GhidraMCP acts as a Model Context Protocol (MCP) server, seamlessly integrating with the powerful Ghidra reverse engineering framework. Its core purpose is to empower Large Language Models (LLMs) to autonomously analyze and understand compiled applications. By exposing a comprehensive set of Ghidra's core functionalities—including decompilation, binary analysis, and the listing of methods, classes, imports, and exports—GhidraMCP allows LLM clients to programmatically interact with and extract deep insights from binaries. This integration facilitates advanced AI-driven tasks in reverse engineering, security analysis, and automated software understanding.
Key Features
01Automatically renames methods and data
02Lists methods, classes, imports, and exports
032 GitHub stars
04Provides an MCP Server and Ghidra Plugin
05Decompiles and analyzes binaries within Ghidra
