MCP.so
Sign In
P

Pyghidra MCP Server

@clearbluejar

Basic information

Category

Other

Transports

stdio

Author

clearbluejar

Submitted by

J Mac

About Pyghidra MCP Server

PyGhidra-MCP - Ghidra Model Context Protocol Server

#pyghidra#ghidra-mcp#reverse-engineering

Pyghidra MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "pyghidra-mcp": {
      "command": "uvx",
      "args": [
        "pyghidra-mcp",
        "/bin/ls",
        "/bin/jq",
        "/path/to/bin"
      ],
      "env": {
        "GHIDRA_INSTALL_DIR": "/path/to/ghidra"
      }
    }
  }
}

Pyghidra MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Pyghidra Mcp?

Pyghidra Mcp is a command-line Model Context Protocol (MCP) server that brings Ghidra’s full reverse engineering capabilities—via its ProgramAPI and FlatProgramAPI—to LLMs and intelligent agents. It bridges Ghidra to Python using pyghidra and jpype, then exposes that functionality through the MCP interface for headless, automated, and AI-assisted workflows.

How to use Pyghidra Mcp?

Run the server from the command line using uvx pyghidra-mcp (or as a Docker container) and pass one or more binary files as arguments. Choose the transport protocol with --transport (stdio, sse, or streamable-http). The server then loads the binaries into a Ghidra project and exposes MCP tools for analysis.

Key features of Pyghidra Mcp

  • No Ghidra GUI required – runs entirely via CLI
  • Designed for automation and CI/CD pipelines
  • Supports stdio, SSE, and streamable HTTP transports
  • Agent-ready for intelligent reverse engineering workflows
  • Semantic code search using vector embeddings (ChromaDB)
  • Concurrent analysis of all binaries in a Ghidra project

Use cases of Pyghidra Mcp

  • Automating reverse engineering tasks in headless environments
  • Integrating Ghidra analysis into LLM-based chat interfaces or agents
  • Running batch decompilation and symbol searches in CI pipelines
  • Simultaneously analyzing multiple binaries in a single project
  • Enabling semantic search across decompiled functions and symbols for agent-driven triage

Frequently asked questions

1

How is Pyghidra Mcp different from the original ghidra-mcp?

It does not require a Ghidra GUI, is designed for automation and CI/CD, supports faster command-line startup, concurrent project-wide analysis, and includes semantic code search via ChromaDB.

2

What runtime dependencies does Pyghidra Mcp require?

It requires a local Ghidra installation with the `GHIDRA_INSTALL_DIR` environment variable set. It can be run via Python (with `uv` or `pipx`) or as a Docker container from `ghcr.io/clearbluejar/pyghidra-mcp`.

3

What transports does Pyghidra Mcp support?

It supports standard I/O (stdio), server-sent events (SSE), and streamable HTTP. The transport is selected with the `--transport` flag.

4

How do I run Pyghidra Mcp with Docker?

Map a directory containing binaries into the container and pass the binary paths as arguments: `docker run -i --rm -v "$(pwd)/binaries:/binaries" ghcr.io/clearbluejar/pyghidra-mcp /binaries/*`

5

What tools does Pyghidra Mcp expose?

It exposes tools for code search, cross-references, function decompilation, listing exports/imports, listing project binaries and program info, and searching functions and symbols by name.

Comments

More Other MCP servers