ida-pro-mcp
★ 13.1k
vs
tcpk
★ 23
ida-pro-mcp vs tcpk
ida-pro-mcp: IDA Pro MCP is a straightforward Model Context Protocol (MCP) server that integrates IDA Pro with various MCP clients, enabling powerful LLM-assisted reverse engineering. It offers a comprehensive, type-safe API for accessing and modifying IDA Pro's internal state, streamlining automated analysis workflows.; tcpk: TCPK is a portable Windows thick-client and MSIX security audit tool designed to find, verify, and report vulnerabilities in desktop applications. It offers static and dynamic analysis, a PowerShell engine, a WinForms GUI, and an optional agentic AI workbench for local triage.
01
TL;DR
ida-pro-mcpSecurity & Safety · ★ 13.1k
When to choose:
- You use Hex-Rays IDA Pro for binary analysis and want to connect Claude or Cursor to IDA's disassembler, decompiler, and type system via MCP.
- You want to automate function renaming, pseudocode commentary, and vulnerability identification inside IDA Pro.
When to skip:
- You rely on the open-source NSA Ghidra decompiler; GhidraMCP is the dedicated bridge for Ghidra.
- You do not hold an active IDA Pro license.
tcpkSecurity & Safety · ★ 23
Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables.
02
Side-by-Side Comparison
Field
ida-pro-mcptcpkCategory
Security & Safety
Security & Safety
Stars
★ 13.1k
★ 23
License
MIT
MIT
Install Command
pip uninstall ida-pro-mcp && pip install https://github.com/mrexodia/ida-pro-mcp/archive/refs/heads/main.zip && ida-pro-mcp --install
git clone https://github.com/V33RU/tcpk.git && cd tcpk && .\TCPK.bat
Updated
3w ago
2d ago
Open Source
Yes
Yes
Tags
IDA Pro, Reverse Engineering, MCP
Thick Client Pentesting, MSIX Security, PowerShell
03
Features
ida-pro-mcp01Type-safe API with TypedDict schemas for better IDE support and LLM structured outputs
02Batch-first design where most operations accept both single items and lists
03Consistent error handling where all batch operations return structured error information
04Cursor-based pagination for search functions to manage large results
05Performance optimization with string caching to avoid repeated build_strlist calls
tcpk01Evidence-based verification: Proves high-value findings with IL decompilation and taint checking, moving beyond simple regex hits.
02Real CVSS v4.0 scoring: Scores each finding with a faithful port of the FIRST.org algorithm, providing accurate context-specific CVSS scores.
03Supply-chain CVE detection: Matches shipped components against live OSV and NVD-by-CPE, embedding version-accurate vulnerabilities in a CycloneDX SBOM.
04Local-first AI triage (optional): Pipes findings through a local Ollama model for AI review, keeping decompiled IL within the local environment by default.
05Engagement-ready reports: Generates comprehensive reports in HTML, multi-sheet Excel, JSON, SARIF, CycloneDX SBOM, and `intel.html` dashboard formats.
04
Use Cases
ida-pro-mcp↳LLM-assisted reverse engineering directly within IDA Pro
↳Automating binary analysis tasks and programmatic modification of IDA Pro's database
↳Integrating IDA Pro's rich context with various Model Context Protocol (MCP) clients
tcpk↳Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables.
↳Compliance and vulnerability management: Generating comprehensive reports with CVSS v4.0 scores, CWE, MITRE ATT&CK, OWASP TASVS mappings, and SBOMs for regulatory compliance.
↳Threat intelligence gathering: Utilizing the `intel.html` dashboard and detailed findings to understand application security posture.
↳Automated static and dynamic analysis in pentesting workflows: Quickly performing initial assessments of thick client applications.
05
Best For
ida-pro-mcpMost PopularEssentialTrending
tcpk—
FAQ
FAQ
What is the difference between ida-pro-mcp and tcpk?
Both ida-pro-mcp and tcpk are in the Security & Safety category. ida-pro-mcp has 13.1k stars, while tcpk has 23 stars.
Which is better, ida-pro-mcp or tcpk?
The best choice depends on your use case. Choose ida-pro-mcp if LLM-assisted reverse engineering directly within IDA Pro, and tcpk if Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables..
Is ida-pro-mcp free or open source?
Yes, ida-pro-mcp is open source on GitHub (MIT).
Is tcpk free or open source?
Yes, tcpk is open source on GitHub (MIT).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→