# Decepticon: REA reversing service and subagent tools

> An optional reversing workload in BitterSecurity’s Decepticon wraps rea-agents and Ghidra inside a dedicated HTTP/MCP container and exposes three tools to its reverser subagent. It pins the inspected binary by SHA-256 and exports REA Evidence files to the shared workspace before returning results.

- Type: Integration
- Targets: Binary
- Category: Community REA integrations
- Relationship: Community REA integration
- Sources reviewed: 2026-10-18
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/docs/features/rea-reversing.md>
- Catalog page: <https://awesomerea.org/resources/decepticon-rea-reverser/>
- Record JSON: <https://awesomerea.org/resources/decepticon-rea-reverser/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/decepticon-rea-reverser/index.md)

## Requirements & limits

- The optional Decepticon REA integration uses Node.js 22, OpenJDK 21, Python 3, Ghidra 12.1.4 and rea-agents@6.3.0 in an HTTP/MCP container with a shared /workspace mount and port 8892.
- Setting DECEPTICON_REA_URL loads rea_status, rea_find_tools and rea_call_tool for the reverser subagent. Without it, the subagent uses local Radare2 and triage tools.
- rea_call_tool copies the target binary to a read-only file, verifies its SHA-256, and exports evidence-<sha256>.json and manifest.json. trace_native_values first runs analyze_function for source Evidence.
- Unit tests mock HTTP responses, FastMCP sessions and tools to check filtering, arguments, Evidence wiring and fallback behavior.
- License: Apache-2.0. REA, Ghidra and model providers retain their own terms.

## Primary sources

1. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/docs/features/rea-reversing.md>
2. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/containers/rea.Dockerfile>
3. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/containers/rea_service.py>
4. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/decepticon/tools/reversing/rea.py>
5. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/decepticon/agents/standard/reverser.py>
6. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/tests/unit/tools/reversing/test_rea_tools.py>
7. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/tests/unit/agents/test_reverser_workload_fallback.py>
8. <https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/LICENSE>

## More in Agents and MCP

- [Hex-Rays IDA MCP](https://awesomerea.org/resources/hex-rays-ida-mcp/index.md) · Integration
- [GhidraMCP](https://awesomerea.org/resources/ghidramcp/index.md) · Integration
- [Binary Ninja MCP (official)](https://awesomerea.org/resources/binary-ninja-official-mcp/index.md) · Integration
- [Binary Ninja MCP (fosdickio)](https://awesomerea.org/resources/binary-ninja-community-mcp/index.md) · Integration
- [IDA Pro MCP (mrexodia)](https://awesomerea.org/resources/ida-pro-mcp-community/index.md) · Integration
- [Radare2 MCP Server](https://awesomerea.org/resources/radare2-mcp/index.md) · Integration

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.