Skip to main content

IDA Pro backend for re-mcp — headless IDA Pro MCP server using idalib

Project description

re-mcp-ida

IDA Pro backend for RE-MCP — a headless IDA Pro MCP server using idalib. Exposes IDA's full analysis capabilities over the Model Context Protocol, letting LLMs drive reverse engineering directly.

This is a standalone server, not an IDA plugin. It uses idalib to run IDA's analysis engine without a GUI.

Requirements

  • Python 3.12+
  • IDA Pro 9+ with a valid license
  • macOS, Windows, or Linux

Installation

uv tool install re-mcp-ida

Or with pip:

pip install re-mcp-ida

Finding IDA Pro

The server looks for your IDA Pro installation in the following order:

  1. IDADIR environment variable — set this if IDA is in a non-standard location.
  2. IDA's config filePaths.ida-install-dir in ~/.idapro/ida-config.json (macOS/Linux) or %APPDATA%\Hex-Rays\IDA Pro\ida-config.json (Windows).
  3. Platform-specific default paths (e.g. /Applications/IDA Professional *.app/Contents/MacOS on macOS).

See the main documentation for the full list of default search paths per platform.

Usage

# Run the server (direct stdio mode)
re-mcp-ida

# Or with uvx (no install needed)
uvx re-mcp-ida

MCP client configuration

{
  "mcpServers": {
    "ida": {
      "command": "uvx",
      "args": ["re-mcp-ida"]
    }
  }
}

CLI subcommands

Command Description
re-mcp-ida (or re-mcp-ida stdio) Direct stdio mode — single-session, workers die on disconnect (default)
re-mcp-ida proxy Stdio proxy that auto-spawns a persistent HTTP daemon
re-mcp-ida serve Start the HTTP daemon directly
re-mcp-ida stop Gracefully shut down a running daemon

Environment variables

Variable Default Description
IDADIR (auto-detected) Path to IDA Pro installation directory
IDA_MCP_MAX_WORKERS (unlimited) Maximum simultaneous databases (1-8)
IDA_MCP_LOG_LEVEL WARNING Logging level
IDA_MCP_LOG_DIR (unset) Directory for per-run log files
IDA_MCP_IDLE_TIMEOUT 300 Auto-shutdown timeout in seconds (0 to disable)
IDA_MCP_ALLOW_SCRIPTS (unset) Set to 1, true, or yes to enable run_script for arbitrary IDAPython

Features

  • Full decompilation and disassembly
  • Function, type, and structure management
  • Cross-reference and call graph analysis
  • String and byte pattern search
  • Binary patching and instruction assembly
  • FLIRT signature and type library support
  • MCP prompts for guided workflows (binary triage, function analysis, crypto detection, etc.)
  • Multi-database support with concurrent analysis
  • MCP resources for structured read-only access

See the main documentation for the full tool catalog, multi-database workflows, and detailed usage.

License

Dual-licensed under MIT and Apache-2.0.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

re_mcp_ida-3.0.0rc1.tar.gz (102.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

re_mcp_ida-3.0.0rc1-py3-none-any.whl (145.8 kB view details)

Uploaded Python 3

File details

Details for the file re_mcp_ida-3.0.0rc1.tar.gz.

File metadata

  • Download URL: re_mcp_ida-3.0.0rc1.tar.gz
  • Upload date:
  • Size: 102.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.0rc1.tar.gz
Algorithm Hash digest
SHA256 71b05014c6f09c2215794c4c5dcf42629da5dc95471c5223f047f194e4209f60
MD5 ca0b86553bc66de70229d7dc49ef7d99
BLAKE2b-256 6245e4addfd34571e351f40f07a69db6f21347ca4a98445b19399c2e7a10278d

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.0rc1.tar.gz:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file re_mcp_ida-3.0.0rc1-py3-none-any.whl.

File metadata

  • Download URL: re_mcp_ida-3.0.0rc1-py3-none-any.whl
  • Upload date:
  • Size: 145.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.0rc1-py3-none-any.whl
Algorithm Hash digest
SHA256 343ee8dcc8d4601212976dd191482c6f2f38cdd2e12c2e91f31e506a79e67304
MD5 73dea8943689aac6ee73573aae53f39e
BLAKE2b-256 f521e5846f0d62f510fc67caeccbfc69ba1e873af46d0d9b65d8b2746a3f1ac3

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.0rc1-py3-none-any.whl:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page