ghidraMCP

v1.0.0Securitystable

An Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through

ghidramcpmcpai-integration
Share:
8,973
Stars
0
Downloads
0
Weekly
0/5

What is ghidraMCP?

ghidraMCP is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to model context protocol server that enables llms to autonomously reverse engineer applications by exposing ghidra's decompilation and analysis tools. it allows ai agents to list code structures, rename...

An Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through

This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.

Features

  • An Model Context Protocol server that enables LLMs to autono

Use Cases

Reverse engineer applications using Ghidra decompilation tools.
Autonomously analyze binaries and rename code structures with AI.
LaurieWired

Maintainer

LicenseApache 2.0
Languagejava
Versionv1.0.0
UpdatedMay 22, 2026
Statushealthy
Maintenanceactive

Works with

ClaudeOpenAIwindowsmacoslinux

Installation

Manual Installation

npx ghidramcp

Configuration

Configuration Details

Config File

claude_desktop_config.json

Performance

Response Metrics

Response Time< 200ms
ThroughputMedium

Resource Usage

Memory UsageLow
CPU UsageLow

How to Set Up and Use ghidraMCP

ghidraMCP enables AI assistants to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. Analyze binaries, list code structures, and rename methods directly through the MCP interface for sophisticated security analysis.

Prerequisites

  • Java Runtime Environment (JRE) 11+ installed
  • Ghidra installed and configured
  • An MCP client such as Claude Desktop or Cursor
  • Binary files to analyze
1

Clone ghidraMCP repository

Get the ghidraMCP source code that integrates Ghidra with MCP.

git clone https://github.com/LaurieWired/GhidraMCP
cd GhidraMCP
java -version
2

Build ghidraMCP

Compile the Ghidra MCP integration server.

gradle build
3

Verify Ghidra installation

Ensure Ghidra is properly installed and accessible from the system PATH.

4

Configure for binary analysis

Set up paths and options for the binaries you want to analyze.

5

Add to MCP client config

Register ghidraMCP as an MCP server in Claude Desktop or Cursor.

6

Test reverse engineering

Ask Claude to analyze a binary and extract information about its structure and functions.

ghidraMCP Examples

MCP client configuration

Configure ghidraMCP for binary reverse engineering.

{
  "mcpServers": {
    "ghidra": {
      "command": "java",
      "args": ["-jar", "/path/to/GhidraMCP/build/libs/ghidramcp.jar"],
      "env": {
        "GHIDRA_HOME": "/opt/ghidra"
      }
    }
  }
}

Prompts to try

Use these prompts to reverse engineer binaries with ghidraMCP.

"Analyze this binary and list all exported functions"
"Decompile the main function from this executable and explain the logic"
"Find and explain all security-relevant code patterns in this binary"
"Rename functions in this binary based on their decompiled code behavior"

Troubleshooting ghidraMCP

Gradle build fails

Verify Java 11+ is installed with java --version. Check that Gradle is installed. Run gradle clean build to remove cached build artifacts and rebuild.

Ghidra not found or initialization fails

Verify Ghidra is installed and GHIDRA_HOME points to correct directory. Test Ghidra separately to ensure it works. Check that Java version compatibility between Ghidra and ghidraMCP.

Binary analysis times out or fails

Larger binaries take longer to analyze. Increase timeout settings if available. Try analyzing smaller binaries first. Check system resources (disk space, memory) are available.

Frequently Asked Questions about ghidraMCP

What is ghidraMCP?

ghidraMCP is a Model Context Protocol (MCP) server that model context protocol server that enables llms to autonomously reverse engineer applications by exposing ghidra's decompilation and analysis tools. it allows ai agents to list code structures, rename methods, and analyze binaries directly through It connects AI assistants to external tools and data sources through a standardized interface.

How do I install ghidraMCP?

Follow the installation instructions on the ghidraMCP GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.

Which AI clients work with ghidraMCP?

ghidraMCP works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.

Is ghidraMCP free to use?

Yes, ghidraMCP is open source and available under the Apache 2.0 license. You can use it freely in both personal and commercial projects.

ghidraMCP Alternatives — Similar Security Servers

Looking for alternatives to ghidraMCP? Here are other popular security servers you can use with Claude, Cursor, and VS Code.

Browse More Security MCP Servers

Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.

Quick Config Preview

{ "mcpServers": { "ghidramcp": { "command": "npx", "args": ["-y", "ghidramcp"] } } }

Add this to your claude_desktop_config.json or .cursor/mcp.json

Read the full setup guide →

Ready to use ghidraMCP?

Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.

33,000+ ServersFree & Open SourceStep-by-Step Guides