BinSight MCP server
io.github.Alessiolucini/binsight·v6.6.0·1 starsThe AI X-ray for any file: what is it, what does it hide, what changed. Built on REA.
1 stars76 downloads/wk
Reviews
Write oneNobody has reviewed BinSight yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
BinSight tools (3)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
address_to_file_offsetMap one provider-normalized virtual address to its original nonnegative file offset. Hopper verifies the original bytes against the selected executable digest and translates FAT image-relative offsets using the loaded header. Results preserve the provider coordinate, image base, and source path. Unmapped addresses fail explicitly; changed or unavailable sources return typed errors retaining native
read_bytesRead analyzed bytes from one provider-normalized virtual address. The hexadecimal payload reports the exact returned length; incomplete reads remain explicit and unsupported provider APIs return typed capability unavailability.
search_bytesFind masked byte signatures in initialized analyzed memory. Hex byte pairs and ?? wildcards are supported; an optional equal-length hex mask selects bits. Bounds are inclusive. Matches are ordered by provider address and never span blocks. Coverage describes this page; reuse the same query with next_cursor to continue. Uninitialized blocks are listed separately. Ghidra only; Hopper is unavailable.
Public scan report
scanner v0.1.10 · 2026-10-28 · same rubric, same numbers if you re-run it
- Code scan1500 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/domain/javascript/javascriptSemanticCalls.js: …utput); }; /** * `with (o) { … }` and `eval("…")` decide at runtime which bindings e…
How BinSight compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 70% of 48,255 servers
- Tools
- 3
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 76
- more than 56% of 12,191 servers with a package
What its tools let an agent do: 2 read · 1 create
Install BinSight in Claude Code, Cursor or VS Code
Runs npx -y binsight on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add binsight -- npx -y binsight
What the publisher says
From the BinSight repository's README, as published. We do not edit it. Read it on GitHub
BinSight
The AI X-ray for any file. Point it at a binary and ask: what is it, what does it hide, and what changed?
Offline · cross-platform · with evidence. It never runs the file.
Built on REA (morluto/rea) · MIT
Most files are black boxes: an .exe you downloaded, a firmware dump, a driver, a game, an ECU calibration, an app update. BinSight opens the box — statically, on your own machine, without ever running the file — and answers the three questions that matter, in plain language and with the evidence to back them up.
You: What is this file? Is it hiding anything? And what changed vs the old version?
BinSight: PE/Windows x64, compiled with MSVC, UPX-packed (entropy 7.9),
imports consistent with network + process injection, Authenticode
signature present, and vs the previous build 3 regions changed —
here are the offsets. All static, all offline, with evidence.The three questions
🔎 What is it?
triagefile and inspectexecutable read ELF, PE/Windows and Mach-O (and raw blobs) and tell you the type, architecture, entry point, imports/exports, sections, hashes, and a compiler/packer fingerprint — without starting Ghidra or IDA, on macOS, Windows or Linux.
🕵️ What does it hide?
detectbinarytoolchain, measurebinaryentropy, classifyimportcapabilities, identifycryptoconstants, extractbinarystrings, inspectcodesignature and scanembeddedcontent surface packing, high-entropy regions, imported capabilities (network, process, crypto…), IOC strings, embedded files, and whether a signature is real — reported as evidence and inference, never as a verdict.
🔁 What changed?
comparebinaries diffs any two files byte-for-byte and explains the change — which regions moved, what was zeroed or maxed out, the before/after values. Works on app updates, drivers, firmware and ECU calibration dumps alike. compareexecutables adds import/export/section/hardening deltas for executables.
All 17 tools
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
BinSight: common questions
- Is BinSight MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the BinSight safety report
- How do I install BinSight?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does BinSight need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is BinSight maintained?
- The last commit was 10 days ago (2026-10-25). The latest release is v6.6.0.
- How does BinSight compare with other MCP servers?
- safety score 85/100 (higher than 70% of 48,255 servers); tools 3 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.