ghidra-mcp
Ghidra MCP Server bridges Ghidra's reverse-engineering capabilities to AI tools through the Model Context Protocol. The README claims 245 MCP tools and says it was built by a reverse engineer who uses it daily on real binaries, with full write access (renaming, typing, commenting, creating structures) and not just read-only tools. The project asks for stars and sponsorship to fund compatibility updates and documentation.
Listed capabilities include decompilation, call graphs and cross-references, data-flow analysis by propagating values forward or backward through PCode, struct, union and enum creation, string and import analysis, memory inspection and cross-binary documentation propagation by function hash. Version 5.4.0 adds dynamic analysis: P-code emulation of single functions through Ghidra's EmulatorHelper and a live debugger over the TraceRmi framework (dbgeng on Windows PE, gdb or lldb elsewhere) with attach, step, breakpoints and register and memory access. It also describes AI-assisted documentation workflows such as a seven-step function documentation process and batch documentation. Building requires Java 21, Maven 3.9+, Ghidra 12.1 or a compatible version and Python 3.10+. The code is Apache-2.0 licensed.
Features
Why choose it
Trade-offs
Maintenance check
- Last commit
- 2026-10-14
- Commits, last 90 days
- 100+
- Releases, last 90 days
- 4
- Latest release
- v7.0.0-rc.3 (2026-10-14)
- Open issues
- 33
- Recent issues with at least one comment
- 6/7
Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.
Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.
Most discussed open issues
- #575 [Feature]: support for ParallelDecompiler class for decompile_function6 comments · 2026-10-06
- #500 Installation instructions could be clearer6 comments · 2026-09-09
- #114 Native MCP Server: Replace Python bridge with Java MCP SDK in headless mode5 comments · 2026-04-10
- #435 don't install this4 comments · 2026-08-11
- #549 Hash normalisation drops every immediate >= 0x10000, which collapses STL container instantiations by element size2 comments · 2026-09-28
Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.
Who it fits
- You are reverse engineering binaries, malware, or firmware and want to expose Ghidra's 200+ analysis tools (decompilation, xrefs, symbols) directly to LLMs.
- You need both interactive Ghidra GUI integration and headless server mode in Docker for collaborative team reverse engineering.
- Your reverse engineering pipeline is fully built around Hex-Rays IDA Pro rather than NSA Ghidra (choose `ida-pro-mcp` instead).
- You only need basic binary file metadata, strings, or threat intel lookups without decompiling full function trees (VirusTotal MCP is lighter).
How it differs
vs ida-pro-mcp★ 13.1kghidra-mcp is built on the free, open-source NSA Ghidra with 200+ tools and headless Docker support; ida-pro-mcp targets commercial IDA Pro / Hex-Rays installations.
vs hexstrike-ai★ 13.0kghidra-mcp is deeply specialized in binary decompilation and static analysis; hexstrike-ai is a broad offensive security suite covering pentesting, web exploits, and cloud assessment.
Compatibility
Quick start
Use cases
Alternatives
Featured in these lists
Comments
No comments yet. Be the first!