Best MCP servers for reverse engineering
We found 32 MCP servers for reverse engineering in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. REA, Jshookmcp and Reversecore MCP lead it. OpenDeviceDB is published by the company that makes it. REA has the most GitHub stars here (377,435). 14 of the 15 had activity in the last 30 days. Remote servers need no local install; local ones run on your machine and can reach local files. Each entry lists why it made the list and links to its install page.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
Top 15 of 32
- 1REA
morluto
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
- Most GitHub stars here (377,435)
- Active in the last 30 days
- Open source (MIT)
★ 377.4KLast active Oct 25, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 2Jshookmcp
vmoranv
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
- 2.1K GitHub stars
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 2.1K↓ 605/wkLast active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 3Reversecore MCP
sjkim1127
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
- Active in the last 30 days
- Open source (MIT)
★ 212↓ 170/wkLast active Oct 17, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 4OpenDeviceDB
opendevicedb.orgOfficial
Check 21,000+ devices with open firmware or protocols before reverse engineering one.
- Published by the vendor
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 30↓ 88/wkLast active Oct 17, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 5Pyghidra Lite
johnzfitch
Token-efficient Ghidra RE: decompile, xrefs, Swift/ObjC, ELF/Mach-O, async analysis
- Active in the last 30 days
- Open source (MIT)
★ 36↓ 99/wkLast active Oct 10, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 6ReversePort
laaielichter
Reverse engineer anything.
- Active in the last 30 days
- Open source (MIT)
★ 4Last active Oct 20, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 7Every App Is Open Source
thomasisalwayslate
Native reverse engineering with Ghidra and evidence on Apple Silicon macOS.
- Most weekly downloads here (916)
- Active in the last 30 days
- Open source (Apache-2.0)
↓ 916/wkLast active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 8Reverse Engineer
Firzus
Read-only reverse engineering of Electron apps, PE/ELF/Mach-O binaries, Go/Rust,.NET and APKs.
- Active in the last 30 days
- Open source (MIT)
★ 3Last active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 9
REA reverse-engineering MCP server in Docker, with JADX, Apktool and adb for APKs.
- Remote server, no local install
- Active in the last 30 days
- Open source (WTFPL)
★ 3Last active Oct 19, 2026Remote (HTTP)
AFreshness: A–Security: not graded yet - 10Ghidra BizHawk MCP
getanirao
Unified Ghidra + BizHawk MCP server for static analysis, P-code emulation, and retro ROM triage.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 1↓ 47/wkLast active Oct 16, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 11Dejared
hqkh4nh
Java decompiler MCP server.
- Open source (MIT)
★ 7Last active Aug 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
BFreshness: B–Security: not graded yet - 12idamesh
JordanRO2
MCP server for IDA Pro: decompiler, disassembler, and analysis tools for MCP clients.
- Active in the last 30 days
- Open source (MIT)
★ 7↓ 19/wkLast active Oct 18, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 13Super Trouper
crissyfield
MCP server for the Frida reverse engineering toolkit.
- Active in the last 30 days
- Open source (MIT)
★ 61↓ 116/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 14
Unit 42 malware analysis & threat research.
- Remote server, no local install
- Active in the last 30 days
Last active Oct 5, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 15Usb Rea
emirmrkaljevic
Reverse engineer USB gadgets: capture traffic, infer the protocol, generate a pyusb driver.
- Active in the last 30 days
- Open source (MIT)
★ 1↓ 595/wkLast active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet