REA (Reverse Engineer Anything)

What it is

An MCP server and command-line toolkit that lets an AI coding agent investigate software without its source code, from observed app behavior down to native binaries. Setup registers it with agents such as Claude Code, Codex, Cursor, and Gemini CLI, and results include the evidence and limitations behind each conclusion.

What it helps with

- Inspecting native binaries through an existing Hopper, Ghidra, or IDA install
- Analyzing JavaScript and Electron apps, .NET assemblies, and websites
- Reading Android APKs, APK signatures, resources, and Flutter apps, plus devices over adb
- Working with firmware, packet captures, and recorded crashes

Who it's for

Security researchers, reverse engineers, and developers studying software they own or are authorized to examine.

Worth knowing

REA is a new, young project: the repo was created in April 2026 and releases ship often, so expect changes between versions. It installs through the rea-agents npm package, and some features depend on platform-specific helpers, mostly on Linux. Authorized use only: analyze only software you own or have permission to examine, and use licensed copies of any commercial tools it drives.

Do I need a disassembler installed?
Not for static JavaScript analysis, but native binary work needs Hopper, Ghidra, or IDA.

Should it replace Ghidra or Cutter?
In our view no, since REA drives engines like Ghidra for an agent, while Ghidra and Cutter remain the tools for hands-on analysis.