REA

MIT MCP server for agent-driven reverse engineering — binaries, Electron apps, .NET, websites

AI Agents / MCP · OSS/MIT · 326k

Reviewed 2026-10-08 · last push 2026-10-19 · repo checked 2026-10-19

What's Good

MIT (morluto/rea), npm `rea-agents` 5.0.0 (2026-10-07). `npx rea-agents setup` registers the MCP server and matching workflow instructions for Claude Code, Codex, Cursor, Gemini CLI and others, with backups of existing config. Same workflows as a CLI (`rea analyze-javascript-application <dir> --json`). Static JavaScript and .NET inspection need no extra engine; native analysis drives an existing Hopper, Ghidra, or IDA install. Analysis runs locally. ★~16.8k.

The Catch

Native depth is only as good as the engine behind it: Hopper is commercial (demo mode otherwise), IDA is commercial, Ghidra is free but heavy, and Windows Ghidra support is marked experimental. Needs Node.js 22.19+; APK and firmware paths want JADX/JDK or Binwalk/Unblob on Linux or macOS. The pitch is “see a feature you like, build a version” — many app licenses forbid reverse engineering, and the project itself says you are responsible for authorization and the law. Releases move fast; keep it updated.

Verdict

MIT reverse-engineering MCP when your agent must understand software you have no source for — bring Ghidra or a paid engine for native work, and check the target’s license first.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/rea.svg)](https://stackgems.com/gems/rea)

HTML

<a href="https://stackgems.com/gems/rea"><img src="https://stackgems.com/badge/rea.svg" alt="REA reviewed on Stack Gems" height="20"></a>

AI Agents →

Related