ida-pro-mcp

★ 13.1k

agent-bom

★ 35

ida-pro-mcp vs agent-bom

Q: Which is better, ida-pro-mcp or agent-bom?

By GitHub stars, ida-pro-mcp has more community adoption, but the best choice depends on your specific use case.

ida-pro-mcp: IDA Pro MCP is a straightforward Model Context Protocol (MCP) server that integrates IDA Pro with various MCP clients, enabling powerful LLM-assisted reverse engineering. It offers a comprehensive, type-safe API for accessing and modifying IDA Pro's internal state, streamlining automated analysis workflows.; agent-bom: agent-bom is an end-to-end open security scanner for the AI supply chain. It performs CVE discovery, blast-radius analysis, and provides remediation guidance. It supports multiple entry points including agent scanning, container image scanning, IaC scanning, and a self-hosted enterprise deployment.

TL;DR

ida-pro-mcpSecurity & Safety · ★ 13.1k

When to choose:

You use Hex-Rays IDA Pro for binary analysis and want to connect Claude or Cursor to IDA's disassembler, decompiler, and type system via MCP.
You want to automate function renaming, pseudocode commentary, and vulnerability identification inside IDA Pro.

When to skip:

You rely on the open-source NSA Ghidra decompiler; GhidraMCP is the dedicated bridge for Ghidra.
You do not hold an active IDA Pro license.

Read ida-pro-mcp full review →

agent-bomSecurity & Safety · ★ 35

CI/CD gating for AI supply chain security

Read agent-bom full review →

Side-by-Side Comparison

Field

ida-pro-mcp

agent-bom

Features

ida-pro-mcp

01Type-safe API with TypedDict schemas for better IDE support and LLM structured outputs

02Batch-first design where most operations accept both single items and lists

03Consistent error handling where all batch operations return structured error information

04Cursor-based pagination for search functions to manage large results

05Performance optimization with string caching to avoid repeated build_strlist calls

agent-bom

01End-to-end blast radius analysis from CVE to credential exposure

02Multi-entrypoint scanning: agents, images, IaC, packages, cloud

03Compliance export (FedRAMP, SOC2, NIST AI RMF, etc.) with tamper-evident evidence bundles

04Self-hosted enterprise deployment with Helm, Postgres, ClickHouse, and Snowflake backends

05Runtime MCP proxy and gateway for traffic enforcement and audit

Use Cases

ida-pro-mcp

↳LLM-assisted reverse engineering directly within IDA Pro

↳Automating binary analysis tasks and programmatic modification of IDA Pro's database

↳Integrating IDA Pro's rich context with various Model Context Protocol (MCP) clients

agent-bom

↳CI/CD gating for AI supply chain security

↳Security team audit of AI agents and MCP servers

↳Self-hosted enterprise security scanning with fleet management

Best For

ida-pro-mcp

Most PopularEssentialTrending

agent-bom

—

FAQ

What is the difference between ida-pro-mcp and agent-bom?

Both ida-pro-mcp and agent-bom are in the Security & Safety category. ida-pro-mcp has 13.1k stars, while agent-bom has 35 stars.

Which is better, ida-pro-mcp or agent-bom?

The best choice depends on your use case. Choose ida-pro-mcp if LLM-assisted reverse engineering directly within IDA Pro, and agent-bom if CI/CD gating for AI supply chain security.

Is ida-pro-mcp free or open source?

Yes, ida-pro-mcp is open source on GitHub (MIT).

Is agent-bom free or open source?

Yes, agent-bom is open source on GitHub (Apache-2.0).

Cloud Infrastructure

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit

→

Alternatives to ida-pro-mcp →Alternatives to agent-bom →ida-pro-mcp details →agent-bom details →ida-pro-mcp vs GhidraMCP →

TL;DR

Side-by-Side Comparison

Features

Use Cases

Best For

FAQ

Deploy on DigitalOcean

Related