From 0ecf3a4cbfdc71242f6ef4635c91a8ce4e5ca049 Mon Sep 17 00:00:00 2001 From: morluto <76467478+morluto@users.noreply.github.com> Date: Sat, 7 Nov 2026 22:14:55 +0800 Subject: [PATCH] docs(mcp): document native function analysis scope (#8389) Co-authored-by: Cursor Agent --- docs/mcp-contracts.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/mcp-contracts.md b/docs/mcp-contracts.md index 780f4b4846..90ab1c0bd7 100644 --- a/docs/mcp-contracts.md +++ b/docs/mcp-contracts.md @@ -2001,6 +2001,7 @@ bundle import/export; it does not include those view and settings tools. | Web investigation | `browser,pcap,session,javascript-runtime` | page, bundle and session inspection, packet captures, JS runtime observation, evidence workflow | | Android application analysis | `android,adb,apktool,session` | class and method inspection, device bridge, resource decoding; add `frida` for dynamic instrumentation, `jeb` for JEB projects, `flutter` for Flutter builds | | Native macOS or iOS binary | `native,artifact,session` | Mach-O, signature and property-list inspection plus container extraction | +| Native analysis of a known function | `session,enhanced,application` | open a binary, analyze a known function, page retained pseudocode, and export Evidence; add `direct` for focused procedure search or assembly | | Managed .NET assembly | `managed,session` | managed member comparison and reconstruction against the evidence workflow | | Electron or browser-hosted JavaScript application | `browser,electron,application,javascript-runtime,session` | runtime targets, live page inspection, bundle and capture tools, feature tracing, JavaScript semantics and reconstruction obligations | | Evidence bookkeeping only | `session` | open and close binaries, bundles, comparisons, unknown tracking |