Integration
Reversecore MCP
MCP server that puts radare2 with r2ghidra, LIEF, Capstone, YARA, CAPA, Detect It Easy, binwalk, angr, Volatility3, Scapy, Sleuth Kit and other engines behind 177 typed tools for AI clients such as Claude and Cursor. The tools cover disassembly and decompilation, binary parsing, string, IOC and capability extraction, ESIL emulation and symbolic execution, YARA scanning, memory, PCAP and disk forensics, source-code pattern scanning and session reports with MITRE ATT&CK mapping, alongside 22 guided analysis prompts and per-binary MCP resources. File access is confined to a configured sample workspace, and the server runs over stdio or HTTP/SSE, typically from the project's Docker image.
- Targets
- Binary
- Category
- Independent MCP integrations
- Relationship
- Independent agent integration
- Sources reviewed
Requirements & limits
- Latest release at review: v3.0.5, published 2026-09-28 on GitHub with a wheel, sdist, SBOMs and Sigstore bundles, on PyPI as reversecore-mcp and as a GHCR image. The reviewed main commit of 2026-10-17 is 147 commits ahead of that tag, while pyproject.toml still declares 3.0.5. The README's test and coverage figures (3,069 tests, 88%) are hard-coded badges and differ from the older counts in AGENTS.md.
- Python 3.10–3.12, with angr installed only on Python 3.12. Local installs need radare2 on the PATH, plus Volatility3, Scapy and Sleuth Kit for forensics; the README recommends the Docker image, which bundles the engines, with x86 and Apple Silicon compose profiles. It lists Linux or macOS hosts or any Docker environment, at least 4 cores, 8 GB RAM and 20 GB storage; Redis backs the task queue and result cache, and an SQLite memory database keeps notes across sessions.
- Binaries, memory images, PCAPs and disk images come from the analyst and are mounted into the workspace, where path validation confines tool access. Optional container sandboxing for dynamic-analysis tools is disabled by default, and HTTP mode accepts only loopback clients unless MCP_API_KEY is set. Some tools and prompts target exploit and PoC development; this entry covers analysis use only.
- CI runs linting, type checks, Bandit, pip-audit and CodeQL, unit tests on Python 3.10–3.12 with an 85% coverage gate, security-boundary, integration and MCP client end-to-end suites, and a wheel build-and-install check; ClusterFuzzLite and nightly fuzzing run separately. Test fixtures include small synthetic vulnerable C targets with seeds, proof-of-concept inputs and ASan logs, and scratch/binaries holds only a hello.c source. These checks cover the server code, not the accuracy of model-driven conclusions, and none were run here.
- MIT; the wrapped engines and the packages in the Docker image keep their own licenses. ORIGINAL_REQUEST.md records a 2026-08-22 brief asking an orchestrating agent to dispatch subagents for transport hardening, prompt expansion and output optimization, so parts of the code were developed with AI agents. The reviewed sources establish no REA connection.
About this entry
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- pyproject.toml GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- SECURITY.md GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- AGENTS.md GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- ORIGINAL_REQUEST.md GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- Dockerfile GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- docker-compose.yml GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- server.json GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- .github/workflows/main.yml GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- tests/fixtures/benchmarks/targets GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- LICENSE GitHub · sjkim1127/Reversecore_MCP · Revision c1c5767
- https://github.com/sjkim1127/Reversecore_MCP/releases/tag/v3.0.5
- https://pypi.org/project/reversecore-mcp/3.0.5/
More in Agents and MCP
- AutoProber · Integration
- ToCode · Integration
- Reverse API Engineer · Integration
- OpenBaud · Integration
- JADX MCP Server (Qtty) · Integration
- usb-rea · Integration