Ghidra MCP Server

MCPOpen SourceApache-2.012.6

by Ludok-4 • Tools & CLI

An MCP server and Ghidra plugin that lets LLM agents control Ghidra to decompile, analyze, and annotate binaries.

Example Use Cases

1
Decompile and analyze binaries programmatically via Ghidra to extract function signatures, control flow, and data structures.
2
Automatically rename methods and data symbols in a binary to improve readability and downstream analysis.
3
Enumerate methods, classes, imports, and exports from a program to build knowledge for automated vulnerability discovery or documentation.

Description

ghidraMCP exposes Ghidra functionality through a Model Context Protocol (MCP) server so autonomous agents and MCP clients can drive reverse engineering tasks. It provides decompilation, analysis, automated renaming of methods and data, and listing of methods, classes, imports, and exports. The project includes a Ghidra plugin and a Python bridge client with example integrations for Claude Desktop and 5ire, and is distributed under an Apache 2.0 license.

Quick Actions

View on GitHub

Security

Scanned 2 month(s) ago

Risk Level

MINIMAL

Read-only data retrieval, no side effects

Trust Score

D46/100

7/17 checks passed

Scores are informational only and provided “as is” without warranty. AgentHotspot assumes no liability for actions taken based on these ratings.

Quick Stats

Service TypeMCP

Pricing ModelFree

Capabilities0 Tools / 0 Prompts / 0 Resources

OwnerLudok-4

CategoryTools & CLI

DependenciesStandalone