Enterprise DNAEnterprise DNA

MCP Servers

13bm/GhidraMCP

Active Socket based MCP Server for Ghidra

Our verdict

Not reviewed yet

We have not reviewed 13bm/GhidraMCP yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About 13bm/GhidraMCP

GhidraMCP is an open-source Java server that implements the Model Context Protocol over sockets for the Ghidra reverse engineering framework. It enables AI assistants to interact with Ghidra programmatically, allowing automated analysis and script execution.

Best for

Reverse engineers and security researchers using Ghidra who want to augment their workflow with AI agents.

Use cases

  • Integrating AI coding assistants with Ghidra for automated reverse engineering
  • Triggering Ghidra scripts or analyses from an AI agent via MCP calls
  • Building custom tooling that combines Ghidra's capabilities with large language models

Notes

119 stars on GitHub. Last updated 2026-05-14. Licensed Apache-2.0.

Pros

  • Socket-based communication is efficient and language-agnostic for clients
  • Active project with 119 stars and ongoing development
  • Leverages the MCP standard for interoperability with many AI tools

Cons

  • Requires a running Ghidra instance and Java setup, increasing deployment complexity
  • Documentation and community support may still be limited compared to larger projects
  • Scope is narrow – only useful if you already work with Ghidra and want AI integration

Key facts

What we have checked

Days since the last commit
4
Checked GitHub
GitHub forks
22
Checked GitHub
GitHub stars
149
Checked GitHub
Days to a first reply on issues
0.2
Checked GitHub
Open issues
1
Checked GitHub
Releases in the last 90 days
0
Checked GitHub

Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.

How to use

How to set it up

As the listing publishes it. We have not run this install.

Tools exposed

  • list_functions
  • list_classes
  • list_imports
  • list_exports
  • list_namespaces
  • list_data_items
  • list_strings
  • search_functions_by_name
  • get_function_by_address
  • get_current_address
  • get_current_function
  • decompile_function
  • decompile_function_by_address
  • disassemble_function
  • get_xrefs_to
  • get_xrefs_from
  • get_function_xrefs
  • get_program_info
  • get_memory_map
  • get_variables

Clients the listing names (not checked here)

Claude Desktop, Claude Code, Cursor, Continue

Example client config

{
  "mcpServers": {
    "ghidra": {
      "command": "/path/to/mcp_bridge",
      "args": [
        "--host",
        "localhost",
        "--port",
        "8765"
      ]
    }
  }
}

Install

Add 13bm/GhidraMCP to your client

Not verified yet

No install recipe yet. We write one for Claude Code, Claude Desktop, Cursor, VS Code, Codex and ChatGPT when the server is in the official MCP registry with a package or remote address we can use.

Until then, follow the project's own README, or the setup the listing publishes under How to set it up.

Works with

What 13bm/GhidraMCP connects to

No confirmed connections yet. A product appears here when the server's registry name, repo, homepage or name ties it to that product, and a client appears when we have an install recipe for it.

Health and security

Is 13bm/GhidraMCP looked after, and what do its setup files show

Health score

50 out of 100

Does someone look after this repository? It does not say the code is good or safe. Worked out from GitHub signals checked . How it is worked out

PartPointsWhat we saw
Recent activity30 of 30Last push 4 days ago
Releases0 of 150 releases in 90 days
Issue replies20 of 20First reply in 0.2 days (median)
Maintainer0 of 15Owned by a single user
Official source0 of 20Community server

Security check static checks

100 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked by edna-static-v1. What it checks

Licence: Apache-2.0

  • Note No published npm or PyPI package of this repository was found, so package advisories were not checked.
  • Note Asks for GHIDRA_API_KEY through environment variables.
  • Note The lab has not recorded this server's tool list yet, so tool permissions were not checked.
Tool permissions (1)
  • GHIDRA_API_KEY, environment variable it asks for (a secret)

Alternatives

Alternatives to 13bm/GhidraMCP

RecordTypeHow we knowChecked
LaurieWired/GhidraMCPThis is an alternative to itMCP serverNamed in the listingNot dated
mrexodia/ida-pro-mcpThis is an alternative to itMCP serverNamed in the listingNot dated

Compare

Compare 13bm/GhidraMCP side by side

Sources

Where this comes from

  • GitHubRegistry

    Checked · Days since the last commit, GitHub forks, GitHub stars, Days to a first reply on issues, Open issues, Releases in the last 90 days

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.