An MCP server extension for Ghidra that lets AI language models drive reverse engineering analysis through small, focused tools.
dav1dngy/era-agent
An AI-assisted reverse-engineering agent built on REA that routes targets to analysis workflows, records evidence, and adds a Studio workbench and a gated self-improvement lab.
- Stars
- 49
- Forks
- 11
- Open issues
- 0
- Last commit
- 24 days ago
What is it?
ERA (Evolve & Reverse Engineer Anything) wraps the REA reverse-engineering engine with a workflow layer. The command `era analyze` routes a target such as a JavaScript application, a Mach-O binary or a ZIP archive to the matching REA workflow, records each execution, normalizes the evidence into facts and writes a report. Runtime capture of binaries runs under a macOS sandbox, and ERA never re-implements REA's operations; all of them remain reachable through `era rea`.
Beyond analysis, ERA includes ERA Studio, a desktop and browser workbench with an editor, diff viewer and terminal, and Project Lab, which lets a coding agent review, modify or rebuild an authorized external project in an isolated copy. Changes are applied only after human approval and can be rolled back. An Improvement Lab lets REA analyze ERA itself, with a maintainer approving any merge.
The project is at v0.2.0 and the desktop app is an unsigned build for macOS arm64 that must be built from source. The validated platform is macOS arm64 with Node 24, and Linux and Windows support is not provided.
Key features
- 01Routes JavaScript apps, Mach-O binaries and ZIP archives to REA analysis workflows via `era analyze`.
- 02Records every REA execution and stores its evidence alongside a generated report.
- 03Runs runtime capture of binaries in a macOS sandbox with no network access.
- 04Project Lab modifies external projects in an isolated copy and requires approval before applying a diff.
- 05ERA Studio provides a desktop and browser interface with Monaco editor, diff viewer and terminal.
Use cases
- Analyzing the structure and entrypoints of a JavaScript application you are authorized to inspect.
- Inspecting Mach-O binaries and reviewing decompiled exported functions with Hopper.
- Reviewing or modifying an authorized project with a coding agent, with human approval before changes land.
- Connecting REA's MCP tools to Claude Code, Codex or other MCP-capable clients.
Quick start
- 1
Clone the v0.2.0 repository
git clone --branch v0.2.0 https://github.com/dav1dngy/era-agent.git && cd era-agent - 2
Install dependencies for the CLI and Studio
npm ci && npm ci --prefix apps/studio - 3
Check what Studio needs on this machine
node bin/era.mjs studio doctor - 4
Launch the desktop shell
node bin/era.mjs studio app
Things to know
- The validated platform is macOS arm64 only; Windows and Linux Studio are not provided.
- The desktop app is an unsigned development build that you must build from source.
- Native decompilation needs Hopper, Ghidra or IDA Pro, and runtime sandboxing works only on macOS.
- It has no security certification, and an independent audit's fixes have not been re-reviewed.
In collections
Topics
FAQ
- What is era-agent?
- An AI-assisted reverse-engineering agent built on REA that routes targets to analysis workflows, records evidence, and adds a Studio workbench and a gated self-improvement lab. ERA (Evolve & Reverse Engineer Anything) wraps the REA reverse-engineering engine with a workflow layer. The command `era analyze` routes a target such as a JavaScript application, a Mach-O binary or a ZIP archive to the matching REA workflow, records each execution, normalizes the evidence into facts and writes a report. Runtime capture of binaries runs under a macOS sandbox, and ERA never re-implements REA's operations; all of them remain reachable through `era rea`.
- Is era-agent free to use? What license does it have?
- era-agent is open source under the MIT license. Check the license terms before using it in commercial products.
- Is era-agent still maintained?
- Actively maintained. The last commit to era-agent was on Oct 14, 2026.
- What can I use era-agent for?
- Analyzing the structure and entrypoints of a JavaScript application you are authorized to inspect. Inspecting Mach-O binaries and reviewing decompiled exported functions with Hopper. Reviewing or modifying an authorized project with a coding agent, with human approval before changes land. Connecting REA's MCP tools to Claude Code, Codex or other MCP-capable clients.
- How do I install era-agent?
- Clone the v0.2.0 repository: git clone --branch v0.2.0 https://github.com/dav1dngy/era-agent.git && cd era-agent Install dependencies for the CLI and Studio: npm ci && npm ci --prefix apps/studio Check what Studio needs on this machine: node bin/era.mjs studio doctor Launch the desktop shell: node bin/era.mjs studio app
- Where can I get era-agent?
- The source code and installation instructions are on GitHub: https://github.com/dav1dngy/era-agent
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
An AI agent skill pack that routes reverse engineering, pentest, and CTF tasks to the right playbook and checks which tools are installed.
A tiny Windows color picker: press Win+Shift+H, click any on-screen pixel, and its HEX code is copied to the clipboard.
A Rust-based firmware analysis tool that identifies and optionally extracts files and data embedded inside other files.
LLM-powered plugin for radare2 that adds an r2ai command for AI-assisted reverse engineering, with a decai decompilation plugin.
An MCP server that lets AI agents drive radare2 for binary analysis, running from the CLI, as an r2 plugin, or over HTTP.