Best MCP servers for AI reverse engineering (Claude Code, Codex, Cursor)
Unofficial guide. This site is an independent community guide and is not affiliated with the REA project. For authoritative docs see the official REA website and the morluto/rea GitHub repository. Commands here are taken from the official README/docs (checked 2026-10-13); REA changes quickly, so verify against the official docs.
This page covers third-party tools. reaguide.com is not affiliated with Hex-Rays, LaurieWired, mrexodia, bethington, clearbluejar or any project below. Commands are copied from each project's own README/docs (checked 2026-10-13) — these projects release often, so check the linked source before running.
“Agentic reverse engineering” means letting a coding agent drive a disassembler/decompiler through the Model Context Protocol (MCP). None of these servers is a new decompiler: each exposes an existing engine (IDA, Ghidra, Hopper…) to the agent. They differ in which engine, how much the tool decides for the agent, and licensing cost.
| Server | Engine | Engine cost | Style | Maintainer |
|---|---|---|---|---|
| REA (rea-agents) | Hopper, Ghidra or IDA + built-in JS/Electron, .NET, web, APK | Free with Ghidra | ~170 typed tools, evidence-oriented findings | morluto (community) |
| ida-mcp | IDA 9.4+ (Home, Pro or Classroom) with idalib | Paid IDA license | 6 tools; agent writes IDAPython | Hex-Rays (official) |
| ida-pro-mcp | IDA Pro 8.3+ (IDA Free not supported) | Paid IDA Pro | Typed tools (decompile, xrefs…) | mrexodia; now recommends the official server |
| GhidraMCP | Ghidra 12.1.4 (GUI plugin or headless via PyGhidra) | Free | Decompile, rename, list functions/imports/exports | LaurieWired |
| bethington/ghidra-mcp | Ghidra 12.1.4, GUI or headless/Docker | Free | 209 tools incl. write ops, P-code emulation, debugger | bethington |
| pyghidra-mcp | Ghidra headless (PyGhidra), multi-binary projects | Free | CLI/HTTP server for automation | clearbluejar |
Which one should I pick?
- You own IDA 9.4+: the official Hex-Rays ida-mcp. It is what Maurice Heumann's agents used “almost the entire time” in the MW2 decompilation project.
- Zero budget, native binaries: a Ghidra MCP server, or REA with Ghidra as provider.
- Targets that aren't just native code (Electron/JS, .NET, websites, HAR, APKs): REA covers these without a disassembler. See REA vs ida-mcp.
- Don't stack several IDA servers: Hex-Rays recommends disabling other IDA MCP servers before installing theirs “to avoid confusing your agent”.
Demand and adoption signals (checked 2026-10-13)
GitHub stars can be gamed, so treat these as rough: GhidraMCP ~11.2k stars, ida-pro-mcp ~12.7k, bethington/ghidra-mcp ~5.5k, HexRaysSA/ida-mcp ~1.1k (released 2026-09-25), pyghidra-mcp ~440. Hacker News: “Show HN: Ghidra MCP Server – 110 tools” (298 points), the MW2 decompilation write-up (210 points, 150 comments).
Related guides
- Hex-Rays official IDA MCP setup
- Ghidra MCP servers compared
- REA vs Hex-Rays ida-mcp
- REA vs Ghidra vs IDA
Sources: HexRaysSA/ida-mcp · mrexodia/ida-pro-mcp · LaurieWired/GhidraMCP · bethington/ghidra-mcp · clearbluejar/pyghidra-mcp · morluto/rea
FAQ
What is the best MCP server for reverse engineering?
It depends on your engine. With an IDA 9.4+ license, the official Hex-Rays ida-mcp; with no budget, a Ghidra MCP server such as GhidraMCP; for Electron, .NET, web and APK targets, REA.
Is there a free MCP server for reverse engineering?
Yes. GhidraMCP, bethington/ghidra-mcp and pyghidra-mcp are open source and use the free Ghidra. REA is MIT-licensed and can use Ghidra too.
Can Claude Code reverse engineer binaries?
Yes, through an MCP server that connects it to IDA, Ghidra or Hopper. Claude Code itself does not disassemble binaries.