Skip to main content

IDA Pro backend for re-mcp — headless IDA Pro MCP server using idalib

Project description

re-mcp-ida

IDA Pro backend for RE-MCP — a headless IDA Pro MCP server using idalib. Exposes IDA's full analysis capabilities over the Model Context Protocol, letting LLMs drive reverse engineering directly.

This is a standalone server, not an IDA plugin. It uses idalib to run IDA's analysis engine without a GUI.

Requirements

  • Python 3.12+
  • IDA Pro 9+ with a valid license
  • macOS, Windows, or Linux

Installation

uv tool install re-mcp-ida

Or with pip:

pip install re-mcp-ida

Finding IDA Pro

The server looks for your IDA Pro installation in the following order:

  1. IDADIR environment variable — set this if IDA is in a non-standard location.
  2. IDA's config filePaths.ida-install-dir in ~/.idapro/ida-config.json (macOS/Linux) or %APPDATA%\Hex-Rays\IDA Pro\ida-config.json (Windows).
  3. Platform-specific default paths (e.g. /Applications/IDA Professional *.app/Contents/MacOS on macOS).

See the main documentation for the full list of default search paths per platform.

Usage

# Run the server (direct stdio mode)
re-mcp-ida

# Or with uvx (no install needed)
uvx re-mcp-ida

MCP client configuration

{
  "mcpServers": {
    "ida": {
      "command": "uvx",
      "args": ["re-mcp-ida"]
    }
  }
}

CLI subcommands

Command Description
re-mcp-ida (or re-mcp-ida stdio) Direct stdio mode — single-session, workers die on disconnect (default)
re-mcp-ida proxy Stdio proxy that auto-spawns a persistent HTTP daemon
re-mcp-ida serve Start the HTTP daemon directly
re-mcp-ida stop Gracefully shut down a running daemon

Environment variables

Variable Default Description
IDADIR (auto-detected) Path to IDA Pro installation directory
IDA_MCP_MAX_WORKERS (unlimited) Maximum simultaneous databases (1-8)
IDA_MCP_LOG_LEVEL WARNING Logging level
IDA_MCP_LOG_DIR (unset) Directory for per-run log files
IDA_MCP_IDLE_TIMEOUT 300 Auto-shutdown timeout in seconds (0 to disable)
IDA_MCP_ALLOW_SCRIPTS (unset) Set to 1, true, or yes to enable run_script for arbitrary IDAPython

Features

  • Full decompilation and disassembly
  • Function, type, and structure management
  • Cross-reference and call graph analysis
  • String and byte pattern search
  • Binary patching and instruction assembly
  • FLIRT signature and type library support
  • MCP prompts for guided workflows (binary triage, function analysis, crypto detection, etc.)
  • Multi-database support with concurrent analysis
  • MCP resources for structured read-only access

See the main documentation for the full tool catalog, multi-database workflows, and detailed usage.

License

Dual-licensed under MIT and Apache-2.0.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

re_mcp_ida-3.0.0rc3.tar.gz (102.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

re_mcp_ida-3.0.0rc3-py3-none-any.whl (146.0 kB view details)

Uploaded Python 3

File details

Details for the file re_mcp_ida-3.0.0rc3.tar.gz.

File metadata

  • Download URL: re_mcp_ida-3.0.0rc3.tar.gz
  • Upload date:
  • Size: 102.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.0rc3.tar.gz
Algorithm Hash digest
SHA256 f79d976383c3e07282ed18692e172b93bde35ac23557a30f642ea889f24ebf0b
MD5 82cdaf90825436ef7a2e5e8badc7c530
BLAKE2b-256 58e9e643b827b8bdccaaf641afbeaa485d67bb9a758d649a11c2e9c3a01bb873

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.0rc3.tar.gz:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file re_mcp_ida-3.0.0rc3-py3-none-any.whl.

File metadata

  • Download URL: re_mcp_ida-3.0.0rc3-py3-none-any.whl
  • Upload date:
  • Size: 146.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.0rc3-py3-none-any.whl
Algorithm Hash digest
SHA256 a3c377203de1eb20b2400da45c48c425dd34d3ec3a49fb6f2099c80c7deed0e8
MD5 2e2f7f1a6d0cdcc5003cb6631e2cacae
BLAKE2b-256 1ee65e83f8f6d4cc76749ff654e725a2be4d68d7e7c625baae727e62ffad237d

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.0rc3-py3-none-any.whl:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page