ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
The Ghidra MCP Server is a production-ready Model Context Protocol server that bridges Ghidra's reverse engineering capabilities with AI tools and automation frameworks, providing 253 MCP tools for binary analysis. It offers both GUI plugin and headless server modes, enabling AI agents to perform decompilation, function analysis, data structure discovery, cross-binary documentation transfer, and live debugging through a standardized MCP interface. The server includes battle-tested AI workflows for function documentation, convention enforcement, P-code emulation, and Ghidra Server integration for team collaboration. It supports stdio, streamable-HTTP, and SSE transports, making it compatible with Claude Desktop, Cursor, and other MCP clients.
Key Features
Use Cases
- 01AI-assisted reverse engineering with automated function documentation and naming consistency
- 02Batch documentation of malware or firmware binaries using parallel subagent workflows
- 03Cross-version binary analysis to propagate documentation across software updates
- 04Automated discovery of undocumented functions in code gaps between known routines
- 05Live debugging and dynamic analysis with AI-guided breakpoint placement and memory inspection
- 06Headless CI/CD integration for automated binary analysis pipelines
Related MCP Servers
View moremarkitdown
Python tool for converting files and office documents to Markdown.
firecrawl
The context API to search, scrape, and interact with the web at scale. 🔥
prompts.chat
f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.
langflow
Langflow is a powerful tool for building and deploying AI-powered agents and workflows.
ghidra-mcp — FAQ
What is the Ghidra MCP Server?+
It's a Model Context Protocol server that exposes Ghidra's reverse engineering capabilities as 253 MCP tools, enabling AI assistants to perform binary analysis, decompilation, function documentation, and debugging through a standardized interface.
How do I install and connect it to Claude Desktop or Cursor?+
Clone the repository, run 'python -m tools.setup ensure-prereqs --ghidra-path /path/to/ghidra', then 'python -m tools.setup build' and 'deploy'. Add the bridge to your MCP client config with command 'uv' and args ['run', '--directory', '/path/to/ghidra-mcp', 'bridge-mcp-ghidra'].
What are the prerequisites?+
You need Java 21 LTS, Apache Maven 3.9+, Ghidra 12.1.2, and Python 3.10+ with uv or pip. The setup script installs Ghidra JARs into your local Maven repository and builds the extension automatically.
Which MCP clients does it work with?+
It works with Claude Desktop, Cursor, Autohand Code, and any MCP client supporting stdio or streamable-HTTP transports. Browser-based clients like MCP Inspector are supported via HTTP transport with CORS headers.
Is it free and open source?+
Yes, it's licensed under Apache License 2.0 and fully open source on GitHub.
Can I use it without the Ghidra GUI?+
Yes, the headless server mode (GhidraMCPHeadlessServer) provides 195 endpoints for automated analysis without requiring the Ghidra GUI, and includes Docker deployment support for CI/CD pipelines.
How do I install ghidra-mcp?+
Open the source repository on GitHub and follow its README. ghidra-mcp is a mcp server — MCP Agents Market links you directly to the official repo.
Is ghidra-mcp free?+
ghidra-mcp is an open-source project hosted on GitHub. Check the repository for its license and any usage requirements.