GhidraMCP

GhidraMCP

GhidraMCP is an MCP server for Ghidra that enables LLMs to automatically reverse engineer applications.

MCPDevOpen source
Type
MCP
Transport
http
Open source
Yes
GitHub Stars
★ 9.3k
Source
mcp-github

Overview

GhidraMCP is a Model Context Protocol (MCP) server that exposes Ghidra's core functionalities to MCP clients. With this capability, AI can automatically decompile and analyze binary files, rename methods and data, and list information such as methods, classes, imports, and exports. To access this functionality, you need to install Ghidra and Python3, and configure the MCP SDK. Suitable for developers and researchers requiring reverse engineering and binary analysis.

Capabilities

  • Decompile and analyze binary files
  • Automatically rename methods and data
  • List methods, classes, imports, and exports

Use cases

Automatic reverse engineeringBinary file analysisCode auditing

Setup

Requires: GhidraPython3MCP SDK
1. Download and install Ghidra;
2. Install Python3 and MCP SDK;
3. Download the latest version of the GhidraMCP plugin from GitHub and import it into Ghidra;
4. Configure the plugin and restart Ghidra.

This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.

FAQ

How do I configure the GhidraMCP plugin?

In Ghidra, select `File` -> `Install Extensions`, then import the downloaded plugin file.

Which MCP clients are supported?

Theoretically, any MCP client is supported; examples include Claude Desktop, Cline, and 5ire.

Related skills