Questions,
answered.
The ones people actually send us.
Is this legal? Do I need my own IDA license?
The platform is licensed per instance from Hex-Rays. You are renting access to a properly licensed IDA Pro installation, so there is nothing here that gets your employer a letter.
What can my agent actually do?
Everything the MCP server exposes: survey a binary, decompile functions to pseudocode, list xrefs and strings, batch-rename, propagate types, generate signatures, trace data flow across calls, and run arbitrary Python inside IDA via py_eval. Your client sees 66 tools on connect.
Which clients work?
Anything that speaks MCP over HTTP with SSE — Claude Code, Claude Desktop, Cline, Cursor, or raw curl if you enjoy suffering. The dashboard prints copy-paste config for the common ones.
Can my samples leak out?
Instances have no internet egress by default — outbound is dropped at the host firewall. The one exception is deliberate: the agent can ask for temporary access, and you get a prompt showing its reason. You approve or refuse, the grant is scoped to your container alone, and it closes itself when the timer runs out. You can also slam it shut early from the agent panel. Nothing opens without you clicking it.
How long does an instance live?
Until you destroy it, or until it sits idle for 60 minutes. Busy sessions are never reaped mid-analysis. Destroying wipes the container and its storage — export your .i64 first, we are not going to un-delete it for you.
What happens when the agent chat fills its context?
The chat warns near ~75% of the model window and offers a one-click new chat. Tool results are truncated server-side so one enormous decompile cannot blow the window on its own.
Does it work on a phone?
The panel does. The VNC desktop technically works and is a miserable way to reverse anything. Bring a keyboard.
Can I get root or install my own tooling?
Yes, inside your own container. The agent has a run_shell tool, so you can ask it to unpack an archive, run strings or readelf, or check what is installed. It runs in your container’s namespace and cannot reach the host or anyone else’s instance. Combined with py_eval inside IDA, there is very little you cannot do.