package @crissyfield/super-trouper - published under the repo owner's npm scope (@crissyfield)

registry namespace io.github.crissyfield is GitHub-verified and matches the repo owner

03 · What Super Trouper can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.4.0 · 2026-09-27

Changes · Updated to Frida Core DevKit v17.19.0. · Added memory_read, memory_write, module_list and thread_list MCP tools · Added app_list query scopes: minimal, metadata, and full. · Renamed MCP tools for clearer…

v0.3.0 · 2026-09-18

Changes · Added npm installation support · Added support for searching and using Frida CodeShare snippets · General cleanup and improvements

v0.2.0 · 2026-09-15

Changes · Super Trouper is now released under the MIT license · Added first-party Frida language bridge support for objc, java, and swift · Scripts and evaluations can now use TypeScript

04 · Who maintains Super Trouper

super-trouper is maintained by crissyfield. It's the only MCP server we track from this author; the repo dates to Sep 2026.

05 · Facts

repository: github.com/crissyfield/super-trouper
category: security - ranked #29 of 216 actively-maintained security servers as of 2026-09-30.
release cadence: 4 releases in the last 90 days (latest 2026-09-27)
registry: io.github.crissyfield/super-trouper (active, first published 2026-09-18 · 2 versions)
packages: npm:@crissyfield/super-trouper

06 · Super Trouper FAQ

What is Super Trouper?

Is Super Trouper still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-27 and it shipped 4 releases in the last 90 days. We re-verify nightly.

How do I install Super Trouper?

Run `npx -y @crissyfield/super-trouper`. The README documents 3 environment variables (CGO_CFLAGS, CGO_LDFLAGS, CGO_ENABLED) to set first. Set CGO_CFLAGS, CGO_LDFLAGS, CGO_ENABLED before connecting. You can also paste the ready-made client config above.

Does Super Trouper run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Super Trouper

Alternatives to Super Trouper

Maintained security servers if Super Trouper isn't the fit.

Pairs well with

Servers that cover what Super Trouper doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · CrowdStrike Falcon MCP Server · CTRLRun Operator · Osv Advisory MCP Server · Cybercentry Verification · Clipboard History MCP

More Go MCP servers · Scaleway Functions · Gsearch · WebSearch MCP Server · Hop · Dbtrail · see all