IDA Pro MCP Server

A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.

Overview

This project provides a bridge between AI assistants and IDA Pro, a popular disassembler and debugger used for reverse engineering software. It consists of three main components:

1. IDA Pro Remote Control Plugin (ida_remote_server.py): An IDA Pro plugin that creates an HTTP server to remotely control IDA Pro functions.
2. IDA Remote Client (idaremoteclient.ts): A TypeScript client for interacting with the IDA Pro Remote Control Server.
3. MCP Server (index.ts): A Model Context Protocol server that exposes IDA Pro functionality to AI assistants.

Features

• Execute Python scripts in IDA Pro from AI assistants
• Retrieve information about binaries:
  • Strings
  • Imports
  • Exports
  • Functions
• Advanced binary analysis capabilities:
  • Search for immediate values in instructions
  • Search for text strings in the binary
  • Search for specific byte sequences
  • Get disassembly for address ranges
• Automate IDA Pro operations through a standardized interface
• Secure communication between components

Prerequisites

• IDA Pro 8.3 or later
• Node.js 18 or later
• TypeScript

Example usage ida_remote_server.py

curl -X POST -H "Content-Type: application/json" -d '{"script":"print(\"Script initialization...\")"}' http://127.0.0.1:9045/api/execute
{"success": true, "output": "Script initialization...\n"}

Example usage MCP Server

Installation

1. Install the IDA Pro Remote Control Plugin

1. Copy ida_remote_server.py to your IDA Pro plugins directory:

   • Windows: %PROGRAMFILES%\IDA Pro\plugins
   • macOS: /Applications/IDA Pro.app/Contents/MacOS/plugins
   • Linux: /opt/idapro/plugins

2. Start IDA Pro and open a binary file.

3. The plugin will automatically start an HTTP server on 127.0.0.1:9045.

2. Install the MCP Server

1. Clone this repository:

   git clone <repository-url>
   cd ida-server
   

2. Install dependencies:

   npm install
   

3. Build the project:

   npm run build
   

4. Configure the MCP server in your AI assistant's MCP settings file:

   {
     "mcpServers": {
       "ida-pro": {
         "command": "node",
         "args": ["path/to/ida-server/dist/index.js"],
         "env": {}
       }
     }
   }
   

Usage

Once installed and configured, the MCP server provides the following tool to AI assistants:

run_ida_command

Executes an IDA Pro Python script.

Parameters:

• scriptPath (required): Absolute path to the script file to execute
• outputPath (optional): Absolute path to save the script's output to

Example:

# Example IDA Pro script (save as /path/to/script.py)
import idautils

# Count functions
function_count = len(list(idautils.Functions()))
print(f"Binary has {function_count} functions")

# Get the first 5 function names
functions = list(idautils.Functions())[:5]
for func_ea in functions:
    print(f"Function: {ida_name.get_ea_name(func_ea)} at {hex(func_ea)}")

# Return data
return_value = function_count

The AI assistant can then use this script with:

<use_mcp_tool>
<server_name>ida-pro</server_name>
<tool_name>run_ida_command</tool_name>
<arguments>
{
  "scriptPath": "/path/to/script.py"
}
</arguments>
</use_mcp_tool>

search_immediate_value

Searches for immediate values in the binary's instructions.

Parameters:

• value (required): Value to search for (number or string)
• radix (optional): Radix for number conversion (default: 16)
• startAddress (optional): Start address for search
• endAddress (opti

... View full README on GitHub