Ghidra reverse engineering tool with an MCP server that lets AI agents analyze game binaries and rewrite them, for example in Rust.
Open-source MCP server exposing 200+ Ghidra reverse-engineering tools to AI agents, as a GUI plugin or headless server.
Updated EU status checked Last shown
Ghidra MCP at a glance
- What is Ghidra MCP?
- Ghidra MCP is a library. Open-source MCP server exposing 200+ Ghidra reverse-engineering tools to AI agents, as a GUI plugin or headless server.
- Does Ghidra MCP work in the EU?
- Available in the EU. Self-hosted Apache-2.0 software that runs locally with no regional restrictions or vendor account required; no EU-specific limits found. Last verified 14 Nov 2026.
- How much does Ghidra MCP cost?
- Open source, open source. Free under Apache-2.0; optional GitHub sponsorship. Requires a separate Ghidra installation (also free). Licence: Apache-2.0.
- Where was Ghidra MCP shown?
- In 1 creator video by AI Search. Most recently by AI Search on 6 Oct 2026, at 5:50 in “AI is reverse engineering everything”.
Sources: the vendor's own pages (linked above) and creator videos at the linked timestamps. EU status is information, not legal advice; see how we check.
Ghidra MCP is a Model Context Protocol server that connects Ghidra, the NSA's open-source reverse engineering framework, to AI clients. The README lists 219 MCP tools covering both read and write operations: listing and decompiling functions, renaming, typing, commenting, structure creation, script execution, P-code emulation, live debugger integration and data flow analysis. A YouTube creator (AI Search) showed it being used to let AI agents analyze game binaries and rewrite them, for example in Rust.
It consists of a Ghidra extension (a GUI plugin that serves HTTP on localhost) and a Python bridge (bridge-mcp-ghidra) that MCP clients launch. It can also run headless, in Docker, and connect to a shared Ghidra Server. Other features include batch operations, lazy tool loading, naming and type convention enforcement, and SHA-256 function-hash matching to carry documentation across binary versions.
Releases require a matching Ghidra version (the README cites Ghidra 12.2), Java 25 and uv. The extension only loads in the exact Ghidra version it was built for. The README states that tagged releases are stable, while main and release candidates are beta and dev is experimental. It is a third-party project by the GitHub user bethington, not an official Ghidra product.
- 219 MCP tools with read and write access to Ghidra projects
- GUI plugin and headless server modes, with Docker deployment
- P-code emulation, live debugger integration and data flow analysis
- Batch operations and lazy tool loading
- Convention enforcement for naming and types
- Ghidra Server integration and cross-binary documentation transfer
As seen on YouTube
Watch the moment: the exact second top creators show it. Videos load only when you press play, via youtube-nocookie.com.
Similar AI tools
Closest neighbours by meaning, not just by category.
Reverse Engineer Anything
Library
MIT-licensed MCP server and CLI that lets AI agents reverse engineer native binaries, Electron/JS apps, .NET assemblies and websites.
IDA MCP
Library · Hex-Rays
Official Hex-Rays MCP server that lets AI agents drive IDA for decompiling and analysing binaries.
Codebase Memory MCP
Library · DeusData
Local MCP server that indexes code, docs and infrastructure into a knowledge graph for AI coding agents.
GPT-5.3 Codex
Model · OpenAI
OpenAI's agentic coding model powering Codex in the CLI, IDE extension, desktop app and ChatGPT cloud.
X MCP Server
API · X
Hosted MCP server from X that lets MCP-compatible AI tools access the X API using a user's own account permissions.
Codex
App · OpenAI
OpenAI's coding agent, available in the ChatGPT app, cloud, IDE extension and CLI under one ChatGPT account.
