ghidraMCP
ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients.
https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9
Features
MCP Server + Ghidra Plugin
- Decompile and analyze binaries in Ghidra
- Automatically rename methods and data
- List methods, classes, imports, and exports
Installation
Prerequisites
- Install Ghidra 12.1.4
- Install uv (or Python 3.10+ with
pip install git+https://github.com/LaurieWired/GhidraMCP, then useghidra-mcpas the command below)
Ghidra
First, download the latest release from this repository. This contains the Ghidra plugin and Python MCP client. Then, you can directly import the plugin into Ghidra.
- Run Ghidra
- Select
File->Install Extensions - Click the
+button - Select the
ghidra_12.1.4_PUBLIC_<date>_GhidraMCP.zipfrom the downloaded release - Restart Ghidra
- Make sure the GhidraMCPPlugin is enabled in -> ->