MCP/REA Reverse Engineering Agent
REA Reverse Engineering Agent logo

REA Reverse Engineering Agent

Verified Golden (1000+ GitHub stars)

Reverse engineer applications, JavaScript/Electron packages, .NET assemblies, websites, and binaries with local evidence and disassembler tool adapters.

developer-tools•Developer Tooling & Discovery
GitHub381.3k
License:MIT
VERIFIED
Bymorluto@morluto

About this Server

REA (Reverse Engineering Agent) connects AI coding assistants directly to analysis engines for inspecting desktop applications, native binaries, JavaScript/Electron bundles, .NET assemblies, websites, and mobile artifacts. It performs local inspections, tracing behavior, exports, imports, and decompiled pseudo-code to provide evidence-backed explanations and architecture reconstructions.

Real-time Interaction

Direct low-latency RPC protocol communication with structured JSON schemas.

Scoped Sandboxing

Restricted capability bounds to prevent accidental modifications or leakage.

Security & Best Practices

Local-Only Execution: All static parsing and disassembler integration runs strictly on the local machine.
Bounded Diagnostic Limits: Rejects responses exceeding 4 MiB to protect client memory buffers from terminal bloat.
Process Ownership Verification: Verifies process ownership checks before interacting with background analysis tools.

When to Use (and When Not To)

Best For
  • •Analyzing unknown JavaScript/Electron app architectures, routes, and IPC messages
  • •Auditing Go/Rust binary build provenance and embedded cargo metadata
  • •Investigating native library dependencies, crash reports, and interface contracts
Not For / Limitations
  • •Kubernetes container orchestration and Helm chart upgrades (use Kubernetes MCP instead)
  • •API collection management and request testing (use Postman MCP instead)
  • •Multi-agent live session messaging and work handoffs (use Concord MCP instead)

Install & Setup

terminal command
$claude mcp add rea -- npx -y rea-agents mcp

Exposed Tools & Endpoints

5 tools

Functions your AI agent can invoke via this Model Context Protocol server

analyze_javascript_application

Inspects extracted JavaScript or Electron ASAR bundles to map modules, imports, routes, and IPC boundaries.

inspect_binary_metadata

Decodes ELF/PE/Mach-O headers, embedded Go/Rust module versions, PE certificates, and import hashes.

inspect_assembly_structure

Examines .NET assemblies, CIL instructions, declared dependencies, and type hierarchies without execution.

query_disassembler

Queries connected disassembler providers (Ghidra, Hopper, IDA) for functions, pseudocode, strings, and cross-references.

analyze_web_target

Observes website DOM hierarchy, client scripts, network traffic, and visual screenshots.