Ghidra MCP Server

Reverse engineer binary applications by exposing core Ghidra tools to your AI assistant.

Data last scanned today · Reviewed yesterday

38★ 9,534JavaApache-2.0

Overview

This server integrates Ghidra functionality with MCP clients, allowing AI models to interact with binary analysis workflows directly. By deploying the GhidraMCP plugin, users can leverage LLMs to perform automated tasks such as listing methods, classes, and imports, as well as decompiling binaries and renaming data elements. The setup requires a local Ghidra installation combined with the provided Python-based bridge. It is designed to work with standard MCP clients, enabling users to bridge the gap between AI reasoning and reverse engineering processes.

Our verdict

With a security score of 23/100, this server is classified as high risk and should be used with extreme caution. The primary security concern is the total lack of an authentication method, meaning any user or process with access to the configuration can execute commands against your Ghidra instance. Furthermore, the absence of a read-only mode allows for full write access, and the project has not received a commit in over a year, suggesting it may lack active maintenance for current security vulnerabilities.

Supports automated decompilation and binary analysis workflows
Zero direct dependencies minimize supply-chain surface area
Licensed under the permissive Apache-2.0 license
Documented installation process including video guides

High security risk due to no authentication
Lacks a read-only mode for restricted access
Stale repository with no commits in 390 days
Community-maintained rather than official vendor support

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›What software prerequisites are needed to run GhidraMCP?

You must have Ghidra installed, along with Python3 and the MCP Python SDK.

›How do I install the Ghidra plugin?

Download the latest release zip file, then import it into Ghidra by selecting File, Install Extensions, and clicking the + button to select your file.

›Can I customize the port used by the Ghidra server?

Yes, you can configure the port within Ghidra by navigating to Edit, Tool Options, and selecting GhidraMCP HTTP Server.

›Does GhidraMCP provide default connection settings if I do not specify them?

Yes, if server connection details are not explicitly set in your client configuration, the system defaults to localhost:8080.

›How do I build the server from source?

You must copy specific required JAR files from your Ghidra installation directory into the project's lib folder, then run 'mvn clean package assembly:single' using Maven.