rexd-frida-mcp

Agent-driven reverse engineering over Frida

rexd-frida-mcp is a local MCP server and raw bridge for process inspection, memory editing, symbol lookup, range scanning, and runtime hooks. It is built to let agent clients drive a target process through a small, typed tool surface instead of arbitrary scripting.

Read the README MCP setup

Tool surface

Attach, spawn suspended, enumerate modules and ranges, read and write memory, scan patterns, resolve symbols, and install hooks.

MCP-first

Works as a local stdio MCP server for Codex, Claude Code, and other compatible clients.

Visible demo target

Includes a native Windows UI program that displays a live integer so memory edits can be verified immediately.

Quick start

npm install
codex mcp add rexd -- node <ABSOLUTE_PATH_TO_REPO>\src\mcp-server.mjs

Example prompt

Use the `rexd` MCP server.

Attach to the running `number_target.exe` process.
Find the displayed number in memory and change it to `100`.
Prefer using the PID or memory address shown in the window title if available.
Report the exact MCP tool calls you used and the final value you confirmed.

Repository