Overview
- A public release of REA (Reverse Engineer Anything) was published on DEV describing an MCP-based toolset that links local decompilers to MCP-compatible AI agents so those agents can inspect native binaries, JavaScript/Electron apps, and .NET assemblies from the terminal.
- The project is distributed via a GitHub repo, an official website, an npm package named rea-agents, and a Discord community and installs with simple commands such as npm install -g rea-agents and npx rea-agents setup to register the toolset with local MCP clients.
- REA runs entirely on the user’s machine and emphasizes privacy by keeping target binaries local while producing evidence-based outputs that cite exact binary offsets and code blocks so users can verify an agent’s findings in their decompiler.
- For native binaries REA relies on user-installed decompiler engines such as Ghidra, Hopper, or IDA Pro to perform the heavy decompilation work, and the published article’s decompilation example is illustrative rather than an independent security audit.
- The tool is aimed at security researchers and engineers who need faster, verifiable reverse-engineering in their workflow, and it could speed investigations and debugging while shifting trust to the quality of installed decompilers and the local setup.