GhidraMCP logo
GhidraMCP
★ 11.5k
vs
node9-proxy logo
node9-proxy
★ 219

GhidraMCP vs node9-proxy

GhidraMCP: GhidraMCP is a Model Context Protocol (MCP) server that enables Large Language Models (LLMs) to perform autonomous reverse engineering of applications. It exposes Ghidra's core functionalities to various MCP clients, facilitating automated binary analysis and renaming.; node9-proxy: Node9 is an execution security layer for AI agents that intercepts dangerous shell commands and tool calls in real-time. It features a multi-channel approval system (native popup, browser, Slack, terminal), a flight recorder for live monitoring, and an AI negotiation loop to guide safer behavior. It also includes DLP content scanning and shadow git snapshots for undo.

01

TL;DR

GhidraMCP logo
GhidraMCPSecurity & Safety · ★ 11.5k
When to choose:
  • You use the free, open-source NSA Ghidra reverse engineering suite and want to give Claude or Cursor direct access to decompilation, functions, and symbols via MCP.
  • You need an open-source, non-commercial binary analysis pipeline that works out of the box without proprietary licenses.
When to skip:
  • Your workflow standardizes on IDA Pro with Hex-Rays decompilers; ida-pro-mcp is the dedicated bridge for IDA Pro.
  • You do not perform binary reverse engineering or disassembly.
node9-proxy logo
node9-proxySecurity & Safety · ★ 219

Protect AI agents from executing dangerous commands during development

02

Side-by-Side Comparison

Field
GhidraMCP logoGhidraMCP
node9-proxy logonode9-proxy
Category
Security & Safety
Security & Safety
Stars
★ 11.5k
★ 219
License
Apache-2.0
NOASSERTION
Install Command
git clone https://github.com/LaurieWired/GhidraMCP.git
npm install -g @node9/proxy
Updated
1w ago
3d ago
Open Source
Yes
Yes
Tags
Ghidra, Reverse Engineering, LLM
ai-safety, ai-security, claude-code
03

Features

GhidraMCP logoGhidraMCP
01Operates as an MCP Server and Ghidra Plugin
02Decompile and analyze binaries within Ghidra
03Automatically rename methods and data
04List methods, classes, imports, and exports
05Integrates with diverse MCP clients
node9-proxy logonode9-proxy
01Multi-Channel Race Engine (simultaneous approvals across native/browser/cloud/terminal)
02Flight Recorder (real-time activity stream in browser dashboard and terminal)
03AI Negotiation Loop (instructs AI to pivot to safer alternatives)
04Shadow Git Snapshots (one-click undo for AI file edits)
05DLP Content Scanner (detects and blocks secrets in tool call arguments)
04

Use Cases

GhidraMCP logoGhidraMCP
↳Empowering LLMs to autonomously reverse engineer applications.
↳Integrating Ghidra's powerful analysis capabilities with AI agents.
↳Automating binary analysis tasks through MCP client interfaces.
node9-proxy logonode9-proxy
↳Protect AI agents from executing dangerous commands during development
↳Enable safe code editing with instant undo via git snapshots
↳Govern cloud infrastructure actions using opt-in shields for services like AWS, GitHub, and Postgres
05

Best For

GhidraMCP logoGhidraMCP
Most PopularEssentialTrending
node9-proxy logonode9-proxy
—
FAQ

FAQ

What is the difference between GhidraMCP and node9-proxy?
Both GhidraMCP and node9-proxy are in the Security & Safety category. GhidraMCP has 11.5k stars, while node9-proxy has 219 stars.
Which is better, GhidraMCP or node9-proxy?
The best choice depends on your use case. Choose GhidraMCP if Empowering LLMs to autonomously reverse engineer applications., and node9-proxy if Protect AI agents from executing dangerous commands during development.
Is GhidraMCP free or open source?
Yes, GhidraMCP is open source on GitHub (Apache-2.0).
Is node9-proxy free or open source?
Yes, node9-proxy is open source on GitHub (NOASSERTION).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related