ghidra-mcp

ghidra-mcp

Ghidra MCP Server provides over 200 tools for AI-driven reverse engineering.

MCPDevOpen source
Type
MCP
Transport
stdio
Open source
Yes
GitHub Stars
★ 2.6k
Source
mcp-github

Overview

Ghidra MCP Server is a production-ready Model Context Protocol (MCP) server that bridges Ghidra's powerful reverse engineering capabilities with modern AI tools and automation frameworks. It offers 251 MCP tools, battle-tested AI workflows, and the most comprehensive Ghidra-MCP integration, including P-code simulation, real-time debugger integration, and PCode-graph data flow analysis. The tool supports full write access, enabling renaming, typing, annotating, creating structures, executing scripts, and more. Ideal for developers and teams tackling complex reverse engineering tasks.

Capabilities

  • 251 MCP tools
  • Full write access
  • P-code simulation
  • Real-time debugger integration
  • PCode-graph data flow analysis
  • Cross-binary document transfer

Use cases

Reverse engineeringCode auditingMalware analysisAutomated code review

Setup

Requires: Python 3.10-3.13Java 21Ghidra 12.1.2
Refer to the installation guide in the GitHub repository: https://github.com/bethington/ghidra-mcp

This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.

FAQ

Which versions of Ghidra does Ghidra MCP support?

Supports Ghidra version 12.1.2.

How do I run the Ghidra MCP Server?

It can be run in headless mode or GUI mode, and supports Docker deployment.

Related skills