
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
react-render-profile-mcp
Advanced tools
MCP server that decodes React DevTools Profiler exports into actionable render summaries for AI agents
An Autonomous Performance SRE & Auto-Remediation Engine for React, exposed as a Model Context Protocol (MCP) server. Built specifically to bridge the performance perception gap for AI coding agents (Claude, Cursor, Copilot).
When an AI agent refactors a Context Provider, changes state architecture, or hooks up a global store, it is completely blind to the runtime performance impact.
An agent can successfully pass unit tests and compile code while introducing catastrophic performance regressions:
key props causing components to unmount and mount on every render cycle (lifecycle anomalies).react-render-profile-mcp gives AI agents a "third eye" to dynamically measure, visualize, and auto-remediate these performance bottlenecks.
Instead of raw JSON dumps, this server organizes performance data into structured, actionable insights across four core engineering pillars:
ts-morph)ア When a bottleneck is found, the agent doesn't need to manually rewrite code. The server can mutate component source code on disk:
useCallback and useMemo with computed dependency arrays.React.memo only if the profiled self-time and spurious render count justify the comparison overhead (ROI > 1.5).Date.now(), Math.random(), or render-phase useRef mutations).Generates parent-child rendering graphs directly into the agent's chat window using the custom resource URI scheme react-profile://commits/{commitId}/cascade?profile_path={profile_path}.
Analyzes React Server Components (RSC) Flight streams to optimize delivery:
Aligns React commits with Chrome Performance timeline events using blink.user_timing markers.
Below is a compact summary of the tools exposed by this server. All tools accept a required profile_path pointing to a React DevTools export .json.
| Tool Name | Parameters | Purpose / Output |
|---|---|---|
get_render_summary | profile_path | Overview of commits, total render time, spurious renders count, and lifecycle anomalies. |
find_spurious_renders | profile_path, min_render_count? | Lists components that rendered with identical props/state. Classifies trigger into UNSTABLE_PARENT_REF or CONTEXT_UPDATE. |
analyze_compiler_efficacy | profile_path, invalid_threshold? | Computes Invalidation Index to identify where React Compiler or React.memo is bypassed. |
diagnose_hydration_and_suspense | profile_path, waterfall_threshold_ms? | Detects server-client hydration mismatches and nested Suspense fetch waterfalls. |
evaluate_external_store_performance | profile_path, max_blocking_task_ms? | Finds unstable useSyncExternalStore selectors and high-priority blocking sync tasks. |
trace_state_cascade_footprint | profile_path, commit_index | Traces virtual owner tree to measure propagation depth and consumer count of updates. |
suggest_memoization | profile_path, min_wasted_ms? | Provides high-ROI React.memo suggestions based on average self-time (> 2ms threshold). |
remediate_component | file_path, component_name, unstable_props, roi_score | Modifies AST on disk to hoist variables, wrap hooks, and apply memoization. |
audit_compiler_rules | file_path, component_name | Statically audits component source code for React Compiler rule violations. |
profile_rsc_stream | stream_payload | Parses RSC Flight logs to audit chunk sizes, waterfalls, and React2Shell exploits. |
correlate_chrome_trace | profile_path, trace_path | Aligns React commits with Chrome trace events to calculate CLS/INP web vitals impacts. |
To get the most out of this server, add the following prompt to your agent's system instructions (e.g., in .cursorrules, Cursor System Prompt, or Claude Custom Instructions):
You are equipped with `react-render-profile-mcp`. Use it systematically whenever:
1. You make structural changes to React components, global state providers, or store selectors.
2. The user reports lag, slow input response, or UI stuttering.
3. You refactor context providers, Zustand selectors, or Redux dispatches.
Debugging Workflow:
- Ask the user to record and export a React DevTools profile (.json).
- Run `get_render_summary` to understand the scale of the problem and look for `lifecycle_anomaly: true` (unstable keys).
- Run `find_spurious_renders` and `analyze_compiler_efficacy` to pinpoint unstable prop references.
- Call the `react-profile://commits/{commitId}/cascade` resource to visualize cascades.
- Use `remediate_component` to automatically apply AST optimizations (hoisting static variables, wrapping hooks) instead of doing it manually.
.json file.Add this to your claude_desktop_config.json:
{
"mcpServers": {
"react-render-profile": {
"command": "npx",
"args": ["-y", "react-render-profile-mcp"]
}
}
}
Add an MCP server of type command:
npx -y react-render-profile-mcpts-morph statement manipulation blocks, avoiding common parser state corruption during multi-pass rewrites.Developed alongside:
MIT
FAQs
MCP server that decodes React DevTools Profiler exports into actionable render summaries for AI agents
The npm package react-render-profile-mcp receives a total of 51 weekly downloads. As such, react-render-profile-mcp popularity was classified as not popular.
We found that react-render-profile-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.