MCP RE Server
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@MCP RE ServerAnalyze binary test.bin with Ghidra"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP RE Server
MCP server for Reverse Engineering & Binary Analysis with backend development tools.
Features
Reverse Engineering Tools
Tool | Description |
| Analyze binary with Ghidra (headless mode) |
| Decompile binary functions with Ghidra |
| Scan files with YARA rules for malware indicators |
| Static analysis - extract strings, checksec, binary info |
| Analyze with Radare2 (functions, imports, strings) |
| Analyze PE (Windows) files |
| Behavioral analysis on suspicious files |
| Analyze pcap files for IOCs |
| Memory dump analysis with Volatility commands |
| Debug binaries with GDB |
Backend Development Tools
Tool | Description |
| Analyze project structure, language, framework |
| Scan for hardcoded secrets, SQL injection, XSS |
| List all API endpoints |
| Check REST best practices |
| Architectural recommendations |
| Generate project with Docker & tests |
| Add Docker configuration |
| Add unit & integration tests |
| File operations |
Related MCP server: NoctisAI
Quick Start
npm install
npm run serverEnvironment Variables
Variable | Description | Default |
| Ghidra installation path |
|
| Custom YARA rules directory |
|
Usage Examples
- "Analyze binary /path/to/binary with Ghidra"
- "Scan malware.exe with YARA rules"
- "Run dynamic analysis on suspicious file"
- "Analyze network capture traffic.pcap"
- "Decompile main function from binary"
- "Check security of my binary (checksec)"
- "Analyze memory dump memory.dmp"
- "Debug binary with GDB at main"
- "Analyze PE file with PE Studio"Claude Desktop Config
{
"mcpServers": {
"mcp-re": {
"command": "npm",
"args": ["run", "server"],
"workdir": "/path/to/mcp"
}
}
}Requirements
RE Tools (optional)
Ghidra - Binary analysis & decompilation
YARA - Malware scanning
Radare2 - Binary analysis
checksec - Binary security checks
strings - String extraction
Volatility - Memory forensics
tshark - Network analysis
GDB - Debugging
Install on Kali/RE Linux:
sudo apt install yara radare2 checksec binutils volatility tshark gdbMaintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Flicense-qualityBmaintenanceEnables AI-assisted reverse engineering by bridging Binary Ninja with Large Language Models through 40+ analysis tools. Provides comprehensive binary analysis capabilities including decompilation, symbol management, type analysis, and documentation generation through natural language interactions.Last updated45
- -license-quality-maintenanceEnables advanced malware development, threat intelligence analysis, and offensive security operations through specialized tools for multi-language payload generation, obfuscation, OSINT reconnaissance, and forensic analysis. Designed for authorized penetration testing, red team exercises, and cybersecurity research with comprehensive educational capabilities.Last updated
- Flicense-qualityDmaintenanceEnables AI-assisted reverse engineering and debugging through x64dbg integration. Provides 40+ tools for breakpoint management, memory operations, register manipulation, code analysis, process control, and advanced debugging features.Last updated20
- Alicense-qualityCmaintenanceA headless Ghidra server that enables AI agents to perform deep reverse-engineering tasks such as disassembly, decompilation, and patching via the Model Context Protocol. It supports extensive automation of analysis workflows in sandboxed environments through a catalog of over 200 specialized tools.Last updated114GPL 2.0
Related MCP Connectors
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Offline methodology engine for authorized penetration testing, CTF, and security research.
AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/RoySamson-stack/backend-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server