r0idamcp

What is r0idamcp?

r0idamcp is a single-file MCP server that integrates with IDA Pro to enable large-model-driven automated reverse engineering. It consolidates features from multiple existing projects with minimal dependencies—only FastMCP 2.0—and works with any MCP‑capable AI assistant.

How to use r0idamcp?

Install the r0idamcp.py file in the IDA Pro plugins directory (e.g., %appdata%\Hex-Rays\IDA Pro\plugins on Windows). Ensure fastmcp is installed via pip in IDA’s Python environment. In IDA, go to Edit → Plugins → r0mcp to start the SSE server on port 26868. Configure your MCP client with the SSE URL http://<IDA-machine-IP>:26868/sse.

Key features of r0idamcp

• Provides 20+ MCP tools for IDA Pro reverse engineering
• No uv or specific Python version required outside IDA
• Supports all MCP clients without extra dependencies
• Single-file code with one-to-one tool-to-function mapping
• Uses SSE transport for real‑time communication

Use cases of r0idamcp

• Automatically rename functions and variables in an IDB
• Decompile functions or disassemble to machine code
• Search and list strings or functions for analysis
• Add comments, set types, and declare C structures

FAQ from r0idamcp

What are the dependencies for r0idamcp?

IDA Pro 8.3 or higher (9.0 recommended), FastMCP 2.0 installed via pip, and IDA’s built‑in Python. No system‑wide uv or Python version is needed.

How do I connect a MCP client to r0idamcp?

The server listens at http://0.0.0.0:26868/sse after starting. Configure your client with the appropriate IP address of the IDA machine (e.g., http://192.168.1.2:26868/sse) and set the transport type to SSE.

What if IDA and the MCP client run on the same machine?

Change 0.0.0.0 to 127.0.0.1 in the server source code so the server only listens on localhost.

What tools does r0idamcp expose?

Tools include decompile_function, rename_function, set_comment, list_functions, search_strings, get_xrefs_to, and more. The full list is documented in the README.

Does r0idamcp support authentication?

No authentication mechanism is mentioned; the server accepts connections from any client that can reach the IP and port.