Best for
- Security researchers and malware analysts
- Teams that need natural-language orchestration across analysis engines
- Developers performing binary, firmware, vulnerability, or forensic analysis
The supplied sources describe Reversecore MCP as an MIT-licensed open-source security-analysis server, version 3.0.3, distributed through PyPI and OCI packages. It offers broad coverage and a substantial toolchain, with path validation, input sanitization, structured errors, rate limiting, and optional sandboxing. It is intended for professional security workflows, so users should still configure isolation and access controls independently when handling untrusted samples.
Strongest · Documentation 13/20 Weakest · Security and permissions 8/20
Static review · not runListed 2026-08-14
Read the FMRS scoring method →Runtime:Docker 20.10+ · Python 3.10+ · Prebuilt binary
MCP_API_KEY
API key for HTTP auth via X-API-Key or Bearer header; generate it yourself
REVERSECORE_WORKSPACE
Analysis workspace directory, mounted as /app/workspace in Docker
MCP_TRANSPORT
Transport mode: stdio or http
MCP_HOST
Host interface for HTTP mode; falls back to 127.0.0.1 when no API key is set
MCP_PORT
HTTP server port, default 8000
REVERSECORE_READ_DIRS
Comma-separated additional read-only directories
REVERSECORE_STRICT_PATHS
Raise errors for missing paths instead of warnings
REVERSECORE_STRUCTURED_ERRORS
Enable structured error responses with error codes
REVERSECORE_DEFAULT_TOOL_TIMEOUT
Default tool execution timeout in seconds, default 120
REVERSECORE_MAX_OUTPUT_SIZE
Maximum tool output size in bytes
REVERSECORE_RATE_LIMIT
Max requests per minute in HTTP mode
MAX_UPLOAD_SIZE
Maximum upload size, default 100 MB
FILE_RETENTION_MINUTES
Retention period for uploaded files, default 24h
REVERSECORE_R2_POOL_SIZE
Radare2 connection pool size, default 3
REVERSECORE_R2_POOL_TIMEOUT
Timeout for acquiring a pool connection in seconds
REVERSECORE_R2_EXTENSIONS
Comma-separated r2 extension classes (module:ClassName)
REVERSECORE_GHIDRA_MAX_PROJECTS
Max cached r2ghidra decompiler projects
REVERSECORE_GHIDRA_EXTENSIONS
Comma-separated Ghidra extension classes
MAX_EMULATION_INSTRUCTIONS
Maximum ESIL emulation instructions, default 1000
REVERSECORE_SANDBOX_ENABLED
Enable sandbox execution for dynamic analysis tools
REVERSECORE_SANDBOX_MODE
Sandbox mode: auto/host/container/disabled
REVERSECORE_SANDBOX_DOCKER_IMAGE
Docker image used for sandbox execution
REVERSECORE_SANDBOX_CPU_LIMIT
CPU core limit for sandbox containers
REVERSECORE_SANDBOX_MEMORY_LIMIT
Memory limit for sandbox containers
REVERSECORE_SANDBOX_PIDS_LIMIT
PID limit for sandbox containers
REVERSECORE_SANDBOX_USER
Non-root user for sandbox execution
REDIS_URL
Redis URL for task queue and result caching
MEMORY_DB_PATH
Path to the AI memory SQLite database
REVERSECORE_LIEF_MAX_FILE_SIZE
Maximum file size for LIEF parsing, default 1 GB
LOG_LEVEL
Logging verbosity: DEBUG/INFO/WARNING/ERROR
LOG_FILE
Path to the log file
LOG_FORMAT
Log format: human or
REVERSECORE_PLUGIN_DIRS
Comma-separated directories to scan for extension plugins
REVERSECORE_SAST_RULES_PATH
Path to a custom YAML SAST rules file
Docker is recommended for the complete toolchain: mount a local sample directory at /app/workspace and reference samples by filename inside the container. You can also install reversecore-mcp from PyPI or run it from source; local mode requires Radare2, while full forensics support requires additional external tools. The server supports stdio and can also be configured for HTTP/SSE mode.
{"mcpServers":{"reversecore":{"command":"docker","args":["run","-i","--rm","-v","/path/to/your/samples:/app/workspace","-e","REVERSECORE_WORKSPACE=/app/workspace","-e","MCP_TRANSPORT=stdio","ghcr.io/sjkim1127/reversecore_mcp:latest"]}}}
Shown for Claude Desktop. Other clients may use a different file or key (VS Code uses "servers") — the configurator below converts it.
{
"servers": {
"reversecore": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-v",
"/path/to/your/samples:/app/workspace",
"-e",
"REVERSECORE_WORKSPACE=/app/workspace",
"-e",
"MCP_TRANSPORT=stdio",
"ghcr.io/sjkim1127/reversecore_mcp:latest"
]
}
}
}
Goes in your project's .vscode/mcp.json (VS Code uses a "servers" key).
claude mcp add reversecore -- docker run -i --rm -v /path/to/your/samples:/app/workspace -e REVERSECORE_WORKSPACE=/app/workspace -e MCP_TRANSPORT=stdio ghcr.io/sjkim1127/reversecore_mcp:latest
Run it in a terminal; replace any <…> placeholders with your own values first.
After starting the server, tools such as run_file, Radare2_decompile_function and extract_iocs should appear in your client's tool list; calling run_file on a sample in the workspace and getting back file type and architecture info confirms the install works.
Once connected, you can ask your AI assistant things like:
No matching tools
Listed from the project's documentation, not tested by this site.
Reversecore MCP gives AI assistants Model Context Protocol access to reverse engineering, malware analysis, vulnerability research, digital forensics, and source-code security auditing. It integrates Radare2, r2ghidra, YARA, LIEF, Capstone, angr, Volatility3, Scapy, Sleuth Kit, and other engines through 120 tools, 22 guided analysis modes, and 11 MCP resources.
Upstash's official server providing up-to-date third-party library docs for AI coding assistants
AI-powered NPM package analysis MCP server
An independent control layer that gives AI coding agents budgets, brakes, and receipts
GitHub's official MCP server for managing repos, issues, PRs, and workflows via natural language
Source revision c1c576709e47 Data synced 2026-10-19 Read the FMRS scoring method