This project bridges MCP clients with Ghidra so that large language models can decompile, analyze, list metadata from, and rename elements within binaries. It is designed for developers and researchers who want to enable autonomous reverse engineering workflows using Ghidra.
Project overview
It allows MCP-connected LLMs to autonomously interact with Ghidra's core reverse engineering functionality, supporting tasks such as decompilation and metadata listing.
Project type
MCP · AI Agent
Use cases
Automation
Deployment
Refer to project documentation
License
Apache-2.0
Best for
Developers and researchers seeking to enable large language models to autonomously interact with Ghidra for binary decompilation, analysis, and metadata listing.
Key capabilities
Allows MCP-connected LLMs to decompile and analyze binaries loaded within Ghidra.
Enables LLMs to automatically rename methods and data inside Ghidra.
Enables LLMs to list methods, classes, imports, and exports from binaries.
Provides a Ghidra extension plugin that exposes an HTTP server to interface with Ghidra.
Provides a Python script acting as the MCP server that connects to the Ghidra HTTP server.
Limitations and risks
Requires Ghidra to be installed and running.
Requires a separate MCP client to interface with the server.
Allows LLMs to autonomously rename methods and data, which could alter binaries if not carefully reviewed.
Getting started
Setup involves downloading and configuring Ghidra, installing the GhidraMCP plugin via the Ghidra extensions menu, enabling the plugin in the developer configuration, running the Python MCP bridge script pointing to the Ghidra server, and configuring an MCP client to connect to the bridge.
Evidence and sources
README: ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clie…
README: - Decompile and analyze binaries in Ghidra - Automatically rename methods and data - List methods, classes, imports, and exports
README: [](https://github.com/LaurieWired/GhidraMCP/releases)
README: Theoretically, any MCP client should work with ghidraMCP. Three examples are given below.