Ghidra MCP Server

Example Use Cases

• 1

  Decompile and analyze binaries programmatically using Ghidra's decompiler and analysis engine.

• 2

  Automatically rename methods and data, and update program symbols to improve readability and downstream analysis.

• 3

  Enumerate and inspect methods, classes, imports, and exports to build a navigable program context for automated reverse-engineering tasks.

Description

ghidraMCP runs as a Ghidra plugin and MCP server to allow external MCP clients and LLM-driven agents to call core Ghidra features remotely. It exposes decompilation, analysis, renaming of methods/data, and listings of methods, classes, imports, and exports. The project includes examples for integrating with clients such as Claude Desktop, Cline, and 5ire and provides installation and build instructions for use within Ghidra. This enables automation of reverse engineering workflows and program understanding by LLM agents.