Loading...
IDA Pro MCP server enables interactive reverse engineering with LLMs, providing access to IDB state, core functions, and modification operations within IDA Pro.
Boost this tool
Subscribe to listing upgrades or segmented pushes.
IDA Pro MCP server enables interactive reverse engineering with LLMs, providing access to IDB state, core functions, and modification operations within IDA Pro.
The IDA Pro MCP server offers powerful reverse engineering capabilities but requires careful handling. It is safe when used for read-only analysis and exploration within a controlled environment. It becomes risky when modification operations, especially code patching or Python execution, are performed without thorough understanding and validation.
Performance depends on the complexity of the analyzed binary and the efficiency of the MCP client. Large binaries and complex operations can be slow.
The primary cost is the IDA Pro license. Additional costs may arise from the use of external MCP clients or cloud-based services.
npx -y @modelcontextprotocol/inspector{
"mcpServers": {
"github.com/mrexodia/ida-pro-mcp": {
"command": "uv",
"args": [
"--directory",
"c:\\MCP\\ida-pro-mcp",
"run",
"server.py",
"--install-plugin"
],
"timeout": 1800,
"disabled": false
}
}
}lookup_funcsRetrieves function information by address or name.
Read-only operation, no side effects.
int_convertConverts numbers between different formats (decimal, hex, bytes, etc.).
Read-only operation, no side effects.
set_commentsSets comments at specified addresses in the disassembly and decompiler views.
Non-destructive write operation, but can affect the IDB's readability.
patch_asmPatches assembly instructions at specified addresses.
Structural modification that can corrupt the binary if misused.
py_evalExecutes arbitrary Python code within the IDA context.
Allows unrestricted code execution, posing a significant security risk.
dbg_continueContinues execution of the debugged process.
Can lead to unexpected behavior or security breaches if the process is malicious.
undefineUndefines code or data at a given address, converting it back to raw bytes.
Structural modification that can corrupt the binary if misused.
None
cloud
The IDA Pro MCP server offers powerful reverse engineering capabilities but requires careful handling. It is safe when used for read-only analysis and exploration within a controlled environment. It becomes risky when modification operations, especially code patching or Python execution, are performed without thorough understanding and validation.
Autonomy is limited by the capabilities of the connected MCP client and the permissions granted to it. Exercise caution when automating modification operations.
Production Tip
Thoroughly test any automated workflows in a non-production environment before deploying them to production.
IDA Pro 8.3 or higher is required. IDA Free is not supported.
Python 3.11 or higher is required. Use `idapyswitch` to switch to the correct version.
Use `pip install https://github.com/mrexodia/ida-pro-mcp/archive/refs/heads/main.zip` followed by `ida-pro-mcp --install`.
Make sure you have loaded a binary in IDA Pro and have completely restarted IDA and your MCP client after installation.
Run `ida-pro-mcp --config` to get the JSON config for your client.
It converts numbers between different formats (decimal, hex, bytes, ASCII, binary) to avoid manual conversion errors.
Use the `int_convert` MCP tool, remove obfuscation, and resolve open source library code with Lumina or FLIRT.