repo-forensics vs ida-pro-mcp
repo-forensics: Repo Forensics audits untrusted repositories, agent skills, plugins and MCP servers before they reach your agent, running 28 scanners and a correlation engine locally with zero dependencies and no telemetry. Installed as a plugin, it also watches installs and updates and blocks known-malicious packages.; ida-pro-mcp: IDA Pro MCP is a straightforward Model Context Protocol (MCP) server that integrates IDA Pro with various MCP clients, enabling powerful LLM-assisted reverse engineering. It offers a comprehensive, type-safe API for accessing and modifying IDA Pro's internal state, streamlining automated analysis workflows.
TL;DR
Vet an MCP server or Claude Code skill before installing it
- You use Hex-Rays IDA Pro for binary analysis and want to connect Claude or Cursor to IDA's disassembler, decompiler, and type system via MCP.
- You want to automate function renaming, pseudocode commentary, and vulnerability identification inside IDA Pro.
- You rely on the open-source NSA Ghidra decompiler; GhidraMCP is the dedicated bridge for Ghidra.
- You do not hold an active IDA Pro license.
Side-by-Side Comparison
Features
Use Cases
Best For
FAQ
Deploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.