English · 简体中文

What AI agents reverse-engineered and rebuilt, and which ones really used REA.

Unofficial. Not affiliated with morluto/rea.

The short answer: of the six most-shared cases, only one, DX-Ball, says in its own repo that it used REA. Two more say so only in the author's post, and the other three used other tools or are unverified. See every check.

Find a project by the app it replaces · Did it really use REA? · Does REA help? The evidence · New this week · Submit a case

⭐ Star this repo to keep the list in your GitHub feed, or Watch → Custom → Releases to get one weekly digest a week of what AI agents took apart.

"REA" started as morluto/rea (Reverse Engineer Anything, 417k+ stars as of 2026-11-01), an open-source MCP server and CLI (npm rea-agents) that lets coding agents inspect native binaries, Electron apps, .NET assemblies, APKs, firmware and websites without their source code, explain how a feature works with evidence, and rebuild it. REA itself does not decompile; it orchestrates Hopper, Ghidra, IDA and JADX for the agent.

"REA" now also names the whole wave of AI agents reverse-engineering and rebuilding closed software, whether they use REA, or Claude Code and Codex with Ghidra or IDA MCP. This list covers that wave and says what each case actually used.

Tags

• REA: the project README, the author's post or the official showcase says morluto/rea was used.
• AI-RE: AI reverse engineering with other tools, or with no tool named.
• Rebuild: clean-room rewrite with no reverse-engineering evidence.
• Claim?: not yet verified.

How each tag is checked: How this list stays accurate.

Figures and links in this list were checked on 2026-10-21, with REA's star count refreshed on 2026-11-01, and the entries added since refreshed on 2026-11-05. REA and the projects around it move weekly, so read the date next to a number before relying on it.

⚠️ Reverse engineering is governed by local law, software licenses and terms of service. This list covers only public information, for learning, research, interoperability and preservation. Make sure you are allowed to analyse the target. See Legal and controversy.

Open-source projects you can run now, listed by the app they replace or work with. The full index has 37 rows with license and status for each.

Snapshot dates: likes from songshikang0111/awesome-REA-cases on 2026-10-12; views as noted.

The controlled tests of REA we know of, both by third parties:

• rea-lab: five preregistered studies, 482 runs with Claude Code. None found a significant gain in solve rate with REA, and REA runs took about twice the time and cost. Details under Guides and research.
• leanrea: 36 runs against REA 6.5.0. A plain-CLI skill came close to REA's accuracy (74/75 against 75/75) with 38 % less wall time and 35 % less cost. Three reps per cell, one model, one machine.

Ran your own comparison? Submit it.

• Official resources
• Official showcases
• Community cases built with REA
• The wider wave: without confirmed REA
• Plugins and integrations
• Guides and research
• Related MCP reverse-engineering tools
• Other lists
• Discussion and press
• Legal and controversy

The pages in this list: Find projects by the app they replace, Did it really use REA? for a claim check on each case, New this week, Posts from X for the intro posts, the roundups, the official accounts, the controversy and the case-by-case accounts from users, Press and posts about REA, and the case submission form. The Contributing section has the rules for a new entry.

• morluto/rea - The REA repository, MIT licensed. npx rea-agents setup registers it with your agent.
• rea.tools - The website, with illustrated guides, case studies and a blog.
• rea-agents on npm - The published CLI and MCP server.
• The REA skill on skills.sh - An agent skill with the investigation workflow instructions only.
• The Chinese README - The official Simplified Chinese documentation.
• How the MCP tool catalog is generated - How the full list of tools, providers and CLI commands is produced. The generated output is not committed.
• morluto/awesome-reverse-engineering - A general reverse-engineering tools and learning list, maintained by REA's own author. CC0-1.0.
• The Discord community - Official Q&A and Show and Tell.

These are on rea.tools and are tagged REA, except where noted.

• DX-Ball: sound-pan function - One helper that maps sound position to left/right channels, rebuilt as C. It matches 3,205 original x86 test cases, and 63 bytes match after recompilation. This is one function, not the whole game.
• Notion: Electron clipboard bridge - Traces a copy from the page API through preload and IPC to the main process.
• TH04: DOS bullet-ring maths - 16-bit angle helpers from Touhou 4 on PC-98. REA made a fresh inspection for the page; the reconstruction comes from the TH04 project.
• Aegis: login-code generation - Traces TOTP code generation in the Aegis 3.4.3 Android app.
• CTF: flag checker - A DownUnderCTF 2023 reverse-engineering challenge.
• Blog: the industrial revolution in reverse engineering - Written by N0zoM1z0, who also co-builds REA. Most of the work was done by agents with IDA / Ghidra; REA supplied only part of the evidence. Tagged AI-RE.
• Blog: does reverse engineering need a bigger model? - Discusses model capability using Touhou examples and proposes a comparison, but reports no measured results. Tagged AI-RE.

Tags show the evidence source. Repo stars change daily, so they are not listed here.

• N0zoM1z0/dx-ball - REA Reconstruction of English DX-Ball 1.07 in C/C++, which the README says used REA. Alpha, MIT. The author is also a contributor to REA, so this is a first-party case.
• N0zoM1z0/th04 - REA (showcase) Source reconstruction of Touhou 4 (PC-98), built on ReC98 and checked against Turbo C++ 4.0J. The README does not mention REA; see the showcase above. MIT.
• N0zoM1z0's Touhou series: th08, th105, th095, th09, th10, th08-web, and touhou-reconstruction-factory - AI-RE Agent-driven reconstructions using Codex or GPT-web with IDA MCP or Ghidra. None of these READMEs mentions REA.
• ucodia/desktop-games-nostalgia - REA Port of the 2000 Gemtree Desktop Games to macOS and the browser, built with Claude Code, REA and Ghidra. No license file.
• tuunanet/rea-ski-or-die-reconstruction - REA Rust + SDL2 rewrite of the 1990 DOS game Ski or Die. Assets come from your own copy.
• Moxnatiy/OpenBattlefield2 - REA C++20 clean-room reimplementation of the Battlefield 2 Refractor 2 engine. REA is documented in CLAUDE.md and tools/rea.sh, not the README. Needs the original game. MIT.
• OpenRsG/GunZRs - REA Rust + Bevy rewrite of GunZ: The Duel, reading the Steam install. The executable is packed, so REA's role in the port is limited. Apache-2.0.
• a-barzanti/ai-rebuilds - REA Community collection of abandoned games rebuilt for the browser. Contributors use REA to write specs, then build from those specs. Ground rules forbid committing original game files.

• michaelshimeles/paper-rs - REA Infinite-canvas design app in Rust (wgpu + egui), built after studying Paper's behaviour with REA and Claude Code.
• michaelshimeles/rec-rs - REA Rust screen recorder for macOS, after studying OBS Studio's architecture (OBS is GPL-2.0).
• michaelshimeles/terminal-rs - REA Bloomberg-style trading terminal in Rust. Chart behaviour was studied from public TradingView pages. No license file.
• az9713/wispr-flow-rea-teardown - REA Teardown of Wispr Flow's voice pipeline. Each claim is marked proven, inferred or hidden, plus a 64-line local rebuild. The README does not link morluto/rea; it follows a tutorial video.
• iammukeshm/hexgrab - REA .NET 10 colour picker written from REA's findings on PowerToys' shipped binaries. MIT.
• AdamLinCodes/AdamTerm - REA Minimal macOS terminal (SwiftTerm) after studying Ghostty with REA. No license file.
• JimLiu/baocut - REA (author's post) BaoCut app, whose slides editor is adapted from Claude Slides. The README does not name REA. Source-available (BaoCut Community License 1.0), not open source.
• LilZeeCN/zee-rp - REA (author's reply) CLI and MCP for reading and writing Axure RP .rp prototype files. Validated only on macOS with Axure RP 11. MIT.
• wquguru/cameo - Claim? The linked repo is the author's original desktop-pet app, not REA output. The author's follow-up post describes an REA-based reconstruction, but its source was not published.
• lxistired/ledger-reborn - REA Independent local accounting app, built after studying QuickBooks Desktop for Mac 2024 trial with REA. See discussion #2198. Preview release. MIT.
• KarlssonChristoffer/DiskLens - REA WinDirStat-style disk analyzer for Windows 11, written by Claude Code. The author used REA to study the shipped WinDirStat 2.5.0 binary first. The author says the code has not been reviewed, so treat it as experimental. GPL-3.0-or-later: crates/core/src/treemap.rs and palette.rs port WinDirStat 2.5.0 GPL-2.0-or-later code, so this is a GPL derivative rather than clean-room work, and the README says so.
• yazzang-homelab/blender-agent-sdk - REA Plain Python SDK for driving Blender from AI agents, with no MCP. Its grounding work is a REA and Ghidra pass over the stripped 174 MB Blender 5.2.2 binary, 301,393 procedures in about 70 minutes, cross-checked against the v5.2.2 source. GPL-3.0-or-later.
• E2-Veera/calendar-reconstruction - REA Proof-of-concept rebuild of macOS Calendar in Swift/SwiftUI: month, week, day and year views, events, multiple calendars and search. The behaviour comes from REA evidence (rea-agents 6.5.0) on Calendar.app, with summaries in evidence/rea/. The README says it contains no Apple code or assets and does not commit the extracted resources. No license file.
• soyrochus/mucrab - REA (partial) Rust port of muCommander's file-manager workflows (local, ZIP and SFTP browsing, copy, search, viewer, tabs), reconstructed from its published Java binaries. A pinned REA 6.5.0 probe inventories the JARs and checks class fingerprints; method recovery uses CFR and javap, not REA. Experimental. GPL-3.0.
• devtechedge/feature-heist - REA CLI that turns REA output into clean-room TypeScript rebuilds of single features, each checked against the original: a Markdown toggle from an MIT Electron app, the WETH9 contract from its bytecode, an npm search client from a HAR capture, Humanizer number words from the .NET assembly, and a function from a native ELF via Ghidra. The REA evidence is stored and hash-pinned, and every rebuild has a differential test. MIT.

• a-funk/open-appleremote - Claim? Makes the first-gen Apple TV Siri Remote work over Bluetooth on Linux. Pure Python standard library, MIT. Neither README nor post says which tool was used.
• grisuno/VSL-DSP - REA (partial) Linux kernel module for PreSonus AudioBox VSL sound cards. The repo predates REA; REA helped with some vendor-library findings only.
• Slyvan25/OpenGHub - Manual RE Linux-native Logitech G HUB replacement over HID++ 2.0. Reverse-engineered from captures and documented in docs/lighting.md. No AI or REA mention. MIT.
• cudanexus/vd-streamer-linux - REA Linux port of Virtual Desktop Streamer, built with Claude Code + REA. Not yet tested on a real headset.
• bitwisecook/quicken-2002-dumper - REA Python reader that exports Quicken 2002 QDF v3 databases, plus several companion files, to SQLite, so old ledgers can be read without Quicken. The README credits reverse-engineer-anything and AI assistance. Findings are checked with page checksums, record validation and cipher test vectors, but not yet against a trusted Quicken export. Public domain (Unlicense).

• NullLabTests/OpenBSD_netcat_REA - REA Static analysis of Ubuntu's netcat-openbsd 1.234-1 with REA and Ghidra. MIT.
• az9713/REA-demo - REA REA analysing its own installed package, with falsifiable predictions and a self-grade.
• REA discussion #1406 - REA Outside-in leak check of a production Next.js + Stripe app.
• REA discussion #2254 - REA Stripped bzip2 analysed and checked against an unstripped build.
• UnknownHacker1/rea-groundtruth - REA Compares REA's reports with the actual code and provides one-command repros. MIT.
• dagoSte/rea-safe-agents - REA Skill that contains REA and the receiving agent in two separate restricted Docker containers: no network, read-only roots, no capabilities, no Docker socket, and zero host mounts for the agent. Exposes 27 of REA's 207 tools through an allowlist, and shares only frozen, hash-approved copies of selected inputs with REA. Pins REA 6.7.0, Ghidra 12.1.4 and JADX 0.7.1. Linux and macOS are verified; Windows is experimental. MIT.
• lalbers/agent-sandbox - REA Runs Claude Code and REA in rootless Podman, or a libkrun microVM per command, for analysing untrusted binaries. The threat model assumes the sample compromises both the agent and REA, so they see no host paths you did not mount and have no network route of their own. Tested only on Fedora 44 with SELinux. MIT.
• Junhan2/reaproof - AI-RE Rates how exposed a shipped app is to agents such as REA, and closes what it can close: source maps carrying your original source, server keys, .env values and .git folders that ended up in the build output. Rates the result on its own "rea risk" scale and cross-checks its counts against aapt, dexdump, readelf, otool and @electron/fuses on 22 framework test apps. MIT.
• MockirDev/antirea - AI-RE The defensive side: a skill that puts "stop" directives in the instruction files agents read first, plus terminal shims and build hardening. It only stops agents that respect those files, and the README makes no measured claims. MIT.
• qybaihe/bla - REA Counter-REA hardening for your own builds: it plants decoys and pushes artifacts past REA's documented resource budgets while keeping runtime behaviour the same. The README separates results measured by running real REA (capacity or budget errors on ASAR, WASM, Go, EVM, PCAP, SQLite, model files and more) from its benchmark's token and cost figures, which are internal estimates. Ghidra-based paths were not tested. MIT.
• davepartner/anti-reverse-engineer-anything - AI-RE AREA, another defensive toolkit aimed at REA and the tools it drives (Ghidra, Frida, LLDB, DevTools and others): it strips what builds leak and closes debugging channels, with obfuscation and anti-debug steps. The README makes no measured claims. MIT.
• KoNit-K/papertrade-research - REA Independent research on Papertrade, a perpetual-futures protocol on HyperEVM: its frontend flows, contract bytecode, fees, liquidations and PAPER reward rules. REA cross-checks the client against the contracts, alongside the official docs and public code. Research preview, English and Chinese. Apache-2.0.

These projects came up alongside REA. Their READMEs do not say REA was used, so they are listed as background.

• storytold's Craft apps - Rebuild PhotoCraft (Photoshop-style, about 59k stars), WordCraft, GridCraft, VectorCraft, FilmCraft, LightCraft, PdfCraft, DeckCraft, CADCraft, EffectCraft, DesignCraft, SoundCraft and FigCraft. Clean-room rewrites, mostly alpha. WordCraft's AGENTS.md forbids disassembling the Word program, so it is a black-box rewrite. Only FilmCraft says it was "largely built" by agents. Dual MIT or Apache-2.0. ArtCraft is the pre-existing AI creation app in the same series, not a rewrite.
• AsyncFinn/rook - Rebuild Rust reimplementation of the Roblox engine, tested against Studio recordings. Early development. Apache-2.0.
• tallowmere/free-heroes4 - Rebuild C++23 reimplementation of the Heroes of Might and Magic IV engine. Needs GOG game files. Unfinished. GPL-3.0.
• designgears/wine-uwp - AI-RE Patches Wine to run Windows Store apps such as Shapr3D. Not clean-room: it uses Microsoft's own components. The AI claim comes from the author's X post. No license file.
• Universal Modder - AI-RE Claude Code / Codex plugin that mods games you own (for example, Minecraft content inside GTA V). A modding toolkit, not a reimplementation. MIT.
• Firefighter: DOS binary to Rust - AI-RE Eric S. Raymond recovered the Pascal logic of an old DOS game from its binary and rewrote it in Rust. The work predates REA. No public code found.
• Modern Warfare 2 decompilation - AI-RE Author reports 17 agents over three months, 83% of functions byte-matched. Code is not public.

• zhaofeng130/dsh-rea - DeepSeek Harness adapter that registers the REA Skill and tools.
• ya123-4/rea-dsh-plugin - DeepSeek Harness plugin that registers REA MCP tools.
• sheilacraig/dsh-rea-mcp - Config-only DeepSeek Harness bundle that mounts REA.
• cognixws/picode-rea - PiCode extension enabling REA's static-analysis tools. Pins rea-agents 6.1.0; current is 6.7.0.
• pablodiazjorge/rea-casebook - Claude Code mod that logs REA evidence and requires conclusions to cite real evidence_ids.
• laaielichter/reverseport - CLI + MCP for porting reverse-engineering results to Godot, Unity, Unreal and three.js. Note: its README says the analysis engine is "based on REA", and its notices say REA code is MIT-licensed. Treat it as a derivative of REA, not an independent tool.
• Nowng/rea-mcp - LM Studio plugin that wraps the original REA MCP server, for local models. It clones REA at runtime.
• sickpyramid/ReaFuse - Builds on REA to fuse two JS/TS source projects. v0.1, alpha.
• dav1dngy/era-agent - Evidence-driven reverse-engineering agent with a self-improvement lab. Experimental, v0.1.0.
• alexmi256/rea-agent-docker - Docker images for REA. Four variants: Ghidra + Hopper, ghidra, hopper, and ida. The IDA image does not ship IDA itself. Linux/amd64 only.
• utabk/marrow - Desktop GUI for REA on macOS, Windows and Linux (formerly REA Studio). Native binaries open in a classic code browser with listing, decompiler, function graph and symbol tree, and every REA tool gets its own form. Everything shown comes from REA's own answers; it runs the REA you install. Independent, MIT.
• JuanDiegoRuiz22/ReaAgents - 🇪🇸 Isolated, hash-pinned install of rea-agents 6.8.0 for Claude Code on Windows: a portable Node, an isolated launcher, project-only MCP registration, restrictive Claude Code permissions, a network monitor and a security audit of the pinned version. Unofficial, MIT.
• ahmedmetered/anyrea - Registers REA's MCP server with any agent that reads MCP configuration and installs its workflow skill into any agent that reads SKILL.md. On an unsupported Node version it warns instead of refusing. Early, MIT.
• moonfruit/homebrew-tap - One person's Homebrew tap. Not in homebrew-core.
• czcdr/dsh-plugin-rea - Third-party adapter that brings the morluto/rea MCP server into DeepSeek Harness as mcp__rea__* tools. Version 2.x installs the REA CLI, JDK and Ghidra for you.
• ShadowSwaps/REA-Reconstruction-Companion - Agent Skill that turns REA findings into a specification, architecture, plan and validation steps for rebuilding an app, feature or format.
• aicodeking/leanrea - AI-RE One 8 KB skill file that replaces the REA MCP layer and drives the same tools directly through the shell. Ships a 36-run benchmark: against REA 6.5.0 it used 38 % less wall time, 35 % less cost, 56 % fewer turns and 60 % fewer tokens at the same accuracy, while loading 34.5k tokens of context instead of 400.7k. Caveats: three reps per cell, one model, one machine, and Ghidra, Hopper and JADX absent from both arms. MIT.
• nesaon03/XYREVERSE - AI-RE Agent skill pack covering IDA, Ghidra, kernel drivers, .NET, IL2CPP, Unreal, Frida, x64dbg and REA. MIT.
• kandada/rea-python - AI-RE Unofficial Python port of REA, written because the author's Python-based agent products needed native integration. Not endorsed by the upstream authors. MIT.
• Fractal-Tess/rea-flake - AI-RE REA packaged for Nix. MIT.
• cranebeaker/coop-anything - AI-RE MCP server, playbook and agent skills that have a coding agent add co-op to a single-player game: look for existing co-op mods, reverse-engineer the game if needed, test with bots, and package it for Steam. Suggests pairing it with a reverse-engineering MCP such as REA, GhidraMCP or ida-pro-mcp. Every player needs their own copy, and it does not touch anti-cheat or online services. MIT.

• AlicanAkyol/blindsight - AI-RE GhidraMCP/Ollama regression harness for triage findings, delivered-code coverage and tool writes. A pilot with two synthetic ELF fixtures and one model; no REA integration. Apache-2.0.
• ringozzt/rea-research - 🇨🇳 Chinese technical research: architecture, evidence model, what DX-Ball's numbers mean, trust model, and the gap between stars and installs. Unlicensed, data from 10-11. Read this first.
• pablodiazjorge/rea-lab - 🇪🇸 Setup, exercises and tool evaluation on Windows with Ghidra. Five preregistered studies, 482 runs, and the most decision-relevant evidence in this list. Study 1: Claude Code solved 28 of 30 crackmes with and without REA, but REA runs took about twice as long and cost more. Study 2: on harder binaries, 11 of 24 runs solved without REA against 4 of 24 with it, again at about twice the time and cost; the author labels the difference not significant (exact McNemar, p = 0.092). Studies 3 and 4 found no significant difference either. Study 5: REA's official skill changed nothing measurable against no skill, and the author's improved version made runs 14 % more expensive than the official one. Use REA for targeted questions on a known surface, not open-ended exploration.
• jinshi666888/rea-playbook - 🇨🇳 Hands-on lab: a minimal Electron target, evidence extraction with file:line references, and an MCP probe.
• valorisa/Reverse-Engineer-Anything - 🇫🇷 Unofficial French guide, including the legal framework.
• REA: Reverse Engineer Anything with AI Agents & MCP (HoangYell) - Introduction.
• Reverse Engineer Anything: What the Viral REA MCP Actually Does (MindStudio) - What REA does, without the hype.
• Agentic Reverse Engineering: What REA Is and How to Start (El Solitario) - Getting started.
• How To Use REA To Clone Any Software In Minutes (Eric Tech, YouTube) - Video tutorial.
• inematds/rea-engenharia-reversa - 🇧🇷 Guide to REA in Portuguese, English and Spanish, with links, cases, an honest assessment and a test run.
• ZooHero500/reatool - Unofficial REA tutorials and comparisons for installing and using it with coding agents. Not affiliated with morluto.
• JoasASantos/REA-Prompts - Prompt collection for REA, covering native binaries, firmware, games, Android, Electron and websites. Its cloning prompts are framed as clean-room work, and its licensing and cracking-research prompts ask for documentation only, not bypasses. MIT.

Tools that REA drives, or tools in the same category.

• mrexodia/ida-pro-mcp - MCP server for IDA Pro, used by REA's IDA Pro profile. Its author now recommends the official HexRaysSA/ida-mcp.
• 0xshlomil/ida-free-mcp - Native bridge for IDA Free, used by REA (see docs/ida-provider.md).
• LaurieWired/GhidraMCP - MCP server for Ghidra. REA calls Ghidra's analyzeHeadless directly, so this is a peer tool, not a dependency.
• N0zoM1z0/touhou-reverse-engineering - AI-RE Evidence-first IDA + Codex notes, including runtime patch experiments. No REA mention.

• sqwu/rea-gems - Daily-updated gallery of REA cases, built from official pages, GitHub, HN and Reddit. Includes some mirror clones; check before use.
• miles990/rea-case-rankings - Daily scored ranking of REA cases with JSON, RSS and llms.txt (formerly rea-awesome).
• kaixinbaba/awesome-rea - Catalog of reverse-engineering, reimplementation and compatible alternatives (awesomerea.com). REA is not required.
• zhuyansen/awesome-ai-reverse-engineering - AI reverse-engineering tools, each with a security rating. Bilingual.
• DiscoverBox/awesome-ai-reverse - 🇨🇳 AI-assisted reverse-engineering tools across MCP, Skills, plugins and agents.
• songshikang0111/awesome-REA-cases - Tracks REA and AI reverse-engineering cases several times a day. 627 cases as of 2026-10-20, each marked as confirmed-REA or not, with categories and a search index. English by default, with a Chinese edition.
• Asymmetrical-1024/awsome-REA - 🇨🇳 REA case collection with post screenshots, evidence excerpts and verification limits.
• yibie/awesome-rea - Only includes AI decompilation and porting cases with stated acceptance tests.
• heaven-hm/awesome-reverse-engineered-games - AI-rebuilt games.
• SubmitGame/awesome-decomp-games - Decompiled games, many playable in the browser. CC0-1.0.
• morluto/awesome-reverse-engineering - Curated general reverse-engineering tools and learning resources for binaries, applications, firmware, file formats and protocols, maintained by REA's own author. Organised by the task you want to do rather than by tool. It already runs its own weekly link check in CI. CC0-1.0.
• reacher-z/Awesome-REA - Bilingual catalogue of reverse-engineering tools, reconstruction projects, case studies and research papers across websites, games, apps, binaries, firmware and protocols, with a searchable site and a separately labelled automated repository index. MIT.

• Hacker News: Reverse engineer anything with agents, from app behavior down to native binaries
• GitHub discussion: reducing token waste in REA workflows
• GitHub discussion: install notes and pitfalls on Fedora-family Linux
• GitHub discussion: Linux benchmarks (Node 22/24/26 startup and five local models)
• Startup Fortune
• Cybersecurity News
• CyberPress
• RuntimeWire
• MayhemCode

The by-app index lists alternatives by the app they replace.

More posts, roundups, critics and press are in Press and posts about REA.

REA's rise has also brought controversy. Keep these in mind when you use or share a case:

• Clean-room claims: critics note that one agent doing both analysis and rebuilding does not meet the personnel separation of traditional clean-room development.
• Scope: the official project does not claim to recover original source code or clone a whole application. DX-Ball's 3,205 / 63 figures apply to one function (see rea-research).
• Privacy and trust: analysis runs locally, but tool results pass through the agent to the model provider. SECURITY.md says REA is not a sandbox.
• Commercial tools: IDA Pro, Hopper and JEB must be legally licensed. REA provides no licenses.
• Service terms: Anthropic's and OpenAI's terms prohibit reverse-engineering their own services. They do not cover other software, but cases that target Claude Slides, Claude Code, Claude Chrome or Codex's browser feature should be checked against the terms yourself.
• Official position: DISCLAIMER.md lists permitted uses: learning, research, interoperability, preservation, security research, vulnerability disclosure, and CTFs. It excludes copying proprietary software or reproducing its protected code and assets. See DISCLAIMER.md.

This list does not accept projects whose main purpose is bypassing licensing, copying paid features, or distributing copyrighted assets.

Beware of fake downloads: GitHub has repositories that claim to offer an "official free download" of REA as zip files. The official channels are morluto/rea, rea.tools and the npm package rea-agents (npx rea-agents setup). Do not run archives or executables from anywhere else.

Suggestions are welcome as issues or pull requests. Inclusion rules:

1. Prefer open-source projects with a source link. Cases without code belong on the X page.
2. A community case needs evidence that REA was used (the README, the author's post or an official showcase). Otherwise it goes in "The wider wave".
3. One line per entry: - [Name](link) - what it does, and its tag.
4. No mirrors, pure forks, or projects whose main purpose is infringement or bypassing licensing.
5. Takedown requests: open an issue with the project name and reason. We will remove the entry and keep the evidence archived.

• Every REA tag needs a source: the project README, the author's post or the official showcase. Each one has an evidence row in Did it really use REA?.
• scripts/validate_list.py runs on every pull request. It checks tags, licenses, that the English and Chinese lists match, anchors, the table of contents and known mirrors.
• A link check runs on every pull request and on a schedule (links.yml).
• A daily search collects candidate repos into one issue. Nothing is added automatically: a maintainer reads each source and tags it by hand.
• Numbers carry the date they were checked, and every change ships in the weekly digest.

Thanks to @Rakesh-7989 for the CI, the validator rules and the English X page, @AlicanAkyol for blindsight, and everyone who submitted a case through the issue form.

If this list saved you a search, a ⭐ helps the next person find it. New cases arrive every week in the weekly digest.