REA 6.4: a reverse-engineering MCP for coding agents adds Android and JEB support
What is it?
REA is an MIT-licensed tool that plugs into coding agents such as Claude Code, Codex, Cursor and Gemini CLI as an MCP server (the standard way agents call external tools). Once connected, agents can analyze native binaries, Electron apps, .NET assemblies and websites without source code. A single command, npx rea-agents setup, registers it with your agent, and it drives existing disassemblers (tools that turn machine code into readable code) like Hopper, Ghidra or IDA. Version 6.4 adds Android device inspection and APK extraction over ADB, JEB decompiler integration, and summary views for very large analyses.
Why does it matter?
It widens what you can hand to an agent: security reviews, making sense of legacy binaries, or digging into undocumented internal tools. Every conclusion comes with its evidence and limits, so results are easier to check. Because it's built to inspect other people's apps, check license terms and local law on reverse engineering before you point it at anything.
Maturity
GAIt's a stable release, but the project allows breaking changes in every minor version, and output formats already changed in 6.2 and 6.3. Pin a version and read the migration guide before upgrading. The star surge shows it's trending. It says nothing about quality.
How to track it
- Breaking changes in the next version: watch the GitHub
morluto/rearepo (Watch → Releases) and read the release notes and migration guide before upgrading. - Real-world reviews, not stars: look for write-ups from security folks or GeekNews readers who have used it on actual analyses.
- Stability of the Android and JEB integrations: follow how ADB and JEB bug reports are handled in the repo's Issues tab.