REA (Reverse Engineer Anything) morluto/rea

MCP server and CLI that lets AI coding agents inspect binaries, JavaScript/Electron apps, .NET assemblies and websites, with evidence.

Creator kit + Compare GitHub ↗ Install guide (official) ↗

REA (Reverse Engineer Anything) at a glance

Checked 15 Oct 2026

REA (rea-agents 6.5.0, Oct 2026) connects agents such as Claude Code, Codex or Cursor to local analysis tools over MCP. Native-binary work drives an existing Ghidra, IDA or Hopper install; JS/Electron and .NET inspection work without one. MIT. Needs Node.js 22.19+. Its README pitches rebuilding features seen in other apps; its disclaimer limits use to lawful, authorised analysis, and you must respect target licences and terms.

Cite this pageRepoQuarry. “REA (Reverse Engineer Anything).” Checked 15 Oct 2026. https://repoquarry.dev/projects/rea

How much of IDA Pro does it replace?

1 of 4 jobs. Agent layer over Ghidra, IDA or Hopper; it does not disassemble or decompile native code on its own.

Disassembly Not covered

Decompilation Not covered

Debugging Not covered

AI-assisted analysis Partial replacement

For disassembly, decompilation, debugging, see other IDA Pro alternatives. You may also need to build an interface, an API server and hosting yourself.

Facts, with sources

Every answer links to where we found it. We read the documentation; we did not install it.

Report a correction

QuestionAnswerSourceChecked

Runs on my machine? Yes, analysis runs locally; your agent's model provider sees the tool results REA analyzes targets locally. Your agent receives the tool results, and its model provider has its own data policy. github.com · rea#faq ↗ 1d ago

Code licence MIT (third-party material keeps its own licences) REA-authored code is licensed under MIT. Third-party material retains its own licenses and copyright notices github.com · LICENSE ↗ 1d ago

Model weights licence No model weights github.com · rea#readme ↗ 1d ago

Commercial use Yes, MIT; commercial providers (IDA, Hopper, JEB) need their own licences, and targets' terms still apply REA is built for lawful analysis: security research, malware and incident analysis, vulnerability research and coordinated disclosure, CTFs and education, interoperability, software preservation github.com · DISCLAIMER.md ↗ 1d ago

Paid services needed? REA is free; it needs an MCP-capable agent (model costs depend on it); IDA, Hopper and JEB are optional paid providers, Ghidra is free Deep native analysis uses one of them. Static JavaScript and .NET inspection work without a native analysis engine. github.com · rea#faq ↗ 1d ago

Hardware Not documented beyond Node.js 22.19+ and the chosen provider's requirements Know the answer? —

Operating systems macOS and Linux; Windows documented but Windows Ghidra support is experimental Ghidra and IDA have their own provider-specific host requirements; Windows Ghidra uses the experimental P0 boundary. github.com · installation.md ↗ 1d ago

Setup effort Easy; npx rea-agents setup registers the MCP server with your agent; native analysis needs a provider installed Choose your agents, review the proposed changes, and approve them. Setup adds REA's MCP server and matching workflow instructions github.com · rea#quick-start ↗ 1d ago

What it costs to run

Software$0

Required paid servicesnone

Optional paid servicesIDA Pro, Hopper, JEB

Your hardwareNot documented beyond Node.js 22.19+ and the chosen provider's requirements

IDA Pro: IDA Free available; IDA Home from $365/year; IDA Pro Essential from €1,099/year, Expert from €4,999/year, Ultimate from €8,599/year (annual billing only) (source, checked 15 Oct 2026). Running it yourself costs your hardware, electricity and setup time.

Project activity

279kstars

70kforks

223contributors

Last code changetoday

Latest releaserea-agents-6.5.0 · 2d ago

ArchivedNo

From GitHub, today. Stars show popularity, not quality.

Using an AI agent?

The same record, as JSON or through MCP.

get_project("rea")
GET /api/v1/projects/rea.json

API and MCP docs →