bindiff-mcp

MCP server that gives reverse-engineering agents binary diffing: export binaries to BinExport v2 and compare two builds with BinDiff.

IDA is driven through ida-nexus, so a binary already open in the IDA GUI is exported from that database (renames and annotations included); otherwise a headless idalib worker is spawned and released again when the export finishes. Export and diff parsing reuse python-binexport and python-bindiff.

Prerequisites

• IDA Pro 9.x with idalib enabled (idapyswitch), IDADIR pointing at the install
• The BinExport IDA plugin (binexport12_ida.so) in $IDAUSR/plugins
• The BinDiff differ (bindiff) in PATH, in $BINDIFF_PATH, default at /opt/zynamics/BinDiff/bin
• libmagic (used by python-binexport through python-magic)

Install

uv pip install .

Run

bindiff-mcp stdio                              # stdio transport (default)
bindiff-mcp http --host 127.0.0.1 --port 8745  # Streamable HTTP at /mcp

Register with Claude Code:

claude mcp add bindiff -- bindiff-mcp stdio
claude mcp add bindiff --transport http http://127.0.0.1:8745/mcp

Tools

binexport(binary, output_results_dir=".")

Exports binary to <output_results_dir>/<binary name>.BinExport. An export that is at least as new as the binary is reused instead of re-analyzing it. Returns JSON:

{
  "binary": "/work/httpd",
  "binexport": "/work/out/httpd.BinExport",
  "reused": false,
  "name": "httpd",
  "architecture": "x86-64",
  "sha256": "...",
  "functions": 2317
}

bindiff_compare(primary_binary, secondary_binary, output_results_dir=".")

Exports both binaries in parallel (into primary/ and secondary/ subdirectories, so identical file names cannot collide), runs the differ, and writes four JSON files into output_results_dir:

Match entries carry both addresses and names, the similarity and confidence scores and the BinDiff algorithm that produced the match; unmatched entries carry address, name and function type. The tool returns JSON with the overall similarity and confidence, the .BinDiff database path, per-list counts and the path of every file written.

Environment