MCP.Market

Corvus MCP server

by Albasha0x0·io.github.Albasha0x0/corvus·v2.10.0
No reviews yet

Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.

A88/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A88/100

not scanned yet

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Corvus yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Corvus tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How Corvus compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 85% of 915 Security servers

Release history: 9 versions in the registry since 2026-10-14, latest 2026-11-03, typically one every 2 days.

Install Corvus in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the Corvus repository's README, as published. We do not edit it. Read it on GitHub

Corvus

Reverse engineering for AI agents. Corvus is an MCP server that lets your agent read, trace, compare and patch compiled programs: .NET assemblies and native PE, ELF and Mach-O binaries. One self-contained binary, no runtime to install, nothing executed, nothing uploaded.

[!NOTE]

Corvus is under active development. Tools, parameters and output can change between releases; breaking changes are

listed in the release notes. Bug reports and feedback are welcome in

issues.

Quick start · How it works · What you can analyze · Showcases · Why Corvus · Documentation

Quick start

Windows (PowerShell):

irm https://raw.githubusercontent.com/Albasha0x0/Corvus/main/install.ps1 | iex

Linux / macOS:

curl -fsSL https://raw.githubusercontent.com/Albasha0x0/Corvus/main/install.sh | sh

The installer verifies the download against the release's SHA256SUMS and registers Corvus with the MCP clients it finds. Restart your client and ask:

Load app.dll with Corvus and explain how it validates a license key. Cite the methods you read.

From a terminal: corvus decompile_member --load app.dll member=Ns.Type::Method (command line).

How it works

Your agent calls Corvus over MCP. Corvus answers with bounded, structured results: every list pages, every error names the next step, and long results are kept for read_result. The agent follows calls and references, explains the behaviour, and can patch a copy and save it.

Native code is analyzed by Corvus's own engine (x86, x64, ARM32, ARM64), with IDA or Ghidra as optional decompilers when installed. Their databases and output are kept, so the second question about a binary is fast.

What you can analyze

Full list: features and the tool reference (155 tools, 13 prompts).

Showcases

warnings as errors, runs with the same output, and is measured against the original.

  • Decompile, rebuild, run: an assembly exported as a C# project that builds with

it, its assemblies extracted byte for byte.

  • Inside a single-file app: a .NET single-file executable unpacked without running

Each step in the showcases and guides is checked by a test.

Why Corvus

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Corvus: common questions

Is Corvus MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Corvus safety report
Does Corvus need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Corvus maintained?
The last commit was 21 days ago (2026-10-14). The latest release is v2.10.0.
What can I use instead of Corvus?
Servers from other publishers that do the same job: Reversecore MCP server, CrowdStrike Falcon MCP Server and Wireshark MCP server.

Alternatives to Corvus

Same job from other publishers: the closest match first, then the best rated.

  • Reversecore MCP
    Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
    B
  • CrowdStrike Falcon MCP Server
    Connects AI agents with CrowdStrike Falcon for security analysis and automation.
    A
  • Wireshark
    Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
    A
  • Virustotal
    MCP server for querying VirusTotal API with comprehensive security analysis tools.
    B
  • Virustotal
    MCP server for querying VirusTotal API with comprehensive security analysis tools.
    B