mcptrustchecker
★ 172
vs
ida-pro-mcp
★ 13.1k
mcptrustchecker vs ida-pro-mcp
mcptrustchecker: MCP Trust Checker is a local-first, deterministic security scanner that evaluates the safety of Model Context Protocol (MCP) servers. It utilizes a unique Capability-Flow Trust Model to statically identify potential data exfiltration paths and other vulnerabilities before you connect servers to sensitive data.; ida-pro-mcp: IDA Pro MCP is a straightforward Model Context Protocol (MCP) server that integrates IDA Pro with various MCP clients, enabling powerful LLM-assisted reverse engineering. It offers a comprehensive, type-safe API for accessing and modifying IDA Pro's internal state, streamlining automated analysis workflows.
01
TL;DR
mcptrustcheckerSecurity & Safety · ★ 172
Scanning already installed MCP servers or local package directories for vulnerabilities.
ida-pro-mcpSecurity & Safety · ★ 13.1k
When to choose:
- You use Hex-Rays IDA Pro for binary analysis and want to connect Claude or Cursor to IDA's disassembler, decompiler, and type system via MCP.
- You want to automate function renaming, pseudocode commentary, and vulnerability identification inside IDA Pro.
When to skip:
- You rely on the open-source NSA Ghidra decompiler; GhidraMCP is the dedicated bridge for Ghidra.
- You do not hold an active IDA Pro license.
02
Side-by-Side Comparison
Field
mcptrustcheckerida-pro-mcpCategory
Security & Safety
Security & Safety
Stars
★ 172
★ 13.1k
License
MIT
MIT
Install Command
npm i -g mcptrustchecker
pip uninstall ida-pro-mcp && pip install https://github.com/mrexodia/ida-pro-mcp/archive/refs/heads/main.zip && ida-pro-mcp --install
Updated
2mo ago
3w ago
Open Source
Yes
Yes
Tags
Security Scanner, Static Analysis, Trust Model
IDA Pro, Reverse Engineering, MCP
03
Features
mcptrustchecker01Offline by Default: Operates without requiring an account, token, API key, or hosted service, ensuring data privacy.
02Cross-Tool Toxic-Flow Graph: Identifies lethal trifecta scenarios where untrusted input, sensitive data, and external exfiltration paths coexist across multiple tools.
03Deep-Scans Published Packages: Fetches, verifies, and analyzes the actual published source code from npm/PyPI without installation or execution.
04Auditable Trust Score: Provides a deterministic A-F grade with a transparent scoring methodology, including penalty vectors and confidence levels.
05Rug-Pull Integrity: Detects post-approval mutations of tool definitions and verifies package artifact hashes to prevent silent changes.
ida-pro-mcp01Type-safe API with TypedDict schemas for better IDE support and LLM structured outputs
02Batch-first design where most operations accept both single items and lists
03Consistent error handling where all batch operations return structured error information
04Cursor-based pagination for search functions to manage large results
05Performance optimization with string caching to avoid repeated build_strlist calls
04
Use Cases
mcptrustchecker↳Scanning already installed MCP servers or local package directories for vulnerabilities.
↳Auditing live HTTP/SSE or OAuth-protected remote MCP endpoints before integration.
↳Integrating into CI/CD pipelines (e.g., GitHub Actions) to enforce security gates and generate SARIF reports.
↳Embedding the scanning engine into marketplaces or platforms to verify the security of listed MCP servers.
↳Using the free hosted web API for quick, zero-install security checks of tool manifests or published packages.
ida-pro-mcp↳LLM-assisted reverse engineering directly within IDA Pro
↳Automating binary analysis tasks and programmatic modification of IDA Pro's database
↳Integrating IDA Pro's rich context with various Model Context Protocol (MCP) clients
05
Best For
mcptrustchecker—
ida-pro-mcpMost PopularEssentialTrending
FAQ
FAQ
What is the difference between mcptrustchecker and ida-pro-mcp?
Both mcptrustchecker and ida-pro-mcp are in the Security & Safety category. mcptrustchecker has 172 stars, while ida-pro-mcp has 13.1k stars.
Which is better, mcptrustchecker or ida-pro-mcp?
The best choice depends on your use case. Choose mcptrustchecker if Scanning already installed MCP servers or local package directories for vulnerabilities., and ida-pro-mcp if LLM-assisted reverse engineering directly within IDA Pro.
Is mcptrustchecker free or open source?
Yes, mcptrustchecker is open source on GitHub (MIT).
Is ida-pro-mcp free or open source?
Yes, ida-pro-mcp is open source on GitHub (MIT).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→