Reversecore_mcp
About
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.
Details
- Author
- sjkim1127
- GitHub stars
- 175
- Downloads
- 392
- Categories
- Other
Jump to
- 50+ tools for static, dynamic, malware, and forensic analysis
- Natural language interface – describe tasks, server invokes tools
- Guided analysis prompts with expert personas and Chain-of-Thought
- MITRE ATT&CK technique mapping with evidence classification
- Persistent AI memory store via async SQLite
- Built-in security model with input sanitization and path validation
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Reversecore_mcpCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Run the Docker container (recommended) or build from source, then connect any MCP-compatible AI client via stdio or HTTP/SSE transport. Configure workspace and environment variables as needed.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"reversecore_mcp": {
"reversecore": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-v",
"C:/Reversecore_Workspace:/app/workspace",
"-e",
"REVERSECORE_WORKSPACE=/app/workspace",
"-e",
"MCP_TRANSPORT=stdio",
"reversecore-mcp"
]
}
}
}
}McpServers
{
"reversecore": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-v",
"C:/Reversecore_Workspace:/app/workspace",
"-e",
"REVERSECORE_WORKSPACE=/app/workspace",
"-e",
"MCP_TRANSPORT=stdio",
"reversecore-mcp"
]
}
}reversecore_mcp/tools/analysis/my_tool.py
from reversecore_mcp.core.decorators import log_execution from reversecore_mcp.core.result import ToolResult, success, failure from reversecore_mcp.core.security import validate_file_path@log_execution()
async def my_analysis_tool(file_path: str, option: str | None = None) -> ToolResult:
"""Analyze a binary for X.
Args:
file_path: Path to the binary file (relative to workspace).
option: Optional analysis option.
Returns:
ToolResult with status='success' and structured content.
"""
try:
safe_path = validate_file_path(file_path)
result = await perform_analysis(safe_path)
return success({"result": result})
except Exception as e:
return failure(str(e))
``
Then register it in server.py and add tests in tests/unit/.
---
Contributing
1. Fork the repository
2. Create a feature branch: git checkout -b feat/my-feature
3. Write tests alongside your code — coverage must not drop below 80%
4. Ensure all gates pass: , ruff check, mypy, bandit`
5. Open a pull request with a clear description
Please read the Contributing Guide for code standards, docstring conventions, and the pull request checklist.
---
Documentation
| Document | Description |
|---|---|
| Installation Guide | Detailed setup for all environments |
| Architecture Guide | System design & component deep-dive |
| Contributing Guide | Code standards, docstrings, PR workflow |
| Testing Guide | Test patterns, fixtures, and coverage |
| API Reference | Tool and module reference |
| User Guide | End-user analysis workflows |
---
License
MIT — see LICENSE for details.
---
<div align="center">
GitHub · FastMCP Docs · MCP Spec · Radare2 · YARA
</div>
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
