Overview
What is IDA Pro MCP Server?
IDA Pro MCP Server is a plugin that enables remote querying and control of IDA Pro through the Model Context Protocol (MCP). It allows AI assistants such as Claude to interact directly with IDA Pro for binary analysis tasks.
How to use IDA Pro MCP Server?
Copy the ida-mcp-server.py file to the IDA Pro plugins directory (requires IDA Pro 9.0+). Install Python dependencies with pip install -r requirements.txt. Open a binary in IDA Pro – the plugin automatically starts an MCP server on port 3000. Configure your AI assistant (e.g., Claude or VSCode) to connect via http://127.0.0.1:3000/sse using the SSE transport type.
Key features of IDA Pro MCP Server
- Retrieve byte data, disassembly, and decompiled pseudocode from any address.
- List and manage functions, including creation and deletion.
- Get imports, exports, entry points, and cross-references.
- Read various data types: dword, word, byte, qword, float, double, string.
- List all strings in the binary with addresses.
- Obtain segment information for the entire binary.
Use cases of IDA Pro MCP Server
- Reverse engineer unknown binaries by querying functions, data, and strings.
- Analyze malware to identify imports, exports, and suspicious API calls.
- Automate step‑by‑step binary analysis workflows with an AI assistant.
- Perform vulnerability research through code and data inspection.
- Extract and examine encryption routines and algorithm details.
FAQ from IDA Pro MCP Server
What version of IDA Pro is required?
IDA Pro 9.0 or later is required; the plugin is tested specifically with version 9.0+.
How does the server communicate with an AI assistant?
The plugin starts an MCP server using SSE (Server‑Sent Events) at http://127.0.0.1:3000/sse.
Do I need to start the server manually?
No. When you open a binary file in IDA Pro, the plugin loads automatically and begins the MCP server locally on port 3000.
Which AI assistants are supported out of the box?
The README provides configuration for Claude and VSCode via an mcp.json file. Any MCP‑compatible client can connect using the same SSE endpoint.
What data is exposed through the tools?
All data resides in the IDA Pro database of the currently open binary. Tools read bytes, disassembly, pseudocode, functions, segments, imports/exports, strings, and typed values (dword, word, byte, qword, float, double) from the address space of the loaded binary.
