← MCP servers · lauriewired

Ghidra

CAUTIONgrade B · trust 89/100

MCP Server for Ghidra

Overview

From the repository's own README, as read at the audited commit.

[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://www.apache.org/licenses/LICENSE-2.0)[![GitHub release (latest by date)](https://img.shields.io/github/v/release/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/releases)[![GitHub stars](https://img.shields.io/github/stars/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/stargazers)[![GitHub forks](https://img.shields.io/github/forks/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/network/members)[![GitHub contributors](https://img.shields.io/github/contributors/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/graphs/contributors)[![Follow @lauriewired](https://img.shields.io/twitter/follow/lauriewired?style=social)](https://twitter.com/lauriewired)![ghidra_MCP_logo](https://github.com/user-attachments/assets/4986d702-be3f-4697-acce-aea55cd79ad3)# ghidraMCPghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients.https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9# FeaturesMCP Server + Ghidra Plugin- Decompile and analyze binaries in Ghidra- Automatically rename methods and data- List methods, classes, imports, and exports# Installation## Prerequisites- Install [Ghidra](https://ghidra-sre.org)- Python3- MCP [SDK](https://github.com/modelcontextprotocol/python-sdk)## GhidraFirst, download the latest [release](https://github.com/LaurieWired/GhidraMCP/releases) from this repository. This contains the Ghidra plugin and Python MCP client. Then, you can directly import the plugin into Ghidra.1. Run Ghidra2. Select `File` -> `Install Extensions`3. Click the `+` button4. Select the `GhidraMCP-1-2.zip` (or your chosen version) from the downloaded release5. Restart Ghidra6. Make sure the GhidraMCPPlugin is enabled in `File` -> `Configure` -> `Developer`7. *Optional*: Configure the p

Exposed tools (27) 19 read · 8 write · 0 destructive

ToolRiskDescription
decompile_functionread
decompile_function_by_addressread
disassemble_functionread
get_current_addressread
get_current_functionread
get_function_by_addressread
get_function_xrefsread
get_xrefs_fromread
get_xrefs_toread
list_classesread
list_data_itemsread
list_exportsread
list_functionsread
list_importsread
list_methodsread
list_namespacesread
list_segmentsread
list_stringsread
rename_datawrite
rename_functionwrite
rename_function_by_addresswrite
rename_variablewrite
search_functions_by_nameread
set_decompiler_commentwrite
set_disassembly_commentwrite
set_function_prototypewrite
set_local_variable_typewrite

Details

Source
lauriewired/ghidramcp
Transports
sse
License
Apache-2.0
Stars
10,010 · pushed 447d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (4 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (5)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
bridge_mcp_ghidra.py:17
DEFAULT_GHIDRA_SERVER = "http://127.0.0.1:8080/"
MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
sse
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:64
"http://127.0.0.1:8080/"
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:82
python bridge_mcp_ghidra.py --transport sse --mcp-host 127.0.0.1 --mcp-port 8081 --ghidra-server http://127.0.0.1:8080/
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:92
2. Server URL: `http://127.0.0.1:8081/sse`

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha cbd110b08263 · full audit: observations/trust-audit/mcp-server/lauriewired__ghidra-1.json · Report an issue or request a re-scan

Audit history

DateSourceVerdictGradeScoreChange
2026-09-13cbd110b08263CAUTIONB89first audit

Also audited

Servers with a similar trust profile.

Questions

What is the Ghidra MCP server?

MCP Server for Ghidra

What tools does Ghidra expose?

27 in total: 19 read-only, 8 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Ghidra safe to connect to an agent?

With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Ghidra need?

No credential environment variables were found in its source, so it appears to need none.

How does Ghidra run?

It speaks sse, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (cbd110b08263), read on 2026-09-13. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13