Auditing REA: 15,095 Stars, 133 MCP Tools, and the 209,619-Token Bill for Analysing Eight Files

Thu, 08 Oct 2026 00:00:00 +0000

“See a feature you like. Understand how it works, down to the binary level.” That is REA’s pitch — one MCP server for reverse engineering across binaries, applications and runtime behaviour — and 15,095 stars on morluto/rea say it landed. The repository is pushed to within an hour of my writing this, ships 26 npm versions in 88 days, and runs 16 GitHub Actions workflows with names like Real Hopper E2E and Real Ghidra Windows E2E.

So I installed rea-agents@5.0.0, spoke raw JSON-RPC to its MCP server, built an eight-file Electron application as a fixture, and pointed the analyser at a 14 MB JavaScript directory to find the edge. What came back is one of the more honest tools I have audited this year, and a bill nobody quotes in the README.

Ghidra on SoloSoft

Auditing REA: 15,095 Stars, 133 MCP Tools, and the 209,619-Token Bill for Analysing Eight Files