DEDUPED Hot AI repos, turned into use cases Get 5 a day

How to let an MCP-capable agent query a binary headlessly with Recurse

Expose the Recurse engine to an agent such as Claude Code through the standalone MCP stdio server.

Authorization notice. Recurse is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Reverse engineering. The MCP server gives an agent full read access to the binary, so only connect it to samples you are allowed to analyze.

Who it is forA reverse engineer who already works in Claude Code, Cursor or Claude Desktop and wants the agent to inspect a binary without opening the desktop app.

The problemPasting disassembly into a chat agent gets messy on real binaries, and the agent may invent addresses.

The outcomeThe agent reads functions, xrefs, strings and imports from the real engine state and cites addresses that exist in the binary.

What you need first

  • Node.js 20 or newer and npm 10 or newer
  • Rust 1.77 or newer with cargo, installed through rustup
  • Linux system packages for Tauri (libwebkit2gtk-4.1-dev and the others listed in the README) if you build the desktop app on Debian or Ubuntu
  • A binary you are allowed to analyze
  • An OpenAI-compatible API key (for example OPENROUTER_API_KEY) if you want the chat agent to run

Steps

  1. Clone the repository and install Rust 1.77 or newer with rustup.
  2. Build and run the MCP server from the workspace root with cargo run -p recurse-mcp. (inferred, check the README)
  3. Register the stdio server in your MCP-capable agent, such as Claude Code, Cursor or Claude Desktop, following that agent's own MCP setup steps.
  4. Ask the agent to list functions in the target and then fetch disassembly for one of them.
  5. Check that every address the agent cites appears in the function list or the xrefs output.

Prompt for your agent

Connect to the recurse-mcp stdio server from the Recurse repo at <repo path>. Using the engine tools, list the functions in <target path>, pick the three largest, and report their start addresses and any cross-references. Verify each address against the function list before reporting.

Caveat. The README names Claude Code, Cursor and Claude Desktop as MCP clients, but it does not give the exact server run command, so confirm it from the crate before relying on it.

Share: X LinkedIn Hacker News Email Copy link

Disclaimer

Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page