MCP server exposing the rizin (radare2 successor) CLI for static binary analysis.
| Tool | What it does |
|---|---|
check_rizin |
Confirm rizin + rz-bin are installed |
get_file_info |
rz-bin -I — arch, bits, type, pic, canary, nx, etc. |
list_imports_exports |
rz-bin -i / -E — symbol tables |
list_strings |
rz-bin -z/-zz/-zzz — ASCII / UTF-16 / all |
analyze_function |
aa + afl — list all functions |
disassemble_function |
pdf — full disassembly of one function |
decompile_function |
pdc — pseudo-C decompile (lower quality than IDA/Ghidra) |
get_xrefs |
axt / axf — cross-references |
search_bytes |
/x — hex pattern search |
find_crypto_constants |
Detect AES / SHA / CRC tables |
emulate_esil |
aefi — ESIL emulation |
get_cfg_graph |
agf — DOT-format CFG |
# System dependency
apt install rizin # Debian/Ubuntu
brew install rizin # macOS
scoop install rizin # Windows
# Python
pip install -e ./servers/re-rizinre-rizinv1 re-ai had no rizin wrapper — it tried to do all this with pefile + capstone + a hand-rolled RAG store. That's exactly the kind of complexity Claude Code is bad at, and the re-ai team (us) was bad at. This server just lets Claude Code ask rizin to do its thing.