Every App Is Open Source runs on your own machine — the client starts it, so there is no endpoint to ping. 3 541 installs a week from pypi. Last commit 24 Oct 2026.
Native reverse engineering with Ghidra and evidence on Apple Silicon macOS. Setup required.
We read the source, 1 d ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
process = subprocess.run([sys.executable,'-I',str(Path(__file__).with_name('calculator.py'))],
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return repr(eval(compile(tree, '<calculator>', 'eval'), {'__builtins__': {}, **NAMES}, {}))
subprocess.run(['/usr/bin/ditto','-x','-k',str(archive),str(staging)],check=True)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add every-app-is-open-source -- uvx every-app-is-open-source
{
"mcpServers": {
"every-app-is-open-source": {
"command": "uvx",
"args": [
"every-app-is-open-source"
]
}
}
}
[mcp_servers.every-app-is-open-source]
command = "uvx"
args = ["every-app-is-open-source"]
{
"mcpServers": {
"every-app-is-open-source": {
"command": "uvx",
"args": [
"every-app-is-open-source"
]
}
}
}
{
"servers": {
"every-app-is-open-source": {
"type": "stdio",
"command": "uvx",
"args": [
"every-app-is-open-source"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
EAOS_RUNTIME_DIR (Optional custom Java/Ghidra directory. Use the same value when running eaos setup).
Revisable general-purpose models with opt-in story and ideation add-ons. Rust engine required.
Durable, build-scoped reverse-engineering evidence memory and query tools for AI agents.
A sandboxed MCP tool for reverse engineering with multiple tool integrations
A sandboxed MCP tool for reverse engineering with multiple tool integrations
Reverse-engineering tools for agents over MCP/A2A, with evidence-carrying findings.
Public hazard, water, weather and EPA data with source, age and licence on every reading.
Measure Wine and macOS programs' GPU use on Apple silicon with Metal System Trace
Reverse-engineering evidence from a running Windows process, not the binary on disk.
Answers built from our own checks of this server.