What is Pyghidra Mcp?
Pyghidra Mcp is a command-line Model Context Protocol (MCP) server that brings Ghidra’s full reverse engineering capabilities—via its ProgramAPI and FlatProgramAPI—to LLMs and intelligent agents. It bridges Ghidra to Python using pyghidra and jpype, then exposes that functionality through the MCP interface for headless, automated, and AI-assisted workflows.
How to use Pyghidra Mcp?
Run the server from the command line using uvx pyghidra-mcp (or as a Docker container) and pass one or more binary files as arguments. Choose the transport protocol with --transport (stdio, sse, or streamable-http). The server then loads the binaries into a Ghidra project and exposes MCP tools for analysis.
Key features of Pyghidra Mcp
- No Ghidra GUI required – runs entirely via CLI
- Designed for automation and CI/CD pipelines
- Supports stdio, SSE, and streamable HTTP transports
- Agent-ready for intelligent reverse engineering workflows
- Semantic code search using vector embeddings (ChromaDB)
- Concurrent analysis of all binaries in a Ghidra project
Use cases of Pyghidra Mcp
- Automating reverse engineering tasks in headless environments
- Integrating Ghidra analysis into LLM-based chat interfaces or agents
- Running batch decompilation and symbol searches in CI pipelines
- Simultaneously analyzing multiple binaries in a single project
- Enabling semantic search across decompiled functions and symbols for agent-driven triage
コメント