REA MCP Server

Reverse engineer anything from your terminal or agent with one CLI and MCP server. It runs locally over stdio via the published package.

People connecting coding agent tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-14 · ★ 372 · #19 OF 194 MAINTAINED CODING AGENT · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install REA

before you install - you'll need

Set HOPPER_LAUNCHER_PATH, GHIDRA_INSTALL_DIR, REA_EVIDENCE_ROOTS_JSON, REA_INVESTIGATION_INPUT_ROOTS_JSON, REA_REFERENCE_ROOTS_JSON, REA_ANALYSIS_SNAPSHOT_ROOTS_JSON, REA_BROWSER_OBSERVE_ENABLED before connecting. JAVA_HOME is optional or environment-specific per the README.

Claude Code

claude mcp add morluto-rea -- npx -y rea-agents

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "morluto-rea": {
      "command": "npx",
      "args": [
        "-y",
        "rea-agents"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package rea-agents - unscoped; check the name against the project README before installing

registry namespace io.github.morluto is GitHub-verified and matches the repo owner

03 · What REA can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

rea-agents-3.1.0 · 2026-08-09

3.1.0 (2026-08-09) · add autonomous Electron runtime analysis · guard Release Please PR branch parsing · guard release PR branch parsing · harden evidence lifecycle and MCP contracts · harden structured configuration…

rea-agents-3.0.0 · 2026-08-02

3.0.0 (2026-08-01) · export_evidence_bundle now requires a filesystem path and no longer returns an inline bundle. · make evidence bundles canonical MCP resources · address MCP resource review feedback · align…

rea-agents-2.7.0 · 2026-07-28

2.7.0 (2026-07-28) · add JVM and Python bytecode providers · add JVM and Python bytecode providers (4e0127d), closes #367 · add portable conformance export package format · add portable conformance export package…

04 · Who maintains REA

REA is maintained by morluto. We track 5 MCP servers from morluto - 5 actively maintained, 495 combined GitHub stars, oldest repo from Apr 2026. Full record: all servers from morluto.

05 · Facts

repository: github.com/morluto/rea
website: https://github.com/morluto/rea
category: coding agent - ranked #19 of 194 actively-maintained coding agent servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-08-09)
registry: io.github.morluto/rea (active, first published 2026-08-09)
packages: npm:rea-agents

06 · REA FAQ

What is REA?

Reverse engineer anything from your terminal or agent with one CLI and MCP server. It runs locally over stdio via the published package.

Is REA still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-14 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install REA?

Run `npx -y rea-agents`. The README documents 8 environment variables (HOPPER_LAUNCHER_PATH, GHIDRA_INSTALL_DIR, JAVA_HOME…) to set first. Set HOPPER_LAUNCHER_PATH, GHIDRA_INSTALL_DIR, REA_EVIDENCE_ROOTS_JSON, REA_INVESTIGATION_INPUT_ROOTS_JSON, REA_REFERENCE_ROOTS_JSON, REA_ANALYSIS_SNAPSHOT_ROOTS_JSON, REA_BROWSER_OBSERVE_ENABLED before connecting. JAVA_HOME is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does REA run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to REA

Alternatives to REA

Maintained coding agent servers if REA isn't the fit.

Pairs well with

Servers that cover what REA doesn't - only shown when the pairing reason fits the companion.

More coding agent MCP servers · Metricui · Ohm MCP · Sentinal MCP · Athena Protocol · Redcon

More TypeScript MCP servers · Boe MCP · Komodo MCP Server · Mpp32 MCP Server · UI Registry · see all