R0idamcp

r0idamcp is a large model-driven intelligent automated reverse engineering tool for IDA Pro. It provides a single-file MCP server solution, integrates multiple functions with few dependencies, supports all MCP clients, and simplifies the reverse engineering process.

Security Developer tools #Intelligent Reverse Engineering #IDA Plugin #Automation #Large Model .Python

rating : 2.5 points

downloads : 7.8K

update time : 2025-04-28

Open Site

What is r0idamcp?

r0idamcp is an IDA Pro plugin based on the Model Context Protocol (MCP). It allows users to interact with IDA Pro through a large model assistant to achieve automated reverse engineering tasks. This tool simplifies complex reverse operations into natural language instructions, significantly improving the efficiency of reverse analysis.

How to use r0idamcp?

After installing the plugin, simply start the MCP server in IDA and then configure the connection in the large model assistant to start using natural language to control IDA for reverse analysis.

Applicable Scenarios

Suitable for scenarios such as binary reverse analysis, vulnerability research, and malicious code analysis. It is especially suitable for reverse engineers and security researchers who need to quickly understand complex binary files.

Main Features

Function Analysis

Supports obtaining function information by name or address, including decompiled pseudo-code and machine code

Cross-Reference

Can query all reference locations of a specified address to help understand the code flow

Variable Management

Supports renaming and type setting of local and global variables

Type System

Supports creating or updating variable types through C declarations to enhance code readability

String Analysis

Can list and search all strings in the binary file

Advantages

Comprehensive functions: Integrates most MCP functions on the market

Simple dependencies: Only requires FastMCP 2.0, no complex environment configuration is needed

Strong compatibility: Supports all MCP clients with a high connection success rate

Concise code: Implemented in a single file with excellent readability and extensibility

Limitations

Requires IDA Pro 8.3 or higher

Network connection needs to be configured for the first use

Some advanced functions may require a specific version of IDA

How to Use

Installation Preparation

Ensure that IDA Pro 8.3+ is installed and the Python environment is configured

Install Dependencies

Install FastMCP using pip

Install the Plugin

Copy r0idamcp.py to the IDA plugin directory

Start the Server

Start the MCP server through the menu in IDA

Configure the Client

Configure the MCP server address in the large model assistant

Usage Examples

Quick Function Analysis

When you need to quickly understand the function of a certain function, you can let the large model assistant decompile and explain the function logic

Batch Variable Renaming

You can batch modify the variable names in the function to make them more readable

Find Vulnerability Patterns

Analyze potential vulnerability patterns through cross-references

Frequently Asked Questions

What should I do if the connection to the server fails?

Why can't I use some functions?

How to add new functions?

Related Resources

Official Communication Group

Add WeChat to join the MCP learning and communication group

FastMCP Project

The PyPI page of FastMCP

IDA Pro Official Website

The official website of the IDA Pro disassembler

🚀 r0idamcp

A single-file MCP server for intelligent and automated reverse engineering experience in IDA Pro, powered by large models.

For communication and learning: Add WeChat: r0ysue (Note: Join the MCP learning group)

Advantages of this project:

Comprehensive functionality: It integrates most of the features from existing projects in the market and will continue to be maintained. New features will be added based on issues.
Minimal dependencies: Only requires the latest FastMCP 2.0. There's no need for complex uv or a specific version of Python.
High compatibility: Supports all MCP-capable large model assistants. No need for scientific internet access or complex dependency and environment configuration, with a very high success rate.
Extremely simple code: Many projects in the market use nested code generation tools, resulting in poor readability. This project is condensed into a single file, with a one-to-one correspondence between the declarations and implementations in mcp.tool, offering excellent readability, scalability, and extensibility.

📦 Installation Requirements

uv: Not required
Python: Not required (Use IDA's Python)
IDA Pro: Version 8.3 or higher is recommended, and version 9 is preferred.
Supported MCP clients: All

📥 Installation Steps

Install and use IDA Pro normally. Run idapyswitch to specify the Python path.
Install pip using the Python in the same path and use pip to install fastmcp.

pip install fastmcp

Copy the r0idamcp.py file to the IDA plugin directory. The plugin directories are as follows:

OS	Plugin Directory
Windows	%appdata%\Hex - Rays\IDA Pro\plugins
Linux	~/.idapro/plugins/
macOS	~/Library/Application Support/IDA Pro/plugins/

Installation is complete!

💻 Usage Examples

Basic Usage

Open the IDA main interface. There will be log output in the Python window below:

>>>r0mcp plugin loaded, use Edit->Plugins->r0mcp to start SSE server

Click: Edit -> Plugins -> r0idamcp to start the MCP server. The logs are as follows:

>>> r0mcp.run() is invoked ,Server start
INFO:     Started server process [6804]
INFO:     Waiting for connections on 127.0.0.1:5000...

Configure the large model assistant as needed and connect to this server for reverse engineering analysis tasks.

Existing Features

t00lic: Instruction-level decompilation
set_disasm_view: Set the decompilation view
set_var_name: Set variable names
rename_function: Rename functions
get_type: Get type information
get_disasm_str: Get decompiled strings
get_instruction: Get instruction information
set_comment: Add comments
declare_struct: Declare structures
set_stack_variable: Set stack variables
set_local_variable: Set local variables
rename_global: Rename global variables
set_function Prototype: Set function prototypes
Declare C types: Create or update local variable types based on C declarations

To achieve the most accurate execution results, it is recommended to use my Chinese translations (or function names) in the prompts to increase the hit rate.

Have fun! If you have any problems, feel free to provide feedback in the group. We'll fix bugs or update features based on your feedback.