Is GhidrAssistMCP safe to use?

GhidrAssistMCP has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install GhidrAssistMCP?

GhidrAssistMCP can be installed by cloning its GitHub repository and following the setup instructions in the README.

What can GhidrAssistMCP do?

GhidrAssistMCP provides 26 tools: get_binary_info, list_binaries, get_functions, search_functions_by_name, get_function_statistics and 21 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with GhidrAssistMCP?

GhidrAssistMCP is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is GhidrAssistMCP actively maintained?

GhidrAssistMCP is actively maintained — last commit was 7 days ago. It has 623 GitHub stars.

GhidrAssistMCP

Name: GhidrAssistMCP
Author: symgraph

by symgraph

An MCP extension for Ghidra

623 26 tools GitHub

No known CVEs

MIT license

Actively maintained

Last commit 7d ago

Works with most clients

Transport: stdio, sse, http

26 tools · ~1.2k tok

Grade B · 0.6% of 200K ctx

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ghidrassistmcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ghidrassistmcp)](https://mcppedia.org/s/ghidrassistmcp)

Read me

What GhidrAssistMCP does

A powerful Ghidra extension that provides an MCP (Model Context Protocol) server, enabling AI assistants and other tools to interact with Ghidra's reverse engineering capabilities through a standardized API.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

73/100across 5 weighted dimensions

How we score →

0255075100

−27

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (26)

Click any tool to inspect its schema.

~1.2k tokens total

Inventory

Resources (6)

program_info

Static data resource for program information

ghidra://program/info

functions

Static data resource for functions

ghidra://program/functions

strings

Static data resource for strings

ghidra://program/strings

imports

Static data resource for imports

ghidra://program/imports

exports

Static data resource for exports

ghidra://program/exports

segments

Static data resource for memory segments

ghidra://program/segments

Inventory

Prompts (7)

function_analysis

Pre-built analysis prompt for analyzing functions

binary_overview

Pre-built analysis prompt for binary overview

vulnerability_detection

Pre-built analysis prompt for vulnerability detection

code_understanding

Pre-built analysis prompt for understanding code

data_flow_analysis

Pre-built analysis prompt for data flow analysis

api_analysis

Pre-built analysis prompt for API analysis

reverse_engineering_guide

Pre-built analysis prompt for reverse engineering guidance

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is GhidrAssistMCP safe to use?: GhidrAssistMCP has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install GhidrAssistMCP?: GhidrAssistMCP can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can GhidrAssistMCP do?: GhidrAssistMCP provides 26 tools: get_binary_info, list_binaries, get_functions, search_functions_by_name, get_function_statistics and 21 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with GhidrAssistMCP?: GhidrAssistMCP is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is GhidrAssistMCP actively maintained?: GhidrAssistMCP is actively maintained — last commit was 7 days ago. It has 623 GitHub stars.

Similar servers

Others in security

View all →

Evil Mcp Server93

An evil MCP server used for redteam testing

30 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

8.9k 3

io.github.jasonxkensei/xproof92

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

1 1

Nothumanallowed92

Security-first platform for AI agents. 38 specialized agents, 15 AI-powered extensions, zero-knowledge multi-agent orchestration. SENTINEL WAF, Ed25519 auth, 2.6M grounding facts.

97 5

MCP Security Weekly

Get CVE alerts and security updates for GhidrAssistMCP and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ghidrassistmcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ghidrassistmcp)](https://mcppedia.org/s/ghidrassistmcp)

Read me

What GhidrAssistMCP does

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

GhidrAssistMCP

Overview

GhidrAssistMCP bridges the gap between AI-powered analysis tools and Ghidra's comprehensive reverse engineering platform. By implementing the Model Context Protocol, this extension allows external AI assistants, automated analysis tools, and custom scripts to seamlessly interact with Ghidra's analysis capabilities.

Key Features

MCP Server Integration: Full Model Context Protocol server implementation using official SDK
Dual HTTP Transports: Supports SSE and Streamable HTTP transports for maximum client compatibility
38 Built-in Tools: Comprehensive set of analysis tools with action-based consolidation for cleaner APIs
6 MCP Resources: Static data resources for program info, functions, strings, imports, exports, and segments
7 MCP Prompts: Pre-built analysis prompts for common reverse engineering tasks
Result Caching: Intelligent caching system to improve performance for repeated queries
Async Task Support: Long-running operations execute asynchronously with task management
Multi-Program Support: Work with multiple open programs simultaneously using program_name parameter
Multi-Window Support: Single MCP server shared across all CodeBrowser windows with intelligent focus tracking
Active Context Awareness: Automatic detection of which binary window is in focus, with context hints in all tool responses
Configurable UI: Easy-to-use interface for managing tools and monitoring activity
Real-time Logging: Track all MCP requests and responses with detailed logging
Dynamic Tool Management: Enable/disable tools individually with persistent settings

Clients

Shameless self-promotion: GhidrAssist supports GhidrAssistMCP right out of the box.

Screenshots

Installation

Prerequisites

Ghidra 11.4+ (tested with Ghidra 12.0 Public)
An MCP Client (Like GhidrAssist)

Binary Release (Recommended)

Download the latest release:
- Go to the Releases page
- Download the latest .zip file (e.g., GhidrAssistMCP-v1.0.0.zip)
Install the extension:
- In Ghidra: File → Install Extensions → Add Extension
- Select the downloaded ZIP file
- Restart Ghidra when prompted
Enable the plugin:
- File → Configure → Configure Plugins
- Search for "GhidrAssistMCP"
- Check the box to enable the plugin

Building from Source

Clone the repository:

git clone <repository-url>
cd GhidrAssistMCP

Point Gradle at your Ghidra install:
- Set GHIDRA_INSTALL_DIR (environment variable), or pass -PGHIDRA_INSTALL_DIR=<path> when you run Gradle.
Build + install:

Ensure Ghidra isn't running and run:
```
gradle installExtension
```
This copies the built ZIP into your Ghidra install ([GHIDRA_INSTALL_DIR]/Extensions/Ghidra) and extracts it into your Ghidra user Extensions folder (replacing any existing extracted copy).

If you need to override that location, pass -PGHIDRA_USER_EXTENSIONS_DIR=<path>.
Restart / verify:
- Restart Ghidra.
- If the plugin doesn't appear, enable it via File → Configure → Configure Plugins (search for "GhidrAssistMCP").

Configuration

Initial Setup

Open the Control Panel:
- Window → GhidrAssistMCP (or use the toolbar icon)
Configure Server Settings:
- Host: Default is localhost
- Port: Default is 8080
- Enable/Disable: To

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

73/100across 5 weighted dimensions

How we score →

0255075100

−27

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (26)

Click any tool to inspect its schema.

~1.2k tokens total

Inventory

Resources (6)

program_info

Static data resource for program information

ghidra://program/info

functions

Static data resource for functions

ghidra://program/functions

strings

Static data resource for strings

ghidra://program/strings

imports

Static data resource for imports

ghidra://program/imports

exports

Static data resource for exports

ghidra://program/exports

segments

Static data resource for memory segments

ghidra://program/segments

Inventory

Prompts (7)

function_analysis

Pre-built analysis prompt for analyzing functions

binary_overview

Pre-built analysis prompt for binary overview

vulnerability_detection

Pre-built analysis prompt for vulnerability detection

code_understanding

Pre-built analysis prompt for understanding code

data_flow_analysis

Pre-built analysis prompt for data flow analysis

api_analysis

Pre-built analysis prompt for API analysis

reverse_engineering_guide

Pre-built analysis prompt for reverse engineering guidance

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is GhidrAssistMCP safe to use?: GhidrAssistMCP has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install GhidrAssistMCP?: GhidrAssistMCP can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can GhidrAssistMCP do?: GhidrAssistMCP provides 26 tools: get_binary_info, list_binaries, get_functions, search_functions_by_name, get_function_statistics and 21 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with GhidrAssistMCP?: GhidrAssistMCP is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is GhidrAssistMCP actively maintained?: GhidrAssistMCP is actively maintained — last commit was 7 days ago. It has 623 GitHub stars.

Similar servers

Others in security

View all →

Evil Mcp Server93

An evil MCP server used for redteam testing

30 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

8.9k 3

io.github.jasonxkensei/xproof92

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

1 1

Nothumanallowed92

Security-first platform for AI agents. 38 specialized agents, 15 AI-powered extensions, zero-knowledge multi-agent orchestration. SENTINEL WAF, Ed25519 auth, 2.6M grounding facts.

97 5

MCP Security Weekly

Get CVE alerts and security updates for GhidrAssistMCP and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?