trenchcoat
Free · no sign-up
Website report · 15 Oct 2026

rea.tools

“The code reader — Reverse Engineering for Your Coding Agent”

Template-written 13 evidence items Code reader analysed 6 scripts
What this means for you

The code reader talked to 2 outside services on a first visit, including 1 that measures visits or shows ads.E6

  • Tech check: the site mentions a working app / platform, but we found nothing behind it in what its public page loads.E12
  • What loads is a page only: no calls to its own backend, no wallet code, no contract calls, no AI services and no live connections.E13
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E6

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

A working app / platform

“…val, then verify the installation. Or run this in your terminal: npx rea-agents@latest setup Copy Approve the setup pl…”E12

No matching code, calls or services in what loaded for us.

Calls its own backend none seen
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What loads is a page only: no own backend calls, wallet code, contract calls, AI services or live connections.E13

The real tech may live elsewhere. This page links to: github.com/morluto/rea · check the code github.com/wayou/t-rex-runner · check the code github.com/microsoft/calculator · check the code

What it is

  • The site describes itself as: “Reverse engineer apps, binaries and browser behavior with your coding agent. Follow clear guides and try interactive examples with REA.”E2
  • In your browser it can copy text to your clipboard.E8
  • It has sections such as /get-started, /showcase, /blog, /guides, /faq and /contributors.E11

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E6
Not identifiedServices we don't have in our list yet. 1
api.github.comnot identified 1×E7

How key features work

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E9

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E6

Cloudflare Web Analytics

Pages and API calls

Pages it links to

//get-started/showcase/blog/guides/faq/contributors/zh-CN/zh-TW/ja/ko/tr/ru/vi/th/de/es/fr/uk/pl/pt-BR/ar/fa/id/it/el/examples/assets/first-investigation

Endpoints

Called while loading (seen) or named in the code (code).

api.github.com/repos/morluto/reacodeE10

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: The code reader — Reverse Engineering for Your Coding Agent
page title · https://rea.tools/
E2
Page description: Reverse engineer apps, binaries and browser behavior with your coding agent. Follow clear guides and try interactive examples with REA.
page description · https://rea.tools/
E3
Site name: REA
page site_name · https://rea.tools/
E4
Main heading: Find out how software works.
page h1 · https://rea.tools/
E5
10 request(s) to rea.tools
types: 6 script, 1 document, 1 stylesheet
GET https://rea.tools/ · script · 10 requests · network recording
E6
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/v4bc70e2c01a94c73b74392e4234840661791215815920 · script · network recording
E7
1 request(s) to api.github.com
types: 1 fetch
GET https://api.github.com/repos/morluto/rea · fetch · network recording
E8
Uses the browser ability: clipboard_write
can copy text to your clipboard
rea.tools/assets/main.js @ 20:27 · “clipboard.writeText(” · pattern scan
E9
Uses the browser ability: canvas
draws graphics on a canvas
rea.tools/assets/dino-demo.js @ 8:26 · “getContext("2d"” · pattern scan
E10
Code reader found the endpoint api.github.com/repos/morluto/rea
how: call:fetch
rea.tools/assets/main.js @ 145:29 · “api.github.com/repos/morluto/rea” · The code reader analyze-web-bundle 6.4.0
E11
35 links to pages on the same site
page links · https://rea.tools/ · /, /get-started, /showcase, /blog, /guides, /faq, /contributors, /zh-CN, /zh-TW, /ja, /ko, /tr
E12
The site says: “…val, then verify the installation. Or run this in your terminal: npx rea-agents@latest setup Copy Approve the setup pl…”
page text · https://rea.tools/ · …val, then verify the installation. Or run this in your terminal: npx rea-agents@latest setup Copy Approve the setup pl…
E13
12 requests on load: no own backend calls, wallet code, contract calls, AI services or live connections
GET https://rea.tools/ · summary · 12 requests · network recording

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id ydxZJyyA.