Integration
ToCode
Python CLI that exports a binary, IDA database, Android APK, .NET assembly or whole application folder into a source-like project tree for coding agents: recovered C (Java for APKs, C# and IL for .NET) with matching assembly and function summaries, recovered headers and types, section dumps, JSON indexes of functions, strings, imports, exports, reachability and call-graph clusters, and generated AGENTS.md and CLAUDE.md files. It drives IDA, Binary Ninja, radare2 with r2ghidra or angr, and for folders links each import to the defining file's function using the platform's loader rules. Its tocode mcp server keeps the decompiler open so an agent can record names, types and comments and re-render only the affected files.
- Targets
- App · Binary
- Category
- Independent agent workflows
- Relationship
- Independent agent integration
- Sources reviewed
Requirements & limits
- PyPI release at review: tocode-cli 0.3.2, uploaded 2026-10-16; the reviewed main commit is a merge commit one commit ahead of tag v0.3.2. The repository was created on 2026-05-20. It needs Python 3.10+ on Windows, Linux or macOS and installs with pip or uv, or with install.sh or install.ps1 from a clone.
- A decompiler backend is not bundled: IDA through the ida-domain and idapro libraries, Binary Ninja headless where the license allows it or through its built-in MCP server or an RPC bridge in a running UI, radare2 with r2ghidra, or the optional angr extra of about 450 MB, whose pseudo-C the README calls lower quality. .NET exports need a .NET 9+ runtime and download dnlib and ICSharpCode.Decompiler from nuget.org after a prompt, checked against pinned SHA-256 hashes; APKs use the droidasc package.
- Supply the binaries or application folders yourself. Exports copy section data, non-code APK entries and native libraries from the input, so they are as sensitive as the analyzed files. The README warns that the Binary Ninja RPC bridge exposes the whole Python VM without authentication and must stay bound to 127.0.0.1.
- The eval directory defines a blind source-recovery benchmark: nine small C programs are built with and without debug info, a headless Claude Code agent restricted to the ToCode MCP server and file tools works on the stripped build, and a judge scores names, types, an LLM grade per function, behavior on test inputs and leakage. No benchmark results are committed; tests use generated fixtures and a fake Binary Ninja module, and the repository commits no binaries.
- MIT (LICENSE, pyproject.toml). tocode skill install adds a workflow skill for Claude Code and Codex. The reviewed sources establish no REA connection, and nothing was exported or run for this entry.
About this entry
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · buzzer-re/ToCode · Revision 216f1f9
- eval/README.md GitHub · buzzer-re/ToCode · Revision 216f1f9
- pyproject.toml GitHub · buzzer-re/ToCode · Revision 216f1f9
- DEVELOPMENT.md GitHub · buzzer-re/ToCode · Revision 216f1f9
- src/tocode/backends GitHub · buzzer-re/ToCode · Revision 216f1f9
- src/tocode/skill/SKILL.md GitHub · buzzer-re/ToCode · Revision 216f1f9
- LICENSE GitHub · buzzer-re/ToCode · Revision 216f1f9
- https://pypi.org/project/tocode-cli/0.3.2/
More in Agents and MCP
- Reverse API Engineer · Integration
- OpenBaud · Integration
- JADX MCP Server (Qtty) · Integration
- usb-rea · Integration
- REA — Reverse Engineer Anything · Project
- Official reverse-engineer-anything skill · Integration