Ghidramcp
ghidraMCP is a model context protocol server based on Ghidra that allows LLMs to autonomously reverse engineer applications and provides a tool interface for the core functions of Ghidra.
0 points
14.6K

What is GhidraMCP?

GhidraMCP is middleware that connects the Ghidra reverse engineering tool with large language models (LLMs). Through the MCP protocol, AI can call Ghidra's analysis capabilities to automate reverse engineering tasks.

How to use GhidraMCP?

After installing the Ghidra plugin, start the MCP server, and then connect through a compatible MCP client (such as Claude, Cline, etc.) to start using AI-assisted reverse engineering.

Applicable scenarios

Suitable for scenarios that require automated analysis of binary files, reverse engineering of large projects, and quick understanding of unknown code structures.

Main features

Decompilation and analysis
Decompile and conduct in-depth analysis of binary files
Automatic renaming
Automatically rename methods and data to enhance readability
Code structure viewing
List methods, classes, import and export tables
Advantages
Combine the powerful analysis capabilities of AI with professional reverse engineering tools
Support multiple MCP clients for flexible use
Automate tedious reverse engineering tasks
Limitations
The Ghidra environment needs to be installed first
Processing large binary files may take a long time
A certain foundation in reverse engineering knowledge is required to make full use of it

How to use

Install Ghidra
Download and install the latest version from the Ghidra official website
Install the plugin
Download the GhidraMCP plugin and import it into Ghidra
Configure the client
Select and configure an MCP client (such as Claude, Cline, etc.)

Usage examples

Automatic analysis of malware
Let AI automatically analyze the key functions of unknown malware samples
Game mod development
Reverse engineer game binary files to find key functions for modification

Frequently Asked Questions

What version of Ghidra is required?
Can the server port be customized?
Which MCP clients are supported?

Related resources

Ghidra official website
The official website of the Ghidra reverse engineering tool
MCP SDK
Python SDK for the MCP protocol
Installation video guide
Video tutorial on installing GhidraMCP

Installation

Copy the following command to your Client for configuration
{
  "mcpServers": {
    "ghidra": {
      "command": "python",
      "args": [
        "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
        "--ghidra-server",
        "http://127.0.0.1:8080/"
      ]
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

R
Rsdoctor
Rsdoctor is a build analysis tool specifically designed for the Rspack ecosystem, fully compatible with webpack. It provides visual build analysis, multi - dimensional performance diagnosis, and intelligent optimization suggestions to help developers improve build efficiency and engineering quality.
TypeScript
6.5K
5 points
N
Next Devtools MCP
The Next.js development tools MCP server provides Next.js development tools and utilities for AI programming assistants such as Claude and Cursor, including runtime diagnostics, development automation, and document access functions.
TypeScript
7.7K
5 points
T
Testkube
Testkube is a test orchestration and execution framework for cloud-native applications, providing a unified platform to define, run, and analyze tests. It supports existing testing tools and Kubernetes infrastructure.
Go
4.7K
5 points
M
MCP Windbg
An MCP server that integrates AI models with WinDbg/CDB for analyzing Windows crash dump files and remote debugging, supporting natural language interaction to execute debugging commands.
Python
7.7K
5 points
R
Runno
Runno is a collection of JavaScript toolkits for securely running code in multiple programming languages in environments such as browsers and Node.js. It achieves sandboxed execution through WebAssembly and WASI, supports languages such as Python, Ruby, JavaScript, SQLite, C/C++, and provides integration methods such as web components and MCP servers.
TypeScript
6.9K
5 points
N
Netdata
Netdata is an open-source real-time infrastructure monitoring platform that provides second-level metric collection, visualization, machine learning-driven anomaly detection, and automated alerts. It can achieve full-stack monitoring without complex configuration.
Go
6.6K
5 points
M
MCP Server
The Mapbox MCP Server is a model context protocol server implemented in Node.js, providing AI applications with access to Mapbox geospatial APIs, including functions such as geocoding, point - of - interest search, route planning, isochrone analysis, and static map generation.
TypeScript
7.4K
4 points
U
Uniprof
Uniprof is a tool that simplifies CPU performance analysis. It supports multiple programming languages and runtimes, does not require code modification or additional dependencies, and can perform one-click performance profiling and hotspot analysis through Docker containers or the host mode.
TypeScript
7.1K
4.5 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
18.4K
4.5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
60.9K
4.3 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
20.4K
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
31.2K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
55.6K
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
26.9K
5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
40.9K
4.8 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
18.3K
4.5 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
© 2026AIBase