GhidraMCP MCP Server

Active Socket based MCP Server for Ghidra

Local serverstdioGo

What is the GhidraMCP MCP Server?

Active Socket based MCP Server for Ghidra

What you get

A Ghidra extension that exposes 70 reverse-engineering tools to AI assistants through the Model Context Protocol (MCP). Open a binary in Ghidra, enable the plugin, and let Claude (or any MCP client) decompile functions, rename symbols, annotate code, search for vulnerabilities, and more.

  • 70 MCP tools — spanning query, mutation, analysis, malware triage, IoT/embedded security, structure management, async decompilation, and multi-instance support
  • Easy setup — -- plugin auto-starts the bridge; use MCP > Settings > Write to Claude Config to configure your MCP client
  • Cross-platform — -- prebuilt bridge binaries for Linux x86_64, Windows x86_64, macOS x86_64 and macOS ARM64
  • Configurable — -- port, localhost-only binding, API-key auth, auto-start, bridge enable/disable via GhidraMCP.properties
  • Multi-instance — -- work with multiple Ghidra windows simultaneously using target_port to route tool calls
  • Async decompilation — -- decompile large functions without blocking; poll for results later

Configuration and credentials

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the GhidraMCP MCP Server

{
  "mcpServers": {
    "ghidra": {
      "command": "/path/to/mcp_bridge",
      "args": ["--host", "localhost", "--port", "8765"]
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
GHIDRA_API_KEYCredential the server authenticates with.Yes
GHIDRA_INSTALL_DIRFilesystem location the server is allowed to use.Optional

Example prompts to try

  • “Use GhidraMCP to Prerequisites.”
  • “Use GhidraMCP to Enable.”

Frequently asked questions

Any MCP-compatible client works, including Claude Desktop and Claude Code.