GhidraMCP
About
An embedded MCP server for Ghidra, exposing program data and reverse engineering functionalities.
Details
- Author
- themixednuts
- Categories
- Developer Tools
Jump to
Optional: Install Local Pre-commit Checks
To run formatting checks and full integration tests before every commit:
- http://127.0.0.1:8080/mcp(or your custom port)
{ "mcpServers": { "ghidra": { "url": "http://127.0.0.1:8080/mcp" } } }
- Windows:%APPDATA%\Claude\claude_desktop_config.json
- macOS:~/Library/Application Support/Claude/claude_desktop_config.json
- Linux:~/.config/Claude/claude_desktop_config.json
Add the JSON config above, then restart Claude Desktop.
claude mcp add ghidra "http://127.0.0.1:8080/mcp" --transport http
- Install via deep link
- Install via web fallback
Manual config path:~/.cursor/mcp_settings.json
Use~/.config/opencode/opencode.json(or project-levelopencode.json):
{ "$schema": "https://opencode.ai/config.json", "mcp": { "ghidra": { "type": "remote", "url": "http://127.0.0.1:8080/mcp", "enabled": true } } }
codex mcp add ghidra --url http://127.0.0.1:8080/mcp
[mcp_servers.ghidra] url = "http://127.0.0.1:8080/mcp"
[!IMPORTANT] The default port is8080(configurable in Ghidra:Browser→Edit→Tool Options→Miscellaneous→GhidraMCP HTTP Server). If you change the port, update your client configuration accordingly. Ghidra must be running with the extension enabled for the client to connect.
[!NOTE]Timeout Issues:If you encounter timeout problems, refer to theGhidra timeout configuration guide.
Contributions are welcome! Please feel free to submit pull requests or open issues.
This project is heavily inspired by and based on the work ofLaurieWired. Instead of using a bridge, this plugin directly embeds the server in the plugin.
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Create crafted UI components inspired by the best 21st.dev design engineers.
Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server
An MCP server to help AI assistants to answer questions and generate AccelByte Extend SDK code more effectively .
MCP server for AI Diagram Maker — generate beautiful software engineering diagrams directly inside Cursor, Claude Desktop, Claude Code, or any MCP-compatible AI agent
ALAPI MCP Tools,Call hundreds of API interfaces via MCP
AI-powered SVG animation generator that transforms static files into animated SVG components using the Allyson platform
MCP server that gives AI assistants on-demand access to 1,500+ amCharts docs, ~300 code examples, and 1000+ class API references.
APIMatic MCP Server is used to validate OpenAPI specifications using APIMatic. The server processes OpenAPI files and returns validation summaries by leveraging APIMatic’s API.
One shared context layer for AI agents and humans — live API specs, DB schemas, and versioned contracts across repos so every agent and teammate works from the same source of truth.
Build and deploy full-stack Next.js apps with 98 tools for React, AWS, and MongoDB
If your browser/GitHub blocks custom URI handlers, use the web fallback:Cursor install fallback
Connect Ghidra to MCP-compatible clients
- 14 MCP tools covering analysis, inspection, editing, project workflows, and Version Tracking
- MCP resources for common program views such as program info, listing, imports/exports, strings, RTTI, and decompilation
- Built-in MCP prompts and argument completions for common reverse engineering workflows
- Structured responses with explicit per-call limits and opaque cursors for large datasets
- Large outputs are bounded by tool arguments such aspage_size,max_lines, ormax_results; pass returnednext_cursorvalues back ascursorto continue
- Debugger support for Trace RMI connect/accept/launch, target lifecycle, trace/thread/stack/object discovery, live memory/register/watch operations, static mappings, remote methods, and emulation
- Typed memory mapping applies a data type and returns bounded byte-to-field rows for program memory or the active debugger trace
- Project workflows can rebase program image bases explicitly or from a PE binary's stated ImageBase
- Focused CodeBrowser and Debugger operations automatically navigate the user's active Ghidra UI to the relevant function or address
- Analysis & inspection:analyze,inspect,script_guidance
- Program changes:annotate,functions,symbols,data_types,memory,delete
- Debugging:debugger
- Project workflows:project,batch_operations
- Version tracking:vt_sessions,vt_operations
- Project overview:ghidra://programs
- Program views:ghidra://program/{name}/info,ghidra://program/{name}/functions,ghidra://program/{name}/symbols,ghidra://program/{name}/datatypes,ghidra://program/{name}/memory
- Triage views:ghidra://program/{name}/imports,ghidra://program/{name}/exports,ghidra://program/{name}/strings,ghidra://program/{name}/rtti
- Code views:ghidra://program/{name}/listing/{address},ghidra://program/{name}/function/{address}/decompile
- analyze_function
- analyze_vtable
- compare_binaries
- find_vulnerabilities
- map_data_structures
- rename_analysis
- triage_binary
- Download the latest releasezipfile from theReleasespage.
- In Ghidra, go toFile->Install Extensions....
- Click the+button (Add extension) in the top right corner.
- Navigate to the downloadedzipfile and select it.
- Ensure theGhidraMCPextension is checked in the list and clickOK.
- Restart Ghidra.
- Start Ghidra with the GhidraMCP extension enabled.
- Confirm the server port inConfiguration.
- Point your MCP client tohttp://127.0.0.1:8080/mcp(or your custom port).
[!WARNING]Script Error Dialogs:Some script-driven operations can open a Ghidra error dialog. Close the dialog before continuing, or requests may appear to hang.
[!TIP]Finding program names:Use theghidra://programsresource to see the exact program names available in the current project.
The GhidraMCP server can be configured through Ghidra's application-level settings:
- In Ghidra, go toBrowser→Edit→Tool Options.
- In the left panel, expandMiscellaneousand selectGhidraMCP HTTP Server.
- Configure the following options:
- Server Port: The port number for the MCP server (default: 8080)
- Auto-start Server: Whether to automatically start the server when Ghidra launches
- Request Timeout (seconds): Maximum time allowed for an MCP request before timing out (default: 600)
If you are installing from a GitHub release zip, you can skip this section. The steps below are only for building from source.
git clone https://github.com/themixednuts/GhidraMCP.git
Ensure you have JDK 21 or later installed.
To run the same checks used by the main build CI:
Ghidra jars are fetched automatically from the official release zip on first run.
- just testruns the unit suite
- just test-e2eruns the end-to-end suite
- just update-verification-metadatarefreshes Gradle dependency verification checksums after manual dependency changes
- The manual "Dependency Maintenance" GitHub workflow validates dependency and Ghidra update candidates without opening bot PRs
The installablezipfile is written totarget/(for example,target/GhidraMCP-0.8.0.zip). Install it using the steps above.
Optional: Install Local Pre-commit Checks
To run formatting checks and full integration tests before every commit:
- http://127.0.0.1:8080/mcp(or your custom port)
{ "mcpServers": { "ghidra": { "url": "http://127.0.0.1:8080/mcp" } } }
- Windows:%APPDATA%\Claude\claude_desktop_config.json
- macOS:~/Library/Application Support/Claude/claude_desktop_config.json
- Linux:~/.config/Claude/claude_desktop_config.json
Add the JSON config above, then restart Claude Desktop.
claude mcp add ghidra "http://127.0.0.1:8080/mcp" --transport http
- Install via deep link
- Install via web fallback
Manual config path:~/.cursor/mcp_settings.json
Use~/.config/opencode/opencode.json(or project-levelopencode.json):
{ "$schema": "https://opencode.ai/config.json", "mcp": { "ghidra": { "type": "remote", "url": "http://127.0.0.1:8080/mcp", "enabled": true } } }
codex mcp add ghidra --url http://127.0.0.1:8080/mcp
[mcp_servers.ghidra] url = "http://127.0.0.1:8080/mcp"
[!IMPORTANT] The default port is8080(configurable in Ghidra:Browser→Edit→Tool Options→Miscellaneous→GhidraMCP HTTP Server). If you change the port, update your client configuration accordingly. Ghidra must be running with the extension enabled for the client to connect.
[!NOTE]Timeout Issues:If you encounter timeout problems, refer to theGhidra timeout configuration guide.
Contributions are welcome! Please feel free to submit pull requests or open issues.
This project is heavily inspired by and based on the work ofLaurieWired. Instead of using a bridge, this plugin directly embeds the server in the plugin.
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Create crafted UI components inspired by the best 21st.dev design engineers.
Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server
An MCP server to help AI assistants to answer questions and generate AccelByte Extend SDK code more effectively .
MCP server for AI Diagram Maker — generate beautiful software engineering diagrams directly inside Cursor, Claude Desktop, Claude Code, or any MCP-compatible AI agent
ALAPI MCP Tools,Call hundreds of API interfaces via MCP
AI-powered SVG animation generator that transforms static files into animated SVG components using the Allyson platform
MCP server that gives AI assistants on-demand access to 1,500+ amCharts docs, ~300 code examples, and 1000+ class API references.
APIMatic MCP Server is used to validate OpenAPI specifications using APIMatic. The server processes OpenAPI files and returns validation summaries by leveraging APIMatic’s API.
One shared context layer for AI agents and humans — live API specs, DB schemas, and versioned contracts across repos so every agent and teammate works from the same source of truth.
Build and deploy full-stack Next.js apps with 98 tools for React, AWS, and MongoDB
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.





