Ghidramcp
GhidraMCP is a model context protocol server designed for LLM, supporting autonomous reverse engineering applications and providing Ghidra's core functional tools.
rating : 0 points
downloads : 4.4K
What is GhidraMCP?
GhidraMCP is a bridge connecting the Ghidra reverse engineering tool and LLM models. It enables AI models to directly call Ghidra's functions, such as decompilation, method renaming, and code analysis, through the MCP protocol to achieve automated reverse engineering.How to use GhidraMCP?
To use GhidraMCP, you need to install the Ghidra plugin first and then connect through an MCP client (such as Claude, Cline, etc.). The client can send commands to the server, and Ghidra will execute the corresponding operations and return the results.Applicable scenarios
It is suitable for scenarios that require automated analysis of binary files, such as malware analysis, vulnerability mining, and legacy code analysis. It is particularly suitable for tasks that require large - scale reverse engineering combined with AI capabilities.Main features
Decompilation functionCan decompile binary code into a high - level language representation
Automatic renamingAutomatically rename methods and variables to improve code readability
Method listList all methods and classes in a binary file
Import and export analysisAnalyze the import and export functions of a binary file
Advantages and limitations
Advantages
Combine Ghidra's powerful reverse engineering capabilities
Achieve compatibility with multiple AI clients through the MCP protocol
Automatically execute complex reverse engineering tasks
Open - source and extensible
Limitations
Require Ghidra to be installed as a basic environment
Have a certain learning curve for non - technical users
Performance depends on Ghidra's analysis capabilities
How to use
Install Ghidra
Download and install the latest version from the Ghidra official website
Install the GhidraMCP plugin
Install the plugin in Ghidra through File->Install Extensions
Configure the MCP client
Configure the connection parameters according to the client used (Claude/Cline/5ire)
Start the service
Start Ghidra and load the target binary file
Usage examples
Automatically analyze malwareAutomatically analyze malware samples through an AI model to identify suspicious function calls
Code refactoringAutomatically rename obfuscated function names to improve code readability
Frequently Asked Questions
Which MCP clients does GhidraMCP support?
How to change the server port?
Is programming knowledge required to use it?
Related resources
Ghidra official website
The official website of the Ghidra reverse engineering tool
MCP protocol SDK
Python implementation of the MCP protocol
Installation video tutorial
Video guide for installing the GhidraMCP plugin
Featured MCP Services

Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
141
4.5 points

Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
86
4.3 points

Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
1.7K
5 points

Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
830
4.3 points

Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
6.7K
4.5 points

Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
567
5 points

Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
754
4.8 points

Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
5.2K
4.7 points