ida-pro-mcp vs mcp-virustotal
ida-pro-mcp: IDA Pro MCP is a straightforward Model Context Protocol (MCP) server that integrates IDA Pro with various MCP clients, enabling powerful LLM-assisted reverse engineering. It offers a comprehensive, type-safe API for accessing and modifying IDA Pro's internal state, streamlining automated analysis workflows.; mcp-virustotal: mcp-virustotal is an MCP server designed to provide AI agents with comprehensive access to the VirusTotal v3 API. It allows agents to retrieve detection reports and critical threat relationships for files, URLs, IPs, and domains, enhancing their threat intelligence capabilities.
TL;DR
- You use Hex-Rays IDA Pro for binary analysis and want to connect Claude or Cursor to IDA's disassembler, decompiler, and type system via MCP.
- You want to automate function renaming, pseudocode commentary, and vulnerability identification inside IDA Pro.
- You rely on the open-source NSA Ghidra decompiler; GhidraMCP is the dedicated bridge for Ghidra.
- You do not hold an active IDA Pro license.
AI agents querying threat intelligence for hashes, URLs, IPs, or domains.
Side-by-Side Comparison
Features
Use Cases
Best For
FAQ
Deploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.