Ghidra MCP
G

Ghidra MCP

This project runs the Ghidra reverse engineering tool in headless mode, extracts binary file analysis data and converts it into JSON format, and provides interactive reverse analysis services for LLMs like Claude through the MCP protocol.
2 points
7.2K

What is the Ghidra MCP Server?

The Ghidra MCP Server allows you to disassemble and decompile binary files through Ghidra and export the analysis results in JSON format. This enables large language models like Claude to easily access this data.

How to use the Ghidra MCP Server?

After installing and configuring the Ghidra MCP Server, you can use the tools it provides to list functions, view pseudocode, obtain structure definitions, etc. You can start using it with just a few simple commands.

Applicable Scenarios

Suitable for researchers, security analysts, and developers who need to quickly understand the logic of binary programs.

Main Features

Pseudocode Generation
Extract function pseudocode from binary files for easy understanding and analysis.
Structure and Enumeration Extraction
Identify and export data structures and enumeration types in the binary.
Function Prototype Definition
List the return values and parameter lists of all functions.
Dynamic Update
Support real-time loading of new analysis results.
Advantages
Powerful static analysis capabilities.
Seamless integration with existing AI tools.
Easy to expand and customize.
Good cross - platform compatibility.
Limitations
It may take a long time to process large binary files.
Depends on specific versions of Ghidra and Java environments.
Some advanced features may require additional configuration.

How to Use

Install Ghidra
Download and unzip Ghidra version 11.3.1.
Set up the Java Environment
Ensure that Java 21 (Temurin is recommended) is installed.
Install the MCP Server
Use the MCP CLI tool to install the Ghidra MCP Server.
Run in Development Mode
Start the server in development mode for testing.

Usage Examples

Analyze a Binary File
Analyze a binary file located at a certain path and list the main functions in it.
Get Pseudocode
Get the pseudocode from a specified function.

Frequently Asked Questions

Why do I need to install Java 21?
How to solve the problem of not finding the uv command?

Related Resources

Ghidra Official Website
Visit the official documentation to learn more about Ghidra.
MCP Protocol Official Website
Learn more details about the Model Context Protocol.
GitHub Repository
View the project source code and contribution guidelines.

Installation

Copy the following command to your Client for configuration
{
  "mcpServers": {
    "ghidra": {
      "command": "/Users/yourname/.cargo/bin/uv",
      "args": [
        "--directory",
        "/Users/yourname/Documents/ghidra_mcp",
        "run",
        "main.py"
      ]
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

R
Rsdoctor
Rsdoctor is a build analysis tool specifically designed for the Rspack ecosystem, fully compatible with webpack. It provides visual build analysis, multi - dimensional performance diagnosis, and intelligent optimization suggestions to help developers improve build efficiency and engineering quality.
TypeScript
8.9K
5 points
N
Next Devtools MCP
The Next.js development tools MCP server provides Next.js development tools and utilities for AI programming assistants such as Claude and Cursor, including runtime diagnostics, development automation, and document access functions.
TypeScript
8.4K
5 points
T
Testkube
Testkube is a test orchestration and execution framework for cloud-native applications, providing a unified platform to define, run, and analyze tests. It supports existing testing tools and Kubernetes infrastructure.
Go
6.2K
5 points
M
MCP Windbg
An MCP server that integrates AI models with WinDbg/CDB for analyzing Windows crash dump files and remote debugging, supporting natural language interaction to execute debugging commands.
Python
8.7K
5 points
R
Runno
Runno is a collection of JavaScript toolkits for securely running code in multiple programming languages in environments such as browsers and Node.js. It achieves sandboxed execution through WebAssembly and WASI, supports languages such as Python, Ruby, JavaScript, SQLite, C/C++, and provides integration methods such as web components and MCP servers.
TypeScript
6.6K
5 points
N
Netdata
Netdata is an open-source real-time infrastructure monitoring platform that provides second-level metric collection, visualization, machine learning-driven anomaly detection, and automated alerts. It can achieve full-stack monitoring without complex configuration.
Go
9.7K
5 points
M
MCP Server
The Mapbox MCP Server is a model context protocol server implemented in Node.js, providing AI applications with access to Mapbox geospatial APIs, including functions such as geocoding, point - of - interest search, route planning, isochrone analysis, and static map generation.
TypeScript
8.8K
4 points
U
Uniprof
Uniprof is a tool that simplifies CPU performance analysis. It supports multiple programming languages and runtimes, does not require code modification or additional dependencies, and can perform one-click performance profiling and hotspot analysis through Docker containers or the host mode.
TypeScript
7.3K
4.5 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
30.3K
5 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
18.1K
4.5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
22.0K
4.3 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
63.9K
4.3 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
27.1K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
59.2K
4.5 points
C
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
85.2K
4.7 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
41.7K
4.8 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
© 2026AIBase