rea-mcp
Provides Android analysis capabilities through ADB, enabling inspection and reverse engineering of Android-related artifacts.
Enables static reconstruction of JavaScript/Electron applications for reverse engineering and analysis.
Exposes JavaScript application reconstruction and analysis tools for reverse engineering JS/Electron apps.
Provides tools for inspecting .NET managed artifacts and assemblies, including listing managed members.
Enables inspection of Rust binaries to extract embedded build metadata.
Provides tools to inspect SQLite databases and create SQLite snapshots.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@rea-mcpanalyze the Electron app in ./myapp.asar and summarize what it does"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
rea-mcp
MCP server wrapping the rea-agents CLI (REA: Reverse Engineer Anything) using FastMCP.
Every rea CLI command is exposed as an MCP tool. Tool names, descriptions and
JSON Schemas are generated dynamically from rea --llms and
rea <command> --schema, so a rea release upgrade adds tools without any code
change here.
Prerequisites
Python 3.10+
Node.js 22.19+ (or 24.11+ / 26+) — required by the rea CLI
The
reaCLI:npm i -g rea-agents
The server resolves the CLI in this order:
REA_MCP_CLIenvironment variable (path torea/rea-agentsexecutable or the package'sscripts/rea.mjs)rea/rea-agentsonPATHA cached
npxinstall under the npm cache (npm_config_cacheor~/.npm)
Related MCP server: pyghidra-mcp
Install
pip install -e .Run
# stdio (for MCP clients)
rea-mcp
# HTTP
rea-mcp --transport http --host 0.0.0.0 --port 8000Tools
One tool per rea CLI command (145+ in rea 6.5.0), named rea_<command> with
dashes replaced by underscores, e.g.:
rea_analyze— app overviewrea_analyze_javascript_application— statically reconstruct a JS/Electron apprea_inspect_go_binary/rea_inspect_rust_binary— embedded build metadatarea_search/rea_function/rea_decompile/rea_xrefs— native analysisrea_inspect_sqlite_database— SQLite snapshotsrea_inspect_managed_artifact/rea_inspect_managed_members— .NET assembliesrea_inspect_wasm_artifact/rea_inspect_evm_interface— WASM / EVMADB/Android, browser observation, packet captures, Evidence import/export/compare …
Arguments map directly to the CLI: positional arguments keep their names, and
camelCase options become kebab-case flags (e.g. caseSensitive: true →
--case-sensitive, sourcePath: ["a.js"] → repeated --source-path a.js).
All tools return the command's JSON output.
Provider-dependent commands
Native deep-analysis commands (analyze, search, decompile, …) require an
analysis engine: Ghidra (GHIDRA_INSTALL_DIR), Hopper, or IDA
(REA_IDA_MCP_CONFIG). Commands that need no engine (inspect-go-binary,
inspect-sqlite-database, inspect-managed-*, JavaScript reconstruction, …)
work out of the box. Run rea doctor through your MCP client, or check
rea providers, to see what is available.
Skipped commands
setup, uninstall, update, completions and mcp are lifecycle/integration
commands and are intentionally not exposed as tools.
License
MIT
This server cannot be deployed
Maintenance
Related MCP Connectors
Your org's AI agents, tasks, runs, search, and brain files as MCP tools and resources.
MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows
A registry of AI agent tools — MCP servers, APIs, CLIs, SDKs — kept current by automated ingestion.
214 tools for AI agents over one MCP endpoint: image, video, audio, 3D, data, storage, mail, GPUs.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables LLMs to autonomously reverse engineer applications by exposing Ghidra's core functionality through MCP tools. Supports decompiling binaries, analyzing code structure, and automatically renaming methods and data.2Apache 2.0
- AlicenseNot gradedqualityBmaintenanceExposes Ghidra reverse engineering capabilities via MCP, enabling LLMs and agents to analyze binaries, decompile, search, and edit programs headlessly or with GUI integration.454Apache 2.0
- AlicenseNot gradedqualityCmaintenanceEnables LLMs to autonomously reverse engineer applications by exposing Ghidra decompilation, renaming, and analysis tools to MCP clients.Apache 2.0
- AlicenseAqualityCmaintenancePublishes four flat, schema-light tools that let AI agents (including strict providers) search, describe, and invoke any of 139 reverse-engineering capabilities behind a persistent REA server. Enables file fingerprinting, inspection, and evidence-linked investigation of shipped software through plain-English requests, read-only by default.462 npm1MIT