AIBase
EN
Explore
Ghidramcp
G

Ghidramcp

GhidraMCP is a model context protocol server designed for LLM, supporting autonomous reverse engineering applications and providing Ghidra's core functional tools.
Developer toolsSecurity#Reverse engineering#Ghidra plugin#MCP protocol#Automated analysis.Java
0 points
14.0K
Open Site

Overview

Installation

Content Details

Alternatives

What is GhidraMCP?

GhidraMCP is a bridge connecting the Ghidra reverse engineering tool and LLM models. It enables AI models to directly call Ghidra's functions, such as decompilation, method renaming, and code analysis, through the MCP protocol to achieve automated reverse engineering.

How to use GhidraMCP?

To use GhidraMCP, you need to install the Ghidra plugin first and then connect through an MCP client (such as Claude, Cline, etc.). The client can send commands to the server, and Ghidra will execute the corresponding operations and return the results.

Applicable scenarios

It is suitable for scenarios that require automated analysis of binary files, such as malware analysis, vulnerability mining, and legacy code analysis. It is particularly suitable for tasks that require large - scale reverse engineering combined with AI capabilities.

Main features

Decompilation function
Can decompile binary code into a high - level language representation
Automatic renaming
Automatically rename methods and variables to improve code readability
Method list
List all methods and classes in a binary file
Import and export analysis
Analyze the import and export functions of a binary file
Advantages
Combine Ghidra's powerful reverse engineering capabilities
Achieve compatibility with multiple AI clients through the MCP protocol
Automatically execute complex reverse engineering tasks
Open - source and extensible
Limitations
Require Ghidra to be installed as a basic environment
Have a certain learning curve for non - technical users
Performance depends on Ghidra's analysis capabilities

How to use

Install Ghidra
Download and install the latest version from the Ghidra official website
Install the GhidraMCP plugin
Install the plugin in Ghidra through File->Install Extensions
Configure the MCP client
Configure the connection parameters according to the client used (Claude/Cline/5ire)
Start the service
Start Ghidra and load the target binary file

Usage examples

Automatically analyze malware
Automatically analyze malware samples through an AI model to identify suspicious function calls
Code refactoring
Automatically rename obfuscated function names to improve code readability

Frequently Asked Questions

Which MCP clients does GhidraMCP support?
How to change the server port?
Is programming knowledge required to use it?

Related resources

Ghidra official website
The official website of the Ghidra reverse engineering tool
MCP protocol SDK
Python implementation of the MCP protocol
Installation video tutorial
Video guide for installing the GhidraMCP plugin

Installation

Copy the following command to your Client for configuration
{
  "mcpServers": {
    "ghidra": {
      "command": "python",
      "args": [
        "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
        "--ghidra-server",
        "http://127.0.0.1:8080/"
      ]
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

C
Claude Context
Claude Context is an MCP plugin that provides in - depth context of the entire codebase for AI programming assistants through semantic code search. It supports multiple embedding models and vector databases to achieve efficient code retrieval.
TypeScript
4.9K
5 points
A
Acemcp
Acemcp is an MCP server for codebase indexing and semantic search, supporting automatic incremental indexing, multi-encoding file processing, .gitignore integration, and a Web management interface, helping developers quickly search for and understand code context.
Python
8.9K
5 points
B
Blueprint MCP
Blueprint MCP is a chart generation tool based on the Arcade ecosystem. It uses technologies such as Nano Banana Pro to automatically generate visual charts such as architecture diagrams and flowcharts by analyzing codebases and system architectures, helping developers understand complex systems.
Python
8.2K
4 points
M
MCP Agent Mail
MCP Agent Mail is a mail - based coordination layer designed for AI programming agents, providing identity management, message sending and receiving, file reservation, and search functions, supporting asynchronous collaboration and conflict avoidance among multiple agents.
Python
8.4K
5 points
M
MCP
The Microsoft official MCP server provides search and access functions for the latest Microsoft technical documentation for AI assistants
13.1K
5 points
A
Aderyn
Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.
Rust
8.7K
5 points
D
Devtools Debugger MCP
The Node.js Debugger MCP server provides complete debugging capabilities based on the Chrome DevTools protocol, including breakpoint setting, stepping execution, variable inspection, and expression evaluation.
TypeScript
10.0K
4 points
S
Scrapling
Scrapling is an adaptive web scraping library that can automatically learn website changes and re - locate elements. It supports multiple scraping methods and AI integration, providing high - performance parsing and a developer - friendly experience.
Python
10.9K
5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
17.5K
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
27.6K
5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
55.2K
4.3 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
17.6K
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
24.3K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
52.4K
4.5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
17.2K
4.5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
36.7K
4.8 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
English简体中文繁體中文にほんご
© 2025AIBase