AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Home/
Security & Safety/
GhidraMCP
GhidraMCP logo

GhidraMCP

Active·★ 11.6k·Apache-2.0·Updated 2026-10-10
★ Most Popular★ Essential★ Trending

GhidraMCP is a Model Context Protocol server, together with a Ghidra plugin, that lets LLMs autonomously reverse engineer applications. It exposes core Ghidra functionality to MCP clients: decompiling and analysing binaries, automatically renaming methods and data, and listing methods, classes, imports and exports. The repository includes a demo video and a video installation guide.

You need Ghidra, Python 3 and the MCP SDK. The release zip contains the Ghidra plugin and a Python MCP bridge: install the extension from File, Install Extensions, restart Ghidra, enable GhidraMCPPlugin under Configure, and optionally change the port of its HTTP server in Tool Options. The README says any MCP client should work in theory and gives three setup examples: Claude Desktop, Cline and 5ire. Building from source uses Maven and requires copying several Ghidra jar files into a lib folder. It is Apache 2.0 licensed, and the repository was last updated in June 2025.

This write-up is based on the project's README and public repository data. We have not hand-tested the tool. Data as of 2026-10-24.

License
Apache-2.0
Latest release
2.0 · 2026-10-10
Last commit
2026-10-10
Contributors
10
Forks
1,211
Open issues and PRs
94
First published
2025-03-23

Source: GitHub, npm and PyPI public APIs.

#Ghidra#Reverse Engineering#LLM#Model Context Protocol#Decompilation
$ Install
$ git clone https://github.com/LaurieWired/GhidraMCP.git
↗ Visit site★ GitHub
01

Features

01Operates as an MCP Server and Ghidra Plugin
02Decompile and analyze binaries within Ghidra
03Automatically rename methods and data
04List methods, classes, imports, and exports
05Integrates with diverse MCP clients
02

Why choose it

+Lets an LLM decompile and analyse binaries in Ghidra, which is free to use.
+Can automatically rename methods and data, and list methods, classes, imports and exports.
+Works with any MCP client in theory, with documented setups for Claude Desktop, Cline and 5ire.
+Apache 2.0 licensed, with video guides for installation.
03

Trade-offs

!The README is short and covers a modest tool set compared with newer Ghidra MCP projects, and the repository was last updated in June 2025.
!You must install both the Ghidra extension and a separate Python MCP bridge, and building from source needs Ghidra jars copied manually.
!Letting an LLM rename and analyse unknown binaries requires care about which model and client you trust, and you should only analyse software you are allowed to.
05

Maintenance check

ActiveChecked: 2026-10-24
Last commit
2026-10-10
Commits, last 90 days
3
Releases, last 90 days
1
Latest release
2.0 (2026-10-10)
Open issues
94
Recent issues with at least one comment
11/21
Commits per week, last 12 weeks
Commits per week, last 12 weeks: 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 0, 0

Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.

Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.

Most discussed open issues

  • #54 GhidraMCP installation issues15 comments · 2025-05-30
  • #27 GhidraMCP's decompilation output differs from the Ghidra UI10 comments · 2025-04-04
  • #165 [feature] UV/UVX deployement to help maintain and install the client as native mcp7 comments · 2026-06-17
  • #88 unable to import the MCP zip7 comments · 2025-09-03
  • #83 GhidraMCP not working in Ghidra 11.4.1?7 comments · 2025-08-22

Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.

04

Who it fits

Pick it if
  • You use the free, open-source NSA Ghidra reverse engineering suite and want to give Claude or Cursor direct access to decompilation, functions, and symbols via MCP.
  • You need an open-source, non-commercial binary analysis pipeline that works out of the box without proprietary licenses.
Look elsewhere if
  • Your workflow standardizes on IDA Pro with Hex-Rays decompilers; ida-pro-mcp is the dedicated bridge for IDA Pro.
  • You do not perform binary reverse engineering or disassembly.
06

How it differs

ida-pro-mcp logovs ida-pro-mcp★ 13.2k

GhidraMCP connects AI assistants to the free, open-source Ghidra suite (Apache-2.0). ida-pro-mcp connects to the commercial IDA Pro environment and its Hex-Rays decompiler.

Full comparison →
07

Compatibility

Ghidra
Native Plugin
Verified via docs
Claude Desktop
Supported Client
Verified via docs
Cline
Supported Client
Verified via docs
5ire
Supported Client
Verified via docs
08

Quick start

1
$ git clone https://github.com/LaurieWired/GhidraMCP.git
09

Use cases

↳Empowering LLMs to autonomously reverse engineer applications.
↳Integrating Ghidra's powerful analysis capabilities with AI agents.
↳Automating binary analysis tasks through MCP client interfaces.
10

Alternatives

⚡Top VS:
VSida-pro-mcp★13.2k→VSrea★396.9k→VSjadx-ai-mcp★2.9k→VStoolhive★2.3k→
ida-pro-mcp logo
ida-pro-mcp★ 13.2k
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
VSCompare→
rea logo
rea★ 396.9k
Reverse engineer anything with agents: one CLI and MCP server to inspect any app, understand it fully down to the binary level.
VSCompare→
jadx-ai-mcp logo
jadx-ai-mcp★ 2.9k
Plugin for JADX to integrate MCP server
VSCompare→
toolhive logo
toolhive★ 2.3k
ToolHive makes deploying MCP servers easy, secure and fun
VSCompare→
CyberStrike logo
CyberStrike★ 3.3k
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
VSCompare→
Context7 logo
Context7★ 63.8k
MCP Server that provides up-to-date code documentation for LLMs and AI code editors.
VSCompare→
Cherry Studio logo
Cherry Studio★ 53.0k
A powerful desktop client for multiple LLMs. Supports local and cloud models.
VSCompare→
unity-mcp logo
unity-mcp★ 15.5k
Unity MCP acts as a bridge, allowing AI assistants (like Claude, Cursor) to interact directly with your Unity Editor via a local MCP (Model Context Protocol) Client. Give your LLM tools to manage assets, control scenes, edit scripts, and automate tasks within Unity.
VSCompare→
See all alternatives →

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs05Maintenance check04Who it fits06How it differs07Compatibility08Quick start09Use cases10Alternatives
LaurieWired /
GhidraMCP
↗

Ghidra plugin and MCP server that let LLMs reverse engineer binaries

11.6k1.2kApache-2.0
Last commit2w ago
StatusActive
CategorySecurity & Safety
Contributors10
Latest release2.0
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.