GhidraMCP
An embedded MCP server for Ghidra, exposing program data and reverse engineering functionalities.
If your browser/GitHub blocks custom URI handlers, use the web fallback: Cursor install fallback
GhidraMCP
Connect Ghidra to MCP-compatible clients
Related project: WinDbg MCP Server
✨ Features
- 14 MCP tools covering analysis, inspection, editing, project workflows, and Version Tracking
- MCP resources for common program views such as program info, listing, imports/exports, strings, RTTI, and decompilation
- Built-in MCP prompts and argument completions for common reverse engineering workflows
- Structured responses with pagination and opaque cursors for large datasets
Tool Commands
- Analysis & inspection:
analyze,inspect,script_guidance - Program changes:
annotate,functions,symbols,data_types,memory,delete - Project workflows:
project,batch_operations,read_tool_output - Version tracking:
vt_sessions,vt_operations
Resource Templates
- Project overview:
ghidra://programs - Program views:
ghidra://program/{name}/info,ghidra://program/{name}/functions,ghidra://program/{name}/symbols,ghidra://program/{name}/datatypes,ghidra://program/{name}/memory - Triage views:
ghidra://program/{name}/imports,ghidra://program/{name}/exports,ghidra://program/{name}/strings,ghidra://program/{name}/rtti - Code views:
ghidra://program/{name}/listing/{address},ghidra://program/{name}/function/{address}/decompile
Prompts
analyze_functionanalyze_vtablecompare_binariesfind_vulnerabilitiesmap_data_structuresrename_analysistriage_binary
🚀 Installation
- Download the latest release
zipfile from the Releases page. - In Ghidra, go to
File->Install Extensions.... - Click the
+button (Add extension) in the top right corner. - Navigate to the downloaded
zipfile and select it. - Ensure the
GhidraMCPextension is checked in the list and clickOK. - Restart Ghidra.
▶️ Usage
- Start Ghidra with the GhidraMCP extension enabled.
- Confirm the server port in Configuration.
- Point your MCP client to
http://127.0.0.1:8080/mcp(or your custom port).
[!WARNING] Script Error Dialogs: Some script-driven operations can open a Ghidra error dialog. Close the dialog before continuing, or requests may appear to hang.
[!TIP] Finding program names: Use the
ghidra://programsresource to see the exact program names available in the current project.
⚙️ Configuration
The GhidraMCP server can be configured through Ghidra's application-level settings:
- In Ghidra, go to Browser → Edit → Tool Options.
- In the left panel, expand Miscellaneous and select GhidraMCP HTTP Server.
- Configure the following options:
- Server Port: The port number for the MCP server (default: 8080)
- Auto-start Server: Whether to automatically start the server when Ghidra launches
- Request Timeout (seconds): Maximum time allowed for an MCP request before timing out (default: 600)
- Click OK to save your settings.
🛠️ Building from Source
If you are installing from a GitHub release zip, you can skip this section. The steps below are only for building from source.
-
Clone the repository:
git clone https://github.com/themixednuts/GhidraMCP.git -
Ensure you have JDK 21 or later installed.
-
Build the project with
just:just packageTo run the same checks used by the main build CI:
just ciOr use the Gradle wrapper directly:
bash ./gradlew packageOn Windows PowerShell, use:
.\gradlew.bat packageGhidra jars are fetched automatically from the official release zip on first run.
Useful development entrypoints:
just testruns the unit suitejust test-e2eruns the end-to-end suitejust update-verification-metadatarefreshes Gradle dependency verification checksums after dependency changes
-
The installable
zipfile is written totarget/(for example,target/GhidraMCP-0.7.0-pre9.zip). Install it using the steps above.
Optional: Install Local Pre-commit Checks
To run formatting checks and full integration tests before every commit:
just install-hooks
The installed pre-commit hook runs:
just fmt-checkjust testjust test-e2e
🔌 Configuring an MCP Client
Use this server URL in your client:
http://127.0.0.1:8080/mcp(or your custom port)
Most clients use a config like:
{
"mcpServers": {
"ghidra": {
"url": "http://127.0.0.1:8080/mcp"
}
}
}
Client Setup Instructions
Claude Desktop
Config path:
- Windows:
%APPDATA%\Claude\claude_desktop_config.json - macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Linux:
~/.config/Claude/claude_desktop_config.json
Add the JSON config above, then restart Claude Desktop.
Claude Code (CLI)
claude mcp add ghidra "http://127.0.0.1:8080/mcp" --transport http
Cursor
Manual config path: ~/.cursor/mcp_settings.json
OpenCode
Use ~/.config/opencode/opencode.json (or project-level opencode.json):
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ghidra": {
"type": "remote",
"url": "http://127.0.0.1:8080/mcp",
"enabled": true
}
}
}
Codex CLI
codex mcp add ghidra --url http://127.0.0.1:8080/mcp
Or add this to ~/.codex/config.toml:
[mcp_servers.ghidra]
url = "http://127.0.0.1:8080/mcp"
[!IMPORTANT] The default port is
8080(configurable in Ghidra: Browser → Edit → Tool Options → Miscellaneous → GhidraMCP HTTP Server). If you change the port, update your client configuration accordingly. Ghidra must be running with the extension enabled for the client to connect.
[!NOTE] Timeout Issues: If you encounter timeout problems, refer to the Ghidra timeout configuration guide.
🤝 Contributing
Contributions are welcome! Please feel free to submit pull requests or open issues.
Acknowledgements
This project is heavily inspired by and based on the work of LaurieWired. Instead of using a bridge, this plugin directly embeds the server in the plugin.
Related Servers
Scout Monitoring MCP
sponsorPut performance and error data directly in the hands of your AI assistant.
Alpha Vantage MCP Server
sponsorAccess financial market data: realtime & historical stock, ETF, options, forex, crypto, commodities, fundamentals, technical indicators, & more
TrueNAS Middleware MCP Server
Accesses optimized documentation from the TrueNAS middleware repository to understand its codebase and APIs.
Bonk MCP
Implements Solana blockchain functionality for the LetsBonk launchpad.
MCP Server Test
An example MCP server deployable on Cloudflare Workers without authentication.
Package README MCP Servers
A collection of MCP servers for fetching READMEs from various package managers.
Authless Remote MCP Server
An authentication-free, remote MCP server designed for deployment on Cloudflare Workers.
MCP Code Graph
Analyze and visualize code graphs using CodeGPT.
Storyblok MCP Server
Manage your Storyblok CMS using natural language through AI tools.
Agent Passport System
Cryptographic identity, scoped delegation, values governance, and deliberative consensus for AI agents. 11 tools, Ed25519 signatures, zero blockchain.
YAPI MCP PRO
An MCP server for the YApi interface management platform, enabling direct operation and full lifecycle management within AI editors.
Root Signals
Equip AI agents with evaluation and self-improvement capabilities with Root Signals.