LaurieWired/GhidraMCP
by Various
MCP Server for Ghidra
MCP
LaurieWired/GhidraMCP
Added 1 June 2026
Overview
An MCP (Model Context Protocol) server that interfaces with Ghidra, the reverse engineering framework. It allows AI models to execute Ghidra scripts and automate analysis tasks through a standardized protocol.
Best for
Best for
Security researchers and reverse engineers who use Ghidra and want to leverage AI agents for scripted analysis.
Use cases
- Automate reverse engineering workflows with LLM agents that interact with Ghidra.
- Execute Ghidra scripts and queries via natural language through an MCP client.
- Integrate Ghidra analysis into AI-powered debugging and vulnerability research pipelines.
How to use
Tested with
Claude Desktop, Cline
Example client config
{\n "mcpServers": {\n "ghidra": {\n "command": "python",\n "args": [\n "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",\n "--ghidra-server",\n "http://127.0.0.1:8080/"\n ]\n }\n }\n}Notes
An MCP (Model Context Protocol) server that interfaces with Ghidra, the reverse engineering framework. It allows AI models to execute Ghidra scripts and automate analysis tasks through a standardized protocol.
9,080 stars on GitHub. Last updated 2025-06-23. Licensed Apache-2.0.
Use cases
- Automate reverse engineering workflows with LLM agents that interact with Ghidra.
- Execute Ghidra scripts and queries via natural language through an MCP client.
- Integrate Ghidra analysis into AI-powered debugging and vulnerability research pipelines.
Pros
- Enables AI-assisted automation directly within Ghidra’s environment.
- Open source with strong community adoption (9k+ stars on GitHub).
- Written in Java, integrates natively with Ghidra’s plugin architecture.
Cons
- Requires a running Ghidra instance and proper environment setup.
- Limited to users already familiar with Ghidra and the MCP ecosystem.
- Not a standalone tool; depends on an MCP client for interaction.
Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.
Pros
- Enables AI-assisted automation directly within Ghidra's environment.
- Open source with strong community adoption (9k+ stars on GitHub).
- Written in Java, integrates natively with Ghidra's plugin architecture.
Cons
- Requires a running Ghidra instance and proper environment setup.
- Limited to users already familiar with Ghidra and the MCP ecosystem.
- Not a standalone tool; depends on an MCP client for interaction.
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
adeptus-innovatio/solvitor-mcp
Various
🦀 🏠 - Solvitor MCP server provides tools to access reverse engineering tools that help developers extract IDL files from closed-source Solana smart contracts and decompile them.
akramIOT/MCP_AI_SOC_Sher
Various
AI SOC Security Threat analysis using MCP Server
bx33661/Wireshark-MCP
Various
Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.
fr0gger/MCP_Security
Various
This is a repository to experiment with MCP for security
Gaffx/volatility-mcp
Various
This repo hosts an MCP server for volatility3.x
gaoharimran29-glitch/Cybersecurity-MCP-Server
Various
An Open Sourced Model Context Protocol (MCP) Local server that gives Claude real-time cybersecurity reconnaissance capabilities
girste/mcp-cybersec-watchdog
Various
🐕 Linux security audit tool
HaroldFinchIFT/vuln-nist-mcp-server
Various
MCP Server for Vulnerabilities API from NVD NIST
Jambozx/onlinecybertools-mcp-server
Various
MCP stdio server for onlinecybertools.com API
muhannad-hash/mcp-shield
Various
Security scanner for MCP servers - detect backdoors, exfiltration, and prompt injection
ppcvote/misp-mcp-server
Various
MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via prompt-defense-audit
pullkitsan/mobsf-mcp-server
Various
This MCP server uses mobsf api's to scan and analyze the apk and ipa files.
radareorg/r2mcp
Various
MCP stdio server for radare2
roadwy/cve-search_mcp
Various
A Model Context Protocol (MCP) server for querying the CVE-Search API
stass/lldb-mcp
Various
LLDB MCP server
zoomeye-ai/mcp_zoomeye
Various
A Model Context Protocol server that provides network asset information based on query conditions. This server allows LLMs to obtain network asset information and supports querying
13bm/GhidraMCP
Various
Active Socket based MCP Server for Ghidra
CryptoRugMunch/rug-munch-mcp
Various
MCP server for Marcus Rug Intel — 19 tools for crypto token risk analysis, rug pull detection, and AI forensics. Works with Claude Desktop, Cursor, Windsurf.
fosdickio/binary_ninja_mcp
Various
A Binary Ninja plugin containing an MCP server that enables seamless integration with your favorite LLM/MCP client.
jtang613/GhidrAssistMCP
Various
An native MCP server extension for Ghidra
mrexodia/ida-pro-mcp
Various
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
radareorg/r2mcp
Various
MCP stdio server for radare2
zboralski/ida-headless-mcp
Various
Headless IDA Pro binary analysis via Model Context Protocol
zinja-coder/apktool-mcp-server
Various
A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
zinja-coder/jadx-ai-mcp
Various
Plugin for JADX to integrate MCP server
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.