ghidraMCP is an MCP server that exposes Ghidra's reverse engineering capabilities to language models and other MCP clients.
The tool solves the problem of integrating Ghidra's binary analysis features into LLM-driven workflows. It wraps core Ghidra functionality—decompilation, method and data renaming, and enumeration of methods, classes, imports, and exports—as MCP tools that remote clients can invoke. This allows language models to autonomously analyze and reverse engineer applications by calling these tools through the MCP protocol.
Adoption suits teams building LLM-assisted reverse engineering workflows or security analysis pipelines. The tool works with any MCP client, including VS Code and Claude Code, and can run either as a plugin within the Ghidra GUI or headlessly via PyGhidra without a GUI. Headless operation requires Python 3.10 through 3.13 and allows analysis to proceed without launching Ghidra's interface, making it suitable for automation and server environments.
Development activity shows consistent engagement with the codebase. The extension is built with Gradle and requires Java 21, while the Python MCP server component includes test coverage. The project maintains documentation through video installation guides and detailed setup instructions for multiple client configurations. Build artifacts are distributed as releases containing both the Ghidra plugin and Python client, with source builds supported through environment configuration.
