MCP.so
登录
P

Pyghidra MCP Server

@clearbluejar

基本信息

分类

其他

传输方式

stdio

作者

clearbluejar

提交者

J Mac

关于 Pyghidra MCP Server

PyGhidra-MCP - Ghidra Model Context Protocol Server

#pyghidra#ghidra-mcp#reverse-engineering

Pyghidra MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "pyghidra-mcp": {
      "command": "uvx",
      "args": [
        "pyghidra-mcp",
        "/bin/ls",
        "/bin/jq",
        "/path/to/bin"
      ],
      "env": {
        "GHIDRA_INSTALL_DIR": "/path/to/ghidra"
      }
    }
  }
}

Pyghidra MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表,不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Pyghidra Mcp?

Pyghidra Mcp is a command-line Model Context Protocol (MCP) server that brings Ghidra’s full reverse engineering capabilities—via its ProgramAPI and FlatProgramAPI—to LLMs and intelligent agents. It bridges Ghidra to Python using pyghidra and jpype, then exposes that functionality through the MCP interface for headless, automated, and AI-assisted workflows.

How to use Pyghidra Mcp?

Run the server from the command line using uvx pyghidra-mcp (or as a Docker container) and pass one or more binary files as arguments. Choose the transport protocol with --transport (stdio, sse, or streamable-http). The server then loads the binaries into a Ghidra project and exposes MCP tools for analysis.

Key features of Pyghidra Mcp

  • No Ghidra GUI required – runs entirely via CLI
  • Designed for automation and CI/CD pipelines
  • Supports stdio, SSE, and streamable HTTP transports
  • Agent-ready for intelligent reverse engineering workflows
  • Semantic code search using vector embeddings (ChromaDB)
  • Concurrent analysis of all binaries in a Ghidra project

Use cases of Pyghidra Mcp

  • Automating reverse engineering tasks in headless environments
  • Integrating Ghidra analysis into LLM-based chat interfaces or agents
  • Running batch decompilation and symbol searches in CI pipelines
  • Simultaneously analyzing multiple binaries in a single project
  • Enabling semantic search across decompiled functions and symbols for agent-driven triage

常见问题

1

How is Pyghidra Mcp different from the original ghidra-mcp?

It does not require a Ghidra GUI, is designed for automation and CI/CD, supports faster command-line startup, concurrent project-wide analysis, and includes semantic code search via ChromaDB.

2

What runtime dependencies does Pyghidra Mcp require?

It requires a local Ghidra installation with the `GHIDRA_INSTALL_DIR` environment variable set. It can be run via Python (with `uv` or `pipx`) or as a Docker container from `ghcr.io/clearbluejar/pyghidra-mcp`.

3

What transports does Pyghidra Mcp support?

It supports standard I/O (stdio), server-sent events (SSE), and streamable HTTP. The transport is selected with the `--transport` flag.

4

How do I run Pyghidra Mcp with Docker?

Map a directory containing binaries into the container and pass the binary paths as arguments: `docker run -i --rm -v "$(pwd)/binaries:/binaries" ghcr.io/clearbluejar/pyghidra-mcp /binaries/*`

5

What tools does Pyghidra Mcp expose?

It exposes tools for code search, cross-references, function decompilation, listing exports/imports, listing project binaries and program info, and searching functions and symbols by name.

评论

其他 分类下的更多 MCP 服务器