An MCP server that exposes Ghidra's reverse engineering functions so LLM clients can decompile and analyze binaries.
Fractal-Tess/rea-flake
A Nix flake that packages the REA reverse engineering CLI and MCP server for AI agents, with Ghidra wired in.
- Stars
- 8
- Forks
- 2
- Open issues
- 0
- Last commit
- 10 days ago
What is it?
REA (Reverse Engineer Anything) is a reverse engineering CLI and MCP server for AI agents, covering native binaries, JavaScript and Electron apps, .NET assemblies, Android packages, firmware and websites. This flake packages the published rea-agents npm release with a pinned lockfile, so it runs without npx, a global npm install or the rea setup download.
The package pulls Ghidra and JDK 21 from nixpkgs, so native decompilation works out of the box on x86_64 and ARM64 Linux. Ghidra can be replaced by setting GHIDRA_INSTALL_DIR and JAVA_HOME, or left out entirely with a build override. Frida is excluded because its install script downloads prebuilt binaries, so Frida-backed tools report as unavailable.
It ships NixOS and Home Manager modules, and an overlay that exposes pkgs.rea. Updates happen through the flake, with a daily workflow that checks the latest npm release and regenerates the lockfile and hashes.
Key features
- 01Packages the REA npm release with a pinned lockfile for reproducible installs.
- 02Bundles Ghidra and JDK 21 from nixpkgs for native decompilation on Linux.
- 03Provides NixOS and Home Manager modules plus an overlay exposing pkgs.rea.
- 04Supports x86_64 and ARM64 Linux.
- 05Runs REA as an MCP server that agents can register with, such as Claude Code.
Use cases
- Setting up a reverse engineering toolchain declaratively on NixOS or with Home Manager.
- Giving an AI agent access to binary and app analysis tools via MCP.
- Running REA with Ghidra decompilation without manual dependency setup.
Quick start
- 1
Run REA's doctor check directly with Nix
nix run github:Fractal-Tess/rea-flake -- doctor --provider ghidra - 2
Add the flake input and enable the NixOS or Home Manager module
- 3
Register the REA MCP server with your agent
claude mcp add --scope user rea -- rea mcp
Things to know
- Supports only x86_64 and ARM64 Linux.
- Requires Nix; the package is pinned and updated through the flake rather than npm.
- Frida is left out, so Frida-backed tools are unavailable.
In collections
Topics
FAQ
- What is rea-flake?
- A Nix flake that packages the REA reverse engineering CLI and MCP server for AI agents, with Ghidra wired in. REA (Reverse Engineer Anything) is a reverse engineering CLI and MCP server for AI agents, covering native binaries, JavaScript and Electron apps, .NET assemblies, Android packages, firmware and websites. This flake packages the published rea-agents npm release with a pinned lockfile, so it runs without npx, a global npm install or the rea setup download.
- Is rea-flake free to use? What license does it have?
- rea-flake is open source under the MIT license. Check the license terms before using it in commercial products.
- Is rea-flake still maintained?
- Actively maintained. The last commit to rea-flake was on Oct 28, 2026.
- What can I use rea-flake for?
- Setting up a reverse engineering toolchain declaratively on NixOS or with Home Manager. Giving an AI agent access to binary and app analysis tools via MCP. Running REA with Ghidra decompilation without manual dependency setup.
- How do I install rea-flake?
- Run REA's doctor check directly with Nix: nix run github:Fractal-Tess/rea-flake -- doctor --provider ghidra Add the flake input and enable the NixOS or Home Manager module Register the REA MCP server with your agent: claude mcp add --scope user rea -- rea mcp
- Where can I get rea-flake?
- The source code and installation instructions are on GitHub: https://github.com/Fractal-Tess/rea-flake
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
An LLM-powered extension for Ghidra that adds AI-assisted code explanation, chat, and agentic analysis to reverse engineering workflows.
An MCP server that gives AI assistants accurate, live lookups of NixOS packages, options, Home Manager settings and other Nix resources.
MCP server and CLI letting AI agents reverse engineer native binaries, Electron apps, .NET assemblies and websites.
A CLI and MCP server that lets coding agents reverse engineer apps, games, binaries and websites, then port them to Godot, Unity, Unreal or three.js.
An MCP server extension for Ghidra that lets AI language models drive reverse engineering analysis through small, focused tools.