Atlas / MCP servers / jtsylve / IDA

IDABLOCK

Name: IDA
Author: jtsylve

mcp/jtsylve/ida-4

MCP server by jtsylve · Audited 2026-10-08

⚑ Report / re-scan Source ↗

A headless MCP server for IDA Pro and Ghidra

Verdict

BLOCK

Grade

Trust score

65 /100

Exposed tools

3 3r · 0w · 0d

Transport

stdio · streamable-http

License

Apache-2.0

Stars

169

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A multi-backend reverse-engineering MCP server. Exposes binary analysis capabilities from IDA Pro and Ghidra over the Model Context Protocol, letting LLMs drive reverse-engineering tools directly. Supports multiple simultaneous databases through a supervisor/worker architecture.

Both backends are standalone servers, not plugins. They use headless APIs (idalib for IDA, pyghidra for Ghidra) to run analysis engines without a GUI.

Backends

Both backends share a common tool interface — core analysis tools use the same names, parameters, and response shapes — so LLM workflows are portable across backends. Each backend also has tools for platform-specific features (e.g. IDA: file region mapping, executable rebuilding, IDC evaluation, IDAPython scripting; Ghidra: Function ID analysis, data type archives).

Requirements

Python 3.12+
uv package manager (recommended) or pip
macOS, Windows, or Linux
At least one supported backend installed on the same machine

Installation

Install individual backend packages directly, or install re-mcp and select a backend with --backend:

# Individual backend packages (each provides its own CLI)
uv tool install re-mcp-ida
uv tool install re-mcp-ghidra

# Or install the core package and use --backend to select
uv tool install re-mcp --with re-mcp-ida --with re-mcp-ghidra

With pip:

pip install re-mcp-ida        # IDA only
pip install re-mcp-ghidra     # Ghidra only
p

Read from source at commit a550093b25f1OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add re-mcp -- uvx re-mcp

claude-desktop

{
  "mcpServers": {
    "re-mcp": {
      "command": "uvx",
      "args": [
        "re-mcp"
      ]
    }
  }
}

Exposed tools (3)

3 read · 0 write · 0 destructive.

Tool	Risk	Description
`close_database`	read	Close the currently open database.
`convert_number`	read	Convert a number between hex, decimal, octal, and binary representations.
`open_database`	read	Open a binary for analysis with Ghidra.

Trust audit

BLOCKgrade D · trust 65/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (4 observation(s))
Shell: declared (5 observation(s))
Dependencies: pinned
Secrets in source: none-found

Findings (14)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/re-mcp-core/src/re_mcp/sandbox.py:766

exec(bytecode, glb)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/re-mcp-ida/src/re_mcp_ida/tools/utility.py:147

exec(code, exec_globals)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

packages/re-mcp-core/src/re_mcp/sandbox.py:454

return __import__(name, globals, locals, fromlist, level)

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

packages/re-mcp-ghidra/src/re_mcp_ghidra/server.py:100

mod = importlib.import_module(f"re_mcp_ghidra.tools.{module_name}")

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

packages/re-mcp-ida/src/re_mcp_ida/server.py:122

mod = importlib.import_module(f"re_mcp_ida.tools.{module_name}")

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.symlink · CWE-1104

LICENSES/Apache-2.0.txt

LICENSES/Apache-2.0.txt

Why it matters. link not followed

LOWInventory / provenance · inv.symlink · CWE-1104

LICENSES/MIT.txt

LICENSES/MIT.txt

Why it matters. link not followed

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

README.md:266

"url": "http://127.0.0.1:<port>/mcp",