REA (Reverse Engineer Anything) is an open-source, MIT-licensed MCP server and CLI by morluto that lets coding agents reverse engineer software from observed app behavior down to native binaries. You ask your agent to investigate a feature in an app; REA inspects it without source code, explains how it works with evidence and limitations, and can help build a version for your own project.
Setup runs with npx rea-agents setup: you choose your agents, review the proposed changes and approve them, and REA registers its MCP server plus matching workflow instructions (with backups of existing configuration). Setup supports Claude Code, Codex, Cursor, Gemini CLI, Grok Build and other agents. The same tools are also usable from the terminal, and analysis runs locally.
Supported targets include native binaries (pseudocode, assembly, strings, symbols and references through an existing Hopper, Ghidra or IDA installation), JavaScript and Electron apps (modules, imports, source maps, routes and IPC), .NET assemblies (static metadata and CIL), Android APKs (via headless JADX), Android devices (via adb), WASM artifacts, EVM bytecode, firmware (Binwalk/Unblob on Linux), saved network and packet captures, and process behavior on Linux/macOS. Several analyzers depend on caller-supplied external tools, and some are Linux-only.
