Does Ghidra have an MCP server?
Ghidra does not maintain an official MCP server. Community-built servers exist.
The most-starred server, LaurieWired/GhidraMCP (~10.2k stars), has had no commits since June 2025.
- Access
- Local server
- Repository
- bethington/ghidra-mcp
- Maintainer
- Benjamin Ethington
- License
- Apache-2.0
- Language
- Java
- Stars
- 4.0k
- Last commit
- today
- Category
- Developer Tools
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Runs on your machine over stdio, launched by your MCP client.
Add it from the terminal, then restart your session:
claude mcp add ghidra -- npx -y <package-from-readme>Swap in the exact package and flags from the repo README — most servers need an API key passed as an environment variable.
Add --scope user to make it available in every project.
Open Settings → Developer → Edit Config and add the server to claude_desktop_config.json:
{
"mcpServers": {
"ghidra": {
"command": "npx",
"args": [
"-y",
"<package-from-readme>"
],
"env": {
"API_KEY": "…"
}
}
}
}Restart Claude Desktop after saving.
Add to .cursor/mcp.json in your project, or ~/.cursor/mcp.json for
every project:
{
"mcpServers": {
"ghidra": {
"command": "npx",
"args": [
"-y",
"<package-from-readme>"
],
"env": {
"API_KEY": "…"
}
}
}
}A green dot in Settings → MCP means it connected.
Add to .vscode/mcp.json:
{
"servers": {
"ghidra": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"<package-from-readme>"
]
}
}
}Then pick the server from the tools menu in Copilot's agent mode.
A community server is unaudited third-party code that will hold your Ghidra API credentials and see whatever data they unlock. Independent research puts SSRF vulnerabilities in roughly a third of public MCP servers, and 41% ship with no authentication at all.
- Read the source before running it — especially any network calls it makes.
- Check who maintains it and whether commits are recent (this one: today).
- Issue a scoped, revocable API key rather than an account-wide token.
- Prefer read-only credentials until you trust it with writes.
Does Ghidra have an official MCP server?
No. Ghidra does not maintain one. Third-party developers have built community servers, the most established being bethington/ghidra-mcp, but they are not endorsed or supported by Ghidra.
How do I connect Ghidra to Claude?
Run the server locally and register it in Claude's MCP config. In Claude Code that's a single "claude mcp add" command; in Claude Desktop you add it to claude_desktop_config.json.
Is it safe to use a community Ghidra MCP server?
Treat it like any dependency that gets your API keys. Community MCP servers are unaudited third-party code: independent research has found roughly a third of public MCP servers carry SSRF vulnerabilities and 41% ship with no authentication. Read the source, check the maintainer and commit recency, and scope the credentials you hand it.
How is this verdict verified?
The NSA's Ghidra project ships no MCP server: nothing in the NationalSecurityAgency GitHub org, the 12.x release notes or the MCP Registry, and a request to upstream one (discussion #8648) got no maintainer reply. bethington/ghidra-mcp (~4k stars, releases through Sept 2026) was picked as the strongest server that is still maintained. GitHub metadata is refreshed every six hours.
The NSA's Ghidra project ships no MCP server: nothing in the NationalSecurityAgency GitHub org, the 12.x release notes or the MCP Registry, and a request to upstream one (discussion #8648) got no maintainer reply. bethington/ghidra-mcp (~4k stars, releases through Sept 2026) was picked as the strongest server that is still maintained.
- github data refreshed 2026-09-29, then every 6 hours
- vendor docs verified on 2026-09-29
Work at Ghidra? The moment you ship an official server this page flips to Official — send us the link.