Ghidra

by lauriewired

4.3k 1.9k downloads Not rated yet Apache-2.0

GitHub

About

Enables LLMs to autonomously reverse engineer applications by exposing core Ghidra functionality.

Details

Repository: LaurieWired/GhidraMCP
License: Apache-2.0

Explore

- Decompile and analyze binaries in Ghidra
- Automatically rename methods and data
- List methods, classes, imports, and exports
- Configurable HTTP server port in Ghidra
- Supports multiple MCP clients and transports

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below
Plugin Name Ghidra

Command (node, npx, python, etc.) python
Arguments
- Argument 1 /ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py
- Argument 2 --ghidra-server
- Argument 3 http://127.0.0.1:8080/
Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/Users/YOUR_USER/Library/Application Support/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "C:\\Users\\YOUR_USER\\AppData\\Roaming\\Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/home/YOUR_USER/.config/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/Users/YOUR_USER/Library/Application Support/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "C:\\Users\\YOUR_USER\\AppData\\Roaming\\Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/home/YOUR_USER/.config/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/Users/YOUR_USER/Library/Application Support/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "C:\\Users\\YOUR_USER\\AppData\\Roaming\\Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/home/YOUR_USER/.config/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/Users/YOUR_USER/Library/Application Support/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "C:\\Users\\YOUR_USER\\AppData\\Roaming\\Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/home/YOUR_USER/.config/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/Users/YOUR_USER/Library/Application Support/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "C:\\Users\\YOUR_USER\\AppData\\Roaming\\Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

JSON

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/home/YOUR_USER/.config/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

From the repository

Install Ghidra and the GhidraMCP plugin via the release ZIP, then run the Python MCP bridge script (bridge_mcp_ghidra.py) with appropriate transport and server settings. Clients like Claude Desktop, Cline, or 5ire can then connect to the bridge to issue reverse‑engineering commands.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "ghidra": {
            "cwd": "/Users/YOUR_USER/Library/Application Support/Claude",
            "env": {},
            "args": [
                "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
                "--ghidra-server",
                "http://127.0.0.1:8080/"
            ],
            "shell": false,
            "command": "python"
        }
    }
}

Linux

{
    "cwd": "/home/YOUR_USER/.config/Claude",
    "env": [],
    "args": [
        "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
        "--ghidra-server",
        "http://127.0.0.1:8080/"
    ],
    "shell": false,
    "command": "python"
}

Macos

{
    "cwd": "/Users/YOUR_USER/Library/Application Support/Claude",
    "env": [],
    "args": [
        "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
        "--ghidra-server",
        "http://127.0.0.1:8080/"
    ],
    "shell": false,
    "command": "python"
}

Windows

{
    "cwd": "C:\\Users\\YOUR_USER\\AppData\\Roaming\\Claude",
    "env": [],
    "args": [
        "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py",
        "--ghidra-server",
        "http://127.0.0.1:8080/"
    ],
    "shell": false,
    "command": "python"
}

ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients.

https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9

- Decompile and analyze binaries in Ghidra
- Automatically rename methods and data
- List methods, classes, imports, and exports

First, download the latest releasefrom this repository. This contains the Ghidra plugin and Python MCP client. Then, you can directly import the plugin into Ghidra.
- Run Ghidra
- SelectFile->Install Extensions
- Click the+button
- Select theGhidraMCP-1-2.zip(or your chosen version) from the downloaded release
- Restart Ghidra
- Make sure the GhidraMCPPlugin is enabled inFile->Configure->Developer
- Optional: Configure the port in Ghidra withEdit->Tool Options->GhidraMCP HTTP Server

https://github.com/user-attachments/assets/75f0c176-6da1-48dc-ad96-c182eb4648c3

Theoretically, any MCP client should work with ghidraMCP. Three examples are given below.

To set up Claude Desktop as a Ghidra MCP client, go toClaude->Settings->Developer->Edit Config->claude_desktop_config.jsonand add the following:

{ "mcpServers": { "ghidra": { "command": "python", "args": [ "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py", "--ghidra-server", "http://127.0.0.1:8080/" ] } } }

/Users/YOUR_USER/Library/Application Support/Claude/claude_desktop_config.json

The server IP and port are configurable and should be set to point to the target Ghidra instance. If not set, both will default to localhost:8080.

To use GhidraMCP withCline, this requires manually running the MCP server as well. First run the following command:

python bridge_mcp_ghidra.py --transport sse --mcp-host 127.0.0.1 --mcp-port 8081 --ghidra-server http://127.0.0.1:8080/

The onlyrequiredargument is the transport. If all other arguments are unspecified, they will default to the above. Once the MCP server is running, open up Cline and selectMCP Serversat the top.

Then selectRemote Serversand add the following, ensuring that the url matches the MCP host and port:
- Server Name: GhidraMCP
- Server URL:http://127.0.0.1:8081/sse

Another MCP client that supports multiple models on the backend is 5ire. To set up GhidraMCP, open 5ire and go toTools->Newand set the following configurations:
- Tool Key: ghidra
- Name: GhidraMCP
- Command:python /ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py
- Copy the following files from your Ghidra directory to this project'slib/directory:

- Ghidra/Features/Base/lib/Base.jar
- Ghidra/Features/Decompiler/lib/Decompiler.jar
- Ghidra/Framework/Docking/lib/Docking.jar
- Ghidra/Framework/Generic/lib/Generic.jar
- Ghidra/Framework/Project/lib/Project.jar
- Ghidra/Framework/SoftwareModeling/lib/SoftwareModeling.jar
- Ghidra/Framework/Utility/lib/Utility.jar
- Ghidra/Framework/Gui/lib/Gui.jar

The generated zip file includes the built Ghidra plugin and its resources. These files are required for Ghidra to recognize the new extension.

- lib/GhidraMCP.jar
- extensions.properties
- Module.manifest

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

AI-powered code quality analysis to detect best practice violations, security issues, and architectural problems in real-time.

Exposes binary analysis data from Ghidra, including functions and pseudocode, to LLMs.

Analyze binary files and manage functions and variables using IDA Pro's headless mode.

A Model Context Protocol server for the IDA Pro disassembler.

Interact with IDA Pro for reverse engineering and binary analysis tasks.

Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP

24 AI-callable tools for API mocking, chaos engineering, security scanning, SSL checks, CORS debugging, OpenAPI validation, JWT decoding, HAR analysis, distributed tracing, webhook capture, automation workflows, and uptime monitoring. Supports OAuth2 and Bearer token auth.

Production grade MCP for Reverse Engineering (includes almost all necessary tools)

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

AI-powered live runtime debugging with Lightrun production context.

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

Ghidra

About

Details

Explore

Setting up with Highlight

Setting up with Cursor

JSON

JSON

JSON

Setting up with Claude Desktop

JSON

JSON

JSON

Setting up with Windsurf

JSON

JSON

JSON

Setting up with Cline

JSON

JSON

JSON

Setting up with Goose

JSON

JSON

JSON

From the repository

Claude Desktop / Cursor

Linux

Macos

Windows

Videos about Ghidra

Stop Manually Reversing: Use Claude + Ghidra MCP Instead (Full Tutorial)

AI Reverse Engineering with GhidraMCP & Qwen 3.6 35B | RTX 5070 8GB Demo

Ghidra MCP Server: Turn AI Into Your Reverse Engineering Assistant

About

Details

Explore

Setting up with Highlight

From the repository

Claude Desktop / Cursor

Linux

Macos

Windows

Videos about Ghidra

Stop Manually Reversing: Use Claude + Ghidra MCP Instead (Full Tutorial)

AI Reverse Engineering with GhidraMCP & Qwen 3.6 35B | RTX 5070 8GB Demo

Ghidra MCP Server: Turn AI Into Your Reverse Engineering Assistant

More like this

Sentry

Github

Git

GitLab