re-mcp-ghidra

Ghidra backend for RE-MCP — a headless Ghidra MCP server using pyghidra. Exposes Ghidra's analysis capabilities over the Model Context Protocol, letting LLMs drive reverse engineering directly.

This is a standalone server, not a Ghidra plugin. It uses pyghidra to run Ghidra's analysis engine without a GUI.

Requirements

• Python 3.12+
• Ghidra 12+
• JDK 21+
• macOS, Windows, or Linux

Installation

uv tool install re-mcp-ghidra

Or with pip:

pip install re-mcp-ghidra

Finding Ghidra

The server looks for your Ghidra installation in the following order:

1. GHIDRA_INSTALL_DIR environment variable — set this if Ghidra is in a non-standard location.
2. Config file — ghidra-install-dir in ~/.ghidra/ghidra-config.json.
3. Platform-specific default paths (e.g. /Applications/ghidra_* on macOS).

See the main documentation for the full list of default search paths per platform.

Usage

# Run the server (direct stdio mode)
re-mcp-ghidra

# Or with uvx (no install needed)
uvx re-mcp-ghidra

MCP client configuration

{
  "mcpServers": {
    "ghidra": {
      "command": "uvx",
      "args": ["re-mcp-ghidra"]
    }
  }
}

CLI subcommands

Environment variables

Features

• Full decompilation and disassembly
• Function, type, and structure management
• Cross-reference and call graph analysis
• String and byte pattern search
• Binary patching and instruction assembly
• Function ID and data type archive support
• Multi-database support with concurrent analysis
• MCP resources for structured read-only access

See the main documentation for the full tool catalog, multi-database workflows, and detailed usage.

License

Dual-licensed under MIT and Apache-2.0.