G

Ghidramcp

GhidraMCP is a model context protocol server designed for LLM, supporting autonomous reverse engineering applications and providing Ghidra's core functional tools.
0 points
4.4K

What is GhidraMCP?

GhidraMCP is a bridge connecting the Ghidra reverse engineering tool and LLM models. It enables AI models to directly call Ghidra's functions, such as decompilation, method renaming, and code analysis, through the MCP protocol to achieve automated reverse engineering.

How to use GhidraMCP?

To use GhidraMCP, you need to install the Ghidra plugin first and then connect through an MCP client (such as Claude, Cline, etc.). The client can send commands to the server, and Ghidra will execute the corresponding operations and return the results.

Applicable scenarios

It is suitable for scenarios that require automated analysis of binary files, such as malware analysis, vulnerability mining, and legacy code analysis. It is particularly suitable for tasks that require large - scale reverse engineering combined with AI capabilities.

Main features

Decompilation functionCan decompile binary code into a high - level language representation
Automatic renamingAutomatically rename methods and variables to improve code readability
Method listList all methods and classes in a binary file
Import and export analysisAnalyze the import and export functions of a binary file

Advantages and limitations

Advantages
Combine Ghidra's powerful reverse engineering capabilities
Achieve compatibility with multiple AI clients through the MCP protocol
Automatically execute complex reverse engineering tasks
Open - source and extensible
Limitations
Require Ghidra to be installed as a basic environment
Have a certain learning curve for non - technical users
Performance depends on Ghidra's analysis capabilities

How to use

Install Ghidra
Download and install the latest version from the Ghidra official website
Install the GhidraMCP plugin
Install the plugin in Ghidra through File->Install Extensions
Configure the MCP client
Configure the connection parameters according to the client used (Claude/Cline/5ire)
Start the service
Start Ghidra and load the target binary file

Usage examples

Automatically analyze malwareAutomatically analyze malware samples through an AI model to identify suspicious function calls
Code refactoringAutomatically rename obfuscated function names to improve code readability

Frequently Asked Questions

Which MCP clients does GhidraMCP support?
How to change the server port?
Is programming knowledge required to use it?

Related resources

Ghidra official website
The official website of the Ghidra reverse engineering tool
MCP protocol SDK
Python implementation of the MCP protocol
Installation video tutorial
Video guide for installing the GhidraMCP plugin
Installation
Copy the following command to your Client for configuration
{
  "mcpServers": {
    "ghidra": {
      "command": "python",
      "args": [
        "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
        "--ghidra-server",
        "http://127.0.0.1:8080/"
      ]
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.
S
Search1api
The Search1API MCP Server is a server based on the Model Context Protocol (MCP), providing search and crawling functions, and supporting multiple search services and tools.
TypeScript
343
4 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
830
4.3 points
M
MCP Alchemy
Certified
MCP Alchemy is a tool that connects Claude Desktop to multiple databases, supporting SQL queries, database structure analysis, and data report generation.
Python
324
4.2 points
P
Postgresql MCP
A PostgreSQL database MCP service based on the FastMCP library, providing CRUD operations, schema inspection, and custom SQL query functions for specified tables.
Python
112
4 points
M
MCP Scan
MCP-Scan is a security scanning tool for MCP servers, used to detect common security vulnerabilities such as prompt injection, tool poisoning, and cross-domain escalation.
Python
616
5 points
A
Agentic Radar
Agentic Radar is a security scanning tool for analyzing and assessing agentic systems, helping developers, researchers, and security experts understand the workflows of agentic systems and identify potential vulnerabilities.
Python
556
5 points
C
Cloudflare
Changesets is a build tool for managing versions and releases in multi - package or single - package repositories.
TypeScript
1.5K
5 points
E
Edgeone Pages MCP Server
EdgeOne Pages MCP is a service that quickly deploys HTML content to EdgeOne Pages via the MCP protocol and obtains a public URL
TypeScript
253
4.8 points
Featured MCP Services
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
141
4.5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
86
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
1.7K
5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
830
4.3 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
6.7K
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
567
5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
754
4.8 points
C
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
5.2K
4.7 points
AIbase
Zhiqi Future, Your AI Solution Think Tank
© 2025AIbase