Rikugan (六眼) — AI Reverse Engineering Agent

Philosophy

Not another MCP client.

Rikugan is a full agent — its own agentic loop, context management, role prompt, and in-process tool orchestration. It doesn't talk to your disassembler through a server — it lives inside it.

User Message

LLM Stream

Tool Execution

Yield Events

Next Turn

Features

Everything you need for AI-assisted RE

🔧

63+ Native Tools

Navigation, decompiler, disassembly, xrefs, strings, annotations, type engineering, microcode/IL read+write, and scripting — all callable by the agent.

🎯

12 Built-in Skills

Malware analysis, deobfuscation, vulnerability audit, driver analysis, CTF solving, and more. Create your own custom skills too.

🤖

5 LLM Providers

Anthropic (Claude), OpenAI, Google Gemini, Ollama for local inference, and any OpenAI-compatible API endpoint.

🔍

Exploration Mode

4-phase autonomous flow: Explore the binary, Plan modifications, Execute patches, Save with approval gate. Full undo support.

📋

Plan Mode

Multi-step workflows with plan generation, user approval, and step-by-step execution with progress tracking.

↩️

Mutation Undo

Every database mutation is tracked with reverse operations. Type /undo to roll back renames, comments, type changes, and more.

💬

Multi-Tab Chat

Multiple independent conversations per file. Fork sessions to branch analysis from a checkpoint. Auto-save across restarts.

🔌

MCP Client

Connect external MCP servers — their tools appear alongside built-in ones. Full JSON-RPC 2.0 with heartbeat monitoring.

🛡️

Script Approval

execute_python always asks permission. See the full code with syntax highlighting before allowing execution.

📤

Chat Export

Export conversations to Markdown with syntax-highlighted code blocks. Tool calls formatted with proper language tags.

🧠

Persistent Memory

RIKUGAN.md stores facts per binary. Findings persist across sessions. The agent remembers what it learned before.

Skills

Specialized analysis workflows

Type / to see available skills with autocomplete. Create custom skills in your user directory.

/malware-analysisWindows PE malware triage, IOCs, ATT&CK

/linux-malwareELF malware analysis & persistence

/deobfuscationString decryption, CFF, opaque predicates

/vuln-auditBuffer overflows, fmt strings, memory safety

/driver-analysisWindows kernel driver analysis

/ctfCapture-the-flag challenge solving

/generic-reGeneral reverse engineering

/ida-scriptingIDAPython API reference

/binja-scriptingBinary Ninja Python API

/modifyAutonomous binary modification

/smart-patch-idaIDA-specific binary patching

/smart-patch-binjaBN-specific binary patching

Exploration Mode

4-phase autonomous binary modification

Type /modify <goal> and the agent autonomously explores, plans, patches, and saves — with your approval at every gate.

1

EXPLORE

Investigate binary, accumulate findings in KnowledgeBase

2

PLAN

Synthesize findings into concrete modification plan

3

EXECUTE

Apply patches in-memory for each planned change

4

SAVE

User approval gate before persisting changes to file

Providers

Choose your LLM

Switch providers anytime from the settings panel. Supports prompt caching, retry logic, and streaming.

Anthropic

Claude • OAuth auto-detect • Prompt caching

OpenAI

GPT-4o, o1, o3 • Standard SDK

Google Gemini

Gemini Pro • google-genai SDK

Ollama

Local inference • No API key needed

OpenAI-Compatible

Any custom endpoint • Custom base URL

Under the Hood

Deeply engineered internals

Rikugan has a sophisticated architecture built for reliability, extensibility, and safety.

🔄

Agentic Loop

Generator-based turn cycle with streaming events

📡

TurnEvent System

23 event types for UI communication

🧰

Tool Framework

@tool decorator, coercion, timeout, categories

🔍

Subagents

Isolated context for parallel task execution

↩️

Mutation Tracking

Full reverse operation for every mutation

📊

Context Window

Auto-compaction at 80% threshold

🧵

Thread Safety

@idasync marshalling, queue-based answers

💾

Session Persistence

Auto-save/restore across restarts

🛡️

Error Recovery

Retry with backoff, consecutive error tracking

📝

Structured Logging

JSONL + debug file + IDA output

Read Full Architecture Docs

A reverse-engineering AI agent for IDA Pro and Binary Ninja that lives inside your disassembler.

Ready to get started?