概览
What is IDA Pro MCP Server?
IDA Pro MCP Server is a plugin that allows remote querying and control of IDA Pro through the Model Context Protocol (MCP) interface. It enables AI assistants (such as Claude) to interact directly with IDA Pro for binary analysis tasks.
How to use IDA Pro MCP Server?
Copy the plugin file to the IDA Pro plugins directory, install Python dependencies with pip install -r requirements.txt, then open a binary in IDA Pro. The plugin automatically starts an MCP server on port 3000. Configure your AI assistant (e.g., Claude or VSCode) with the SSE endpoint http://127.0.0.1:3000/sse and type sse.
Key features of IDA Pro MCP Server?
- Query disassembly and pseudocode from any address
- List all functions, segments, imports, and exports
- Read data types: dword, word, byte, qword, float, double, string
- Get cross-references to a specified address
- Define or undefine functions at arbitrary addresses
- Retrieve all strings present in the binary file
Use cases of IDA Pro MCP Server?
- Analyze unknown malware by examining imports, strings, and entry points
- Reverse engineer algorithms using decompiled pseudocode and control flow
- Automate binary analysis workflows with an AI assistant connected to IDA Pro
- Trace API calls and cross-references during security research
- Document analysis results by querying functions and data step by step
FAQ from IDA Pro MCP Server
What version of IDA Pro is required?
The plugin is designed for and tested with IDA Pro version 9.0+.
How does the server communicate with an AI assistant?
It uses the Model Context Protocol (MCP) over SSE (Server-Sent Events) on `http://127.0.0.1:300
