Skip to content
latestai.eulatestai.eu

Open-source MCP server exposing 200+ Ghidra reverse-engineering tools to AI agents, as a GUI plugin or headless server.

Updated EU status checked Last shown

Ghidra MCP at a glance

What is Ghidra MCP?
Ghidra MCP is a library. Open-source MCP server exposing 200+ Ghidra reverse-engineering tools to AI agents, as a GUI plugin or headless server.
Does Ghidra MCP work in the EU?
Available in the EU. Self-hosted Apache-2.0 software that runs locally with no regional restrictions or vendor account required; no EU-specific limits found. Last verified 14 Nov 2026.
How much does Ghidra MCP cost?
Open source, open source. Free under Apache-2.0; optional GitHub sponsorship. Requires a separate Ghidra installation (also free). Licence: Apache-2.0.
Where was Ghidra MCP shown?
In 1 creator video by AI Search. Most recently by AI Search on 6 Oct 2026, at 5:50 in “AI is reverse engineering everything”.

Sources: the vendor's own pages (linked above) and creator videos at the linked timestamps. EU status is information, not legal advice; see how we check.

About

Ghidra MCP is a Model Context Protocol server that connects Ghidra, the NSA's open-source reverse engineering framework, to AI clients. The README lists 219 MCP tools covering both read and write operations: listing and decompiling functions, renaming, typing, commenting, structure creation, script execution, P-code emulation, live debugger integration and data flow analysis. A YouTube creator (AI Search) showed it being used to let AI agents analyze game binaries and rewrite them, for example in Rust.

It consists of a Ghidra extension (a GUI plugin that serves HTTP on localhost) and a Python bridge (bridge-mcp-ghidra) that MCP clients launch. It can also run headless, in Docker, and connect to a shared Ghidra Server. Other features include batch operations, lazy tool loading, naming and type convention enforcement, and SHA-256 function-hash matching to carry documentation across binary versions.

Releases require a matching Ghidra version (the README cites Ghidra 12.2), Java 25 and uv. The extension only loads in the exact Ghidra version it was built for. The README states that tagged releases are stable, while main and release candidates are beta and dev is experimental. It is a third-party project by the GitHub user bethington, not an official Ghidra product.

Key features
  • 219 MCP tools with read and write access to Ghidra projects
  • GUI plugin and headless server modes, with Docker deployment
  • P-code emulation, live debugger integration and data flow analysis
  • Batch operations and lazy tool loading
  • Convention enforcement for naming and types
  • Ghidra Server integration and cross-binary documentation transfer
1 moment

As seen on YouTube

Watch the moment: the exact second top creators show it. Videos load only when you press play, via youtube-nocookie.com.

Keep exploring

Similar AI tools

Closest neighbours by meaning, not just by category.