GhidraMCP
★ 11.5k
vs
AegisFlow
★ 36
GhidraMCP vs AegisFlow
GhidraMCP: GhidraMCP is a Model Context Protocol (MCP) server that enables Large Language Models (LLMs) to perform autonomous reverse engineering of applications. It exposes Ghidra's core functionalities to various MCP clients, facilitating automated binary analysis and renaming.; AegisFlow: AegisFlow acts as a local-first policy gateway, enabling governance over coding agents by allowing, reviewing, or blocking their routed actions. It enhances agent security and reliability through policy enforcement and verifiable session evidence, preventing unintended or harmful operations.
01
TL;DR
GhidraMCPSecurity & Safety · ★ 11.5k
When to choose:
- You use the free, open-source NSA Ghidra reverse engineering suite and want to give Claude or Cursor direct access to decompilation, functions, and symbols via MCP.
- You need an open-source, non-commercial binary analysis pipeline that works out of the box without proprietary licenses.
When to skip:
- Your workflow standardizes on IDA Pro with Hex-Rays decompilers; ida-pro-mcp is the dedicated bridge for IDA Pro.
- You do not perform binary reverse engineering or disassembly.
AegisFlowSecurity & Safety · ★ 36
Secure inspection and analysis of repositories with readonly policy
02
Side-by-Side Comparison
Field
GhidraMCPAegisFlowCategory
Security & Safety
Security & Safety
Stars
★ 11.5k
★ 36
License
Apache-2.0
Apache-2.0
Install Command
git clone https://github.com/LaurieWired/GhidraMCP.git
curl -fsSL https://raw.githubusercontent.com/saivedant169/AegisFlow/v0.9.0/scripts/install.sh | AEGISFLOW_VERSION=v0.9.0 sh
Updated
1w ago
3d ago
Open Source
Yes
Yes
Tags
Ghidra, Reverse Engineering, LLM
Coding Agent Gateway, Policy Enforcement, Security Gateway
03
Features
GhidraMCP01Operates as an MCP Server and Ghidra Plugin
02Decompile and analyze binaries within Ghidra
03Automatically rename methods and data
04List methods, classes, imports, and exports
05Integrates with diverse MCP clients
AegisFlow01Local-first policy gateway for coding agents
02Policy enforcement (allow, review, block) for agent actions
03Verification of signed session evidence for transparency and auditability
04Support for OpenAI-compatible and Anthropic Messages APIs
04
Use Cases
GhidraMCP↳Empowering LLMs to autonomously reverse engineer applications.
↳Integrating Ghidra's powerful analysis capabilities with AI agents.
↳Automating binary analysis tasks through MCP client interfaces.
AegisFlow↳Secure inspection and analysis of repositories with readonly policy
↳Governed pull request creation and review with pr-writer policy
↳Managing documentation changes with review via docs-writer policy
↳Controlled infrastructure planning and review with infra-review policy
↳Secure data exploration and modifications with sql-explorer policy
05
Best For
GhidraMCPMost PopularEssentialTrending
AegisFlow—
FAQ
FAQ
What is the difference between GhidraMCP and AegisFlow?
Both GhidraMCP and AegisFlow are in the Security & Safety category. GhidraMCP has 11.5k stars, while AegisFlow has 36 stars.
Which is better, GhidraMCP or AegisFlow?
The best choice depends on your use case. Choose GhidraMCP if Empowering LLMs to autonomously reverse engineer applications., and AegisFlow if Secure inspection and analysis of repositories with readonly policy.
Is GhidraMCP free or open source?
Yes, GhidraMCP is open source on GitHub (Apache-2.0).
Is AegisFlow free or open source?
Yes, AegisFlow is open source on GitHub (Apache-2.0).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→