theTNai
Get the brief

Tools · 20 Oct 2026

REA, a free tool that lets AI coding agents take apart apps and programs to see how they work, passed 339,000 GitHub stars about two weeks after it had fewer than 10,000.

REA (Reverse Engineer Anything) is an MIT-licensed tool from the GitHub account morluto. It connects AI coding agents to reverse-engineering programs such as Ghidra, Hopper and IDA, so an agent can trace how a feature in an app or binary works and show the evidence for each finding. On 20 Oct 2026 its GitHub page showed about 339,000 stars and 85,600 forks.

What REA does

REA is an MCP server and command-line tool. You ask your coding agent a question about a program on your own computer, and the agent calls REA. REA picks the right engine, inspects the program, traces the code behind the feature and returns its findings with the evidence and the limits of each conclusion. The agent can then explain the behaviour or write and test a similar feature in your own project.

The README's own example question is: "Understand how search works in the Notes app, show me the evidence, and build a similar feature for my project." REA can inspect native programs, JavaScript and Electron apps, .NET programs, Android apps, firmware, and websites in a Chrome-family browser. Setup supports Claude Code, Codex, Cursor, Gemini CLI and Grok Build, and any agent that can use a local MCP server. The analysis runs on your computer, but the README notes that your agent's model provider has its own data policy.

How fast it grew

According to AgentConn, which cites Decrypt, REA had fewer than 10,000 stars on 6 Oct and more than 100,000 by 12 Oct, with eight releases between 3 Oct and 11 Oct. By 20 Oct its GitHub page showed about 339,000 stars. Stars measure attention, not installs, and iTechnically Kan reports one analysis that suspects part of the growth came from drive-by stars.

A lookalike repository appeared within hours of REA trending, AgentConn reports. The README names three official sources: the morluto/rea repository, the rea.tools website and the rea-agents package on npm.

What it can and cannot do

REA does not claim to recover an app's original source code or to clone an app automatically. It returns pseudocode, maps of how modules connect, and traces of what runs. Its showcase includes a sound calculation from the 1996 game DX-Ball, rebuilt in C, that passes 3,205 tests against the original x86 code.

Independent checks show gaps. In a test of version 6.4.0 on an open-source Electron app, reported by AgentConn, all 30 file-and-line citations were correct, but REA found only 1 of the 8 windows the app creates and none of its 4 nodeIntegration settings. The reviewer's warning: "Missing findings do not establish absence." REA also cannot see code that runs on a company's own servers.

The legal line

The README says REA is for lawful research, education, interoperability, software preservation, and analysis of software you own or are authorised to examine. Commercial tools such as Hopper or IDA must be bought legally, and cracked copies or shared keys are not allowed. iTechnically Kan reports that REA's disclaimer forbids getting around DRM, licence checks and anti-cheat systems.

MindStudio's advice is to study how a feature behaves, not to copy someone else's code or assets. Some apps' terms of service forbid reverse engineering; iTechnically Kan names Adobe's as one example. Read the licence and terms of any software before you examine it, and ask a lawyer if you plan to sell what you build.

How to try it

  1. Check you have Node.js 22.19 or later (or 24.11 or later) with npm, on macOS 12+, Ubuntu 24.04+, Fedora 41+ or 64-bit Arch Linux. Ghidra support on Windows is experimental.
  2. In a terminal, run npx rea-agents setup. It shows the changes it plans, asks for your approval, backs up your agent's settings and adds REA. Then restart your coding agent.
  3. Run npx -y rea-agents@latest doctor to check that your computer has what REA needs.
  4. For native programs, install a decompiler you are licensed to use: Ghidra is free; Hopper and IDA are paid. JavaScript, Electron and .NET apps need none.
  5. Start with your own project and a narrow question, for example: "Show me how my app stores the login session, with evidence."

How to get good results

Our practical advice, based on what the sources below say about it.

  1. Ask about one feature, not the whole appMindStudio found that broad requests such as "clone everything" give vague and often wrong results. Pick one behaviour, like a search box or an export button, and ask REA to trace only that.
  2. Treat what it misses as unknown, not absentIn AgentConn's report, REA's citations were exact but it missed settings that were really there. Check anything important with a second tool or by reading the code yourself.
  3. Install only from the official sourcesA lookalike repository appeared within hours of REA trending. Use only github.com/morluto/rea, rea.tools or the rea-agents package on npm.
  4. Keep sessions small to control costiTechnically Kan measured REA's tool list alone at about 1.95 MB, roughly half a million tokens, and one summary call returned about 1.35 MB. Narrow questions keep your agent's bill down.
  5. Run it on your own app firstIf you ship an app, see what REA can learn from your own build. AgentConn suggests moving sensitive logic, such as pricing or recommendations, to your server, where REA cannot see it.

Why it matters in Tamil Nadu

Students and developers in Tamil Nadu can use it to learn how real software works and to check their own apps, but only on software they own or may legally examine; builders should also assume their app's logic is now easier for others to study.

Where this comes from

  • SourceREA on GitHub
  • Also checkedAgentConn Star growth, lookalike repo, independent test of version 6.4.0
  • Also checkediTechnically Kan Requirements, setup steps, cost and disclaimer
  • Also checkedMindStudio Feature-by-feature method and legal caution
  • Checked against the source20 Oct 2026
  • Written bytheTN.ai's AI agent, in its own words
  • Approved byPaul Jeevanesan, Founder and Chief EditorAlso founder and CEO of StudAI One, whose services wing is StudAI Works (related parties, see disclosures).

Spotted an error? Tell us: we fix confirmed errors within 24 hours and log them in public.

Cite this page

theTN.ai, "REA, a free tool that lets AI coding agents take apart apps and programs to see how they work, passed 339,000 GitHub stars about two weeks after it had fewer than 10,000.", 20 Oct 2026. https://thetn.ai/tech/2026-10-20-rea-reverse-engineer-anything/

More in Tools