GhidraMCP
Ghidra plugin for LLM-assisted reverse engineering via MCP. GhidraMCP is a Model Context Protocol (MCP) server maintained by LaurieWired. It connects to MCP-compatible clients such as Claude Desktop, Cursor, Cline, and other agents that speak the protocol. It exposes 3 tools, including decompile_and_analyze, rename_methods_and_data and list_methods_classes_imports_exports, that an agent can call directly. It is categorized under Tool/Ghidra and AI/Automation.
What is this MCP
GhidraMCP is a Model Context Protocol server that integrates with Ghidra to enable large language models (LLMs) to autonomously perform reverse engineering tasks on binaries.
How to use this MCP
Install the Ghidra plugin, configure the MCP server, and connect compatible MCP clients (like Claude Desktop or Cline) to interact with Ghidra's reverse engineering tools through natural language commands.
What this MCP can be used for
Automating binary analysis tasks including decompilation, method/class identification, renaming symbols, and exploring imports/exports in compiled programs.
AIMCP authority
DR and traffic signal for the AIMCP public domain.
Frequently asked questions
What is the GhidraMCP MCP server?
GhidraMCP is a Model Context Protocol server from LaurieWired. It lets MCP-compatible AI clients call its tools over a standard interface, so agents like Claude, Cursor, and Cline can use it without custom integration.
How do I connect GhidraMCP to my AI client?
Add GhidraMCP to your client's MCP configuration using the stdio or SSE connection shown in the usage examples on this page, then restart the client to load the server.
What tools does GhidraMCP provide?
GhidraMCP provides 3 tools: decompile_and_analyze, rename_methods_and_data and list_methods_classes_imports_exports.
Is GhidraMCP free to use?
GhidraMCP is listed on AIMCP for free. Any API keys or accounts required by the underlying service are set by its provider.
Vernclaw Plugins for OpenClaw
Ready-to-use connectors for SEO data, social reading & content generation. Pay-as-you-go credits with audit logs.