Ghidra
CAUTIONgrade B · trust 89/100MCP Server for Ghidra
Overview
From the repository's own README, as read at the audited commit.
[](https://www.apache.org/licenses/LICENSE-2.0)[](https://github.com/LaurieWired/GhidraMCP/releases)[](https://github.com/LaurieWired/GhidraMCP/stargazers)[](https://github.com/LaurieWired/GhidraMCP/network/members)[](https://github.com/LaurieWired/GhidraMCP/graphs/contributors)[](https://twitter.com/lauriewired)# ghidraMCPghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients.https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9# FeaturesMCP Server + Ghidra Plugin- Decompile and analyze binaries in Ghidra- Automatically rename methods and data- List methods, classes, imports, and exports# Installation## Prerequisites- Install [Ghidra](https://ghidra-sre.org)- Python3- MCP [SDK](https://github.com/modelcontextprotocol/python-sdk)## GhidraFirst, download the latest [release](https://github.com/LaurieWired/GhidraMCP/releases) from this repository. This contains the Ghidra plugin and Python MCP client. Then, you can directly import the plugin into Ghidra.1. Run Ghidra2. Select `File` -> `Install Extensions`3. Click the `+` button4. Select the `GhidraMCP-1-2.zip` (or your chosen version) from the downloaded release5. Restart Ghidra6. Make sure the GhidraMCPPlugin is enabled in `File` -> `Configure` -> `Developer`7. *Optional*: Configure the p
Exposed tools (27) 19 read · 8 write · 0 destructive
| Tool | Risk | Description |
|---|---|---|
decompile_function | read | |
decompile_function_by_address | read | |
disassemble_function | read | |
get_current_address | read | |
get_current_function | read | |
get_function_by_address | read | |
get_function_xrefs | read | |
get_xrefs_from | read | |
get_xrefs_to | read | |
list_classes | read | |
list_data_items | read | |
list_exports | read | |
list_functions | read | |
list_imports | read | |
list_methods | read | |
list_namespaces | read | |
list_segments | read | |
list_strings | read | |
rename_data | write | |
rename_function | write | |
rename_function_by_address | write | |
rename_variable | write | |
search_functions_by_name | read | |
set_decompiler_comment | write | |
set_disassembly_comment | write | |
set_function_prototype | write | |
set_local_variable_type | write |
Details
- Source
- lauriewired/ghidramcp
- Transports
- sse
- License
- Apache-2.0
- Stars
- 10,010 · pushed 447d ago
Trust audit
Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (4 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
DEFAULT_GHIDRA_SERVER = "http://127.0.0.1:8080/"
sse
"http://127.0.0.1:8080/"
python bridge_mcp_ghidra.py --transport sse --mcp-host 127.0.0.1 --mcp-port 8081 --ghidra-server http://127.0.0.1:8080/
2. Server URL: `http://127.0.0.1:8081/sse`
Gates applied: no_behavioural_pass.
Audited 2026-09-13 · audit v0.4.0 · source sha cbd110b08263 · full audit: observations/trust-audit/mcp-server/lauriewired__ghidra-1.json · Report an issue or request a re-scan
Audit history
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-13 | cbd110b08263 | CAUTION | B | 89 | first audit |
Also audited
Servers with a similar trust profile.
Questions
What is the Ghidra MCP server?
MCP Server for Ghidra
What tools does Ghidra expose?
27 in total: 19 read-only, 8 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Ghidra safe to connect to an agent?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Ghidra need?
No credential environment variables were found in its source, so it appears to need none.
How does Ghidra run?
It speaks sse, so it runs as a service you connect to over the network.
How current is this page?
The grade is for one exact copy of the source (cbd110b08263), read on 2026-09-13. The repository is watched and re-audited when it changes.
Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13