Ghidra MCP Zig Plugin

What is Ghidra MCP Zig Plugin?

A Ghidra plugin that provides a bridge between Ghidra and a Zig‑based MCP (Model Context Protocol) server for enhanced program analysis capabilities such as function decompilation, renaming, and symbol management. It is aimed at reverse engineers and analysts who want to extend Ghidra’s functionality via an MCP interface.

How to use Ghidra MCP Zig Plugin?

Build the plugin with make build-plugin, copy the resulting library to your Ghidra plugins directory, and restart Ghidra. Then start the MCP server with make run-server and use plugin features through Ghidra’s interface (e.g., commands like decompile, rename_function, list_functions).

Key features of Ghidra MCP Zig Plugin

• JNI‑based communication between Ghidra and Zig
• Function decompilation and renaming
• Data symbol management
• Import/Export listing
• MCP server integration
• Comprehensive test suite with Make targets
• Type‑safe JNI bridge implementation
• Go client library for easy integration

Use cases of Ghidra MCP Zig Plugin

• Decompile functions at a given address
• Rename functions or data objects
• List all functions, data, imports, or exports
• Automate analysis workflows via MCP commands
• Integrate Ghidra analysis into external tools using the Go client