Hex-Rays IDA MCP
⚠️ Experimental prerelease ⚠️
Official Hex-Rays IDA MCP Server.
Installation
Requirements
- Installed in your PATH
- IDA 9.4 or higher with idalib and Python 3.11+
- Other IDA MCP servers must be disabled to reduce agent confusion
IDA GUI Plugin
To support IDA GUI instances when using Hex-Rays IDA MCP, install the plugin:
uvx ida-hcli plugin install https://github.com/HexRaysSA/ida-mcp
# or if you have hcli installed:
hcli plugin install https://github.com/HexRaysSA/ida-mcp
Note: Without the GUI plugin, IDA MCP will only work headlessly.
Claude Code
# Add Hex-Rays marketplace
claude plugin marketplace add HexRaysSA/claude-marketplace
# Install plugin
claude plugin install ida-mcp@HexRaysSA
# Update to latest version
claude plugin update ida-mcp@HexRaysSA
Codex CLI
# Add Hex-Rays marketplace
codex plugin marketplace add HexRaysSA/codex-marketplace
# Install plugin
codex plugin add ida-mcp@HexRaysSA
GitHub Copilot CLI
# Add Hex-Rays marketplace
copilot plugin marketplace add HexRaysSA/copilot-marketplace
# Install plugin
copilot plugin install ida-mcp@HexRaysSA
# Update to latest version
copilot plugin update ida-mcp
Pi
# Install extension
pi install git:github.com/HexRaysSA/ida-mcp@latest
# Update to latest version
pi update --extensions
oh-my-pi
# Install extension
omp plugin install github:HexRaysSA/ida-mcp#latest
# Update to latest version
omp plugin upgrade
Other agents
Configure a regular stdio MCP server in your MCP JSON configuration:
{
"mcpServers": {
"ida": {
"command": "uvx",
"args": [
"--exclude-newer=1s",
"ida-mcp",
"--agent=my-agent"
]
}
}
}
uvx resolves the latest stable ida-mcp release from PyPI, so this
configuration does not need to be updated for each release.
--agent=my-agent is a human-chosen label (like claude-code, cursor,
my-custom-agent, etc.) used to differentiate sessions in a metrics dashboard.
We tested the following clients, but any MCP client should work similarly:
Example Usage
Start your agent harness and ask it something like:
Reverse /path/to/sample.elf for me
To test the GUI integration, open something in IDA and ask your harness:
What do I have open in the IDA GUI?
Developers: IDA Nexus
The IDA MCP project is built on IDA Nexus, which allows multiple clients to seamlessly share and operate on IDA databases.
You can build your own tools on top of the ida-nexus library, see
the documentation
for more information.
Release files for ida-mcp 2026.915.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| ida_mcp-2026.915.2.tar.gz | 43.7 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| ida_mcp-2026.915.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 47.4 kB
Release files / ida_mcp-2026.915.2.tar.gz
| Download URL | ida_mcp-2026.915.2.tar.gz |
|---|---|
| Size | 43.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e741d084016c3bf0aff2d31e3890ac550e319e816bd3c1a9d385dd3f3cd39435
|
|
BLAKE2b-256 checksum How to use checksums |
bd846fd0b31c2f61ed75848c170d78672ada2de3a7e9823b5592ba651798e835
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.10.6 {"installer":{"name":"uv","version":"0.10.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 15, 2026.
Transparency logRelease files / ida_mcp-2026.915.2-py3-none-any.whl
| Download URL | ida_mcp-2026.915.2-py3-none-any.whl |
|---|---|
| Size | 3.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
8919d474dd75201684bc8ef56f8df4d47ed008cc6eb406926d6ec6367578dca5
|
|
BLAKE2b-256 checksum How to use checksums |
1d24230bf3d8263ac959d673917065b7b279ff666298880b10c1999f3cde000a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.10.6 {"installer":{"name":"uv","version":"0.10.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 15, 2026.
Transparency log
