
rn-devtools-hub
io.github.rn-devtools-hubPublished by GitHub account rn-devtools-hubv0.22.0Updated Oct 24, 2026
Drive a running React Native or Expo app from inside its JS runtime: see, act, prove.
Overview
Local hub and in-app SDK that lets an AI assistant inspect, drive and assert on a running React Native or Expo app from inside its JS runtime.
- What you can do
- Inspect the app: read project context, the semantic UI tree and elements with their source file and line, and audit accessibility
- Act on the UI: tap, type, submit and scroll by element rather than pixel, plus typed dev actions and native taps or swipes as a fallback
- Prove results: assertions on elements and events, visual snapshot comparison, and deterministic time and network mocking
- Control state and events: read and set app state, mount components, wait on real events instead of sleeping
- Record and replay: save, list and run .hubflow scenarios, propose repairs, and export session timelines
- Native and release work: boot simulators or devices, set permissions, location, appearance and…
- When to use it
- Useful when debugging or testing a React Native or Expo app and you want an assistant to see what React renders, act on elements without coordinates, and verify behaviour with assertions rather than screenshots. Also fits teams that want recorded runtime scenarios replayed in CI, or release checks against the app stores.
- Requirements
- Runs locally as an npm package via npx, needing Node 20+ (Bun optional) and a React Native or Expo project with the SDK wired in through init. Optional features need extra project packages such as react-native-view-shot, AsyncStorage or expo-sqlite, plus adb or Xcode command line tools for device mirroring. Store plugins need their own credentials; the dashboard token can be pinned with RN_DEVTOOLS_TOKEN.
Installation
In SourceWeft
- Open rn-devtools-hub in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
rn-devtools-hub
The agent runtime for React Native. Your agent sees the app the way React sees it, knows which file produced each element, acts without coordinates, and proves that it works. Zero dependencies, no telemetry or usage counting, with a local hub and SDK.
Documentation · Quick start · Integration · Contributing
Use it from an agent
Both plugins install the MCP server plus a skill that teaches the agent to chain its tools: check the project context before debugging anything that looks impossible, prove results with assertions instead of screenshots, wait on events instead of sleeping, and read an element's source instead of grepping the repository.
Claude Code
Codex
Then start the hub at the root of your app, which is what the agent talks to:
Registering the server by hand works too. Claude Code:
Codex, in ~/.codex/config.toml:
Cursor has no marketplace, so it is two files in your own project.
Declare the server in .cursor/mcp.json:
And copy the rule, which is the Cursor equivalent of the skill:
It ships with alwaysApply: false, so Cursor pulls it in when the task
matches instead of paying for it on every request.
For any other agent, the skill on its own comes from the skills.sh registry:
It writes .agents/skills/rn-devtools-hub and links it into whichever
agents it detects, from Gemini CLI and Copilot to Windsurf and Zed. This
installs the skill only, so register the server as above and start the hub
to give the agent something to talk to.
Any client that speaks only stdio uses npx rn-devtools-hub mcp, which
bridges to the hub and starts it on demand.
When a testing or debugging task starts, the agent is instructed to announce
the project and its clickable dashboard URL, then continue automatically.
The hub supplies the actual bound port and current token, including when a
second project uses a fallback port. The link is also available in the
dashboard field of list_devices, get_project_context and session_start.
Screenshots
[Overview panel: KPI tiles, JS thread lag, HTTP statuses and request durations] Overview: request counts, error rate, JS thread lag, connection and device at a glance
[Network panel: request list with colored methods and a foldable JSON response] Network: colored methods, slow requests highlighted, foldable JSON, copy as cURL, secrets redacted before they leave the device
[Mirror panel: live Android screen with tap, swipe and key controls] Mirror: the live device screen over adb, click to tap, drag to swipe, wheel to scroll, plus Back/Home/Recents/Dev menu
[Tools panel: MCP calls per tool, failures, empty answers with their reason, and a timeline of the agent loop against the app's events] Tools: what the agent did and what the app did back, calls per tool split into answered / empty / failed, failures grouped by message, empty answers with the reason the tool gave, and the context each answer bills the agent
Why
The SDK lives inside the JavaScript runtime of your app.
The SDK executes directly alongside your application code. It reads React's tree, invokes handlers, instruments requests and reaches registered stores through APIs installed inside the app. The hub receives these capabilities over its own local connection, without requiring a debugger protocol session. Other tools can access runtime internals through protocols such as CDP; the hub's foundation is an explicit in-app SDK and its event contracts.
That position is what the whole product is built on. Everything else follows from it:
A pure JavaScript SDK in the app (inert in production), a local hub in a single process, a dashboard in the browser. Zero dependencies anywhere, including the hub. The hub has no telemetry. MCP results are delivered to your agent and may be sent to its model provider. Configured store plugins contact their declared vendor endpoints.
Features
The Overview panel opens with the project context: what the project declares, what the app actually runs, and whatever the two disagree on. A stale native build is the most common way to lose an afternoon here, and it is named before you start reading code.
Plus: multi-device with merged sessions, bug report export in Markdown (ready for a GitHub issue), real-time capability badges, and a local MCP server to drive everything from Claude, Cursor or any MCP client.
See Hubflow scenarios to record an exploration, save it as a runtime regression test, replay it in CI and inspect its selected success or failure screenshots in the dashboard.
What an agent gets
Source locations survive React 19, where the location lives in owner stacks pointing into the bundle: the hub symbolicates them against Metro before the agent sees them.
For AI agents, the hub also exposes runtime UI automation over MCP:
get_ui_tree (semantic tree of the visible components, read from the React
runtime, including native views without accessibility like maps), query_ui
(find elements by role and accessible name, testID, placeholder, text or
label, scoped with within, with measured rects), ui_act (tap, type exact
text, submit, scroll, all by element, never by pixels, and it reads the
field back to say whether the text landed), typed dev actions
(list_actions/run_action: navigate, seed, login without touching the
UI), and a correlated event flow (wait_for_event, get_events_since) that
replaces sleeps with real signals like screen.ready. Works in Expo Go,
development builds and bare React Native, and in CI without any simulator:
enable it with devtools.attachUiAutomation().
The hub covers the native layer too, as a superset of what idb/simctl
scripting gives an agent: session_start boots a dev build on the right
Metro server with zero dialogs (permissions pre-granted, dev-menu
onboarding skipped), plus set_permission, launch_app, open_url,
screenshot_native, set_location, send_push, set_appearance,
set_animations, set_overlay (the expo-dev-menu bubble covers native
controls no UI tree can show) and the last-resort tap_native and
swipe_native, on iOS simulators and Android devices, with every capability
probed and degrading cleanly.
Everything above stops at the machine. The half of a release that does not is behind a plugin: App Store Connect and Google Play ship with the hub and stay inert until you give them credentials. They read a release and they drive one, so the agent that decides to widen a rollout is the agent that already has the crash evidence for it. Installing the hub's plugin installs the release skill with it, so there is nothing else to add.
A configured plugin prints the hosts it will contact at startup, an
unconfigured one exposes no tool at all rather than costing an agent context
it cannot use, and RN_DEVTOOLS_PLUGIN_WRITES=off removes every tool that
could change anything. See docs/plugins.md.
Quick start
Prerequisites: Node 20+. Bun is used when present, and is not required. Optional capabilities (adb mirror, iOS simulator, Wi-Fi) have their own prerequisites: see the integration guide.
init inspects your project and generates only the code it can actually
run: axios interception if you use axios, the Storage panel if you have
AsyncStorage, device info if you have expo-device, and so on. It never
overwrites an existing glue file (use --force), and --dry-run shows
what it would change.
That's it: logs, crashes and performance already flow in. Every additional integration (network, cache, storage, SQLite, mirror...) is a recipe of a few lines: see the integration guide.
Integration guide
The SDK is agnostic: it exposes generic primitives that you wire to YOUR libraries. All the recipes are in docs/integration.md, notably:
devtools.attachAxios(instance, "api"): any axios instancedevtools.wrapFetch(fetch, "uploads"): any fetch-based clientdevtools.emit(type, payload): feed any paneldevtools.onCommand(name, handler): respond to the dashboard (e.g. SQLite)devtools.registerAction({name, label, danger, requiresNative}, handler)devtools.attachUiAutomation(): UI perception and actions for AI agentsdevtools.markScreenReady("Login"): "screen ready" signal agents wait on- The complete events and commands protocol: docs/protocol.md. It is the contract: any tool (or any LLM) can integrate a panel by implementing it.
Host project dependencies
The SDK imposes NOTHING. Depending on the features you want, add to YOUR project:
Security
- The SDK is inert outside
__DEV__(double guard: yours and the SDK's) - The dashboard requires a token (printed at startup,
RN_DEVTOOLS_TOKENto pin it) - Sensitive headers (Authorization, cookies, x-api-key) are redacted before leaving the device
- The SQLite console only accepts SELECT and PRAGMA
- The MCP server only listens on localhost, with Origin verification
- Design panel assets are confined to the project root, with whitelisted extensions
- Plugins are the only outbound path, they are inert without credentials, each one declares the hosts it contacts, and no credential is ever returned by a tool or written to a log
- Every plugin tool that changes something is declared as such, is
annotated so MCP clients confirm it, and can be removed entirely with
RN_DEVTOOLS_PLUGIN_WRITES=off RN_DEVTOOLS_SCREENSHOTS=off(or a number) removes or budgets pixel captures, for teams who do not want an agent verifying with screenshots
Contributing
Contributions are welcome. The full guide is in CONTRIBUTING.md. In short:
- Commits follow Conventional Commits
(
feat:,fix:,docs:...): the changelog and versions derive from them automatically (release-it), and commitlint checks them at commit time - The pre-commit hooks run typecheck + tests
- Release:
npm run release(maintainers)
For AI agents: read AGENTS.md and llms.txt.
License
Source: README.md at commit ec87431
Tools
0Version history
1- v0.22.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts