Tools

AI reverse-engineering tools compared

The tools that let a coding agent such as Claude Code, Codex or Cursor do reverse engineering. Most wrap one disassembler or debugger as an MCP server. REA puts many of them behind one server; leanrea skips MCP and steers the agent to ordinary command-line tools.

Checked against each project's own README and docs in October 2026. Made with REA is a community site and is not affiliated with any of these projects.

REA (Reverse Engineer Anything)
One MCP server that connects a coding agent to many reverse-engineering back ends, with workflow guidance.
Targets
Native binaries, Android, Apple bundles, JS/Electron, websites, .NET, firmware, WASM, packet captures
Analysis
Static and dynamic (Frida; GDB and Rizin debugging on Linux; browser and process capture)
Needs
Self-contained for many formats; native pseudocode uses your Hopper, Ghidra or IDA
Cost
MIT; paid engines optional
Best for: One install that covers many target types, with evidence and limits in every result
Watch out: Heavy: many external tools per target, and several runtime features are Linux-only
npx rea-agents setup
rea.tools GitHub Builds with REA
leanrea
A single small skill file that tells the agent which command-line tool to use for each target. No MCP server.
Targets
Same range as REA, through standard CLI tools
Analysis
Static and dynamic, through the shell
Needs
None of its own: uses whatever you have installed (otool, jadx, Ghidra and so on)
Cost
MIT
Best for: Low-overhead recon when the agent already has a shell and the usual tools
Watch out: No structured evidence or sessions; results depend on installed tools and the model
npx skills add aicodeking/leanrea
GitHub Builds with leanrea
GhidraMCP
A Ghidra plugin plus an MCP bridge for decompiling, renaming and listing functions, imports and exports.
Targets
Native binaries
Analysis
Static
Needs
Ghidra (free), with the GUI running
Cost
Apache-2.0
Best for: The simplest free, widely used Ghidra bridge
Watch out: Small tool set; needs the Ghidra GUI open with the plugin enabled
GitHub Builds with Ghidra MCP
ghidra-mcp
A large Ghidra MCP with GUI and headless modes and Docker support.
Targets
Native binaries
Analysis
Static
Needs
Ghidra 12.1.4 and Java 21
Cost
Apache-2.0
Best for: Deep or automated Ghidra work, including headless runs
Watch out: Tied to an exact Ghidra version; the large tool surface costs context
GitHub Builds with Ghidra MCP
ReVa
A Ghidra extension whose small, LLM-friendly tools are designed for long sessions.
Targets
Native binaries and firmware images
Analysis
Static
Needs
Ghidra (GUI or headless)
Cost
Apache-2.0
Best for: Long sessions on large binaries or whole firmware images
Watch out: Ghidra only; headless projects are not kept between sessions
GitHub Builds with Ghidra MCP
IDA Pro MCP
An IDA Pro MCP, now recommended in headless mode, with optional debugger tools.
Targets
Native binaries
Analysis
Static, plus an optional debugger extension
Needs
IDA Pro 8.3 or later (IDA Free is not supported)
Cost
MIT; IDA Pro is commercial
Best for: Teams that already own IDA Pro and want its decompiler under the agent
Watch out: Needs a commercial IDA Pro licence
GitHub Builds with IDA Pro MCP
Binary Ninja MCP
A Binary Ninja plugin plus an MCP bridge, installable from the Plugin Manager.
Targets
Native binaries
Analysis
Static
Needs
Binary Ninja (GUI)
Cost
GPL-3.0; Binary Ninja is paid
Best for: People who already work in Binary Ninja
Watch out: Needs a Binary Ninja licence; development has slowed
GitHub Builds with Binary Ninja MCP
Binary Ninja Headless MCP
A headless-only Binary Ninja MCP with patching, undo and scripting.
Targets
Native binaries
Analysis
Static, plus patching
Needs
Binary Ninja with a headless-capable licence
Cost
GPL-2.0; Binary Ninja is paid
Best for: Agents running in containers or CI
Watch out: Needs the more expensive headless licence
GitHub Builds with Binary Ninja MCP
radare2 MCP (r2mcp)
A radare2 MCP server built on the native r2 APIs, with read-only and sandbox modes.
Targets
Native binaries
Analysis
Static; can attach to running r2 or iaito sessions
Needs
radare2 (free)
Cost
MIT
Best for: A free, lightweight, scriptable option for native code
Watch out: Lower-level output than the Ghidra or IDA decompilers
r2pm -Uci r2mcp
GitHub Builds with radare2 MCP
JADX AI MCP
A JADX GUI plugin plus an MCP server that exposes decompiled Android classes and methods.
Targets
Android APK and DEX
Analysis
Static
Needs
JADX GUI (free) with the plugin
Cost
Apache-2.0
Best for: Static review of Android apps
Watch out: Early-stage by its own description; needs jadx-gui running
Plugin Server Builds with JADX AI MCP
x64dbg MCP Server
A native x64dbg plugin that exposes the debugger to agents over MCP.
Targets
Windows x86 and x64 processes
Analysis
Dynamic (debugger)
Needs
x64dbg (free)
Cost
MIT
Best for: Live debugging of Windows executables
Watch out: Windows only, and it debugs rather than decompiles
GitHub Builds with x64dbg MCP

REA (Reverse Engineer Anything)

leanrea

GhidraMCP

ghidra-mcp

ReVa

IDA Pro MCP

Binary Ninja MCP

Binary Ninja Headless MCP

radare2 MCP (r2mcp)

JADX AI MCP

x64dbg MCP Server