LaurieWired/GhidraMCP

Health v2 · maintenance only

Adoption not part of the score

9865 stars · 1020 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

GhidraMCP is a Model Context Protocol server implemented as a Ghidra plugin that exposes Ghidra's reverse engineering tools to LLM clients. It lets AI agents autonomously decompile binaries, list methods and imports, and rename functions and data.

Use cases

• let an LLM autonomously reverse engineer a binary in Ghidra
• decompile and analyze binaries using Claude Desktop
• automatically rename methods and data during reverse engineering
• list methods, classes, imports, and exports from a binary via MCP
• connect any MCP client to a Ghidra instance

When to choose

• you use Ghidra and want AI-assisted binary analysis
• you want an MCP-compatible bridge to Ghidra's decompiler and analysis tools
• you want to automate repetitive reverse engineering tasks like renaming functions

When to avoid

• you don't use Ghidra or an MCP-capable LLM client
• you need fully manual, hands-on disassembly without AI involvement
• you need a standalone reverse engineering tool rather than a Ghidra plugin

Facets

plugin · maturity active

mcp reverse-engineering plugin-system llm-inference reverse-engineering security developer-tools large-language-models cross-platform python jvm ghidra mcp-server binary-analysis decompiler disassembly claude-desktop ai-assisted-reversing desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="LaurieWired/GhidraMCP")