Skip to main content

IDA Pro backend for re-mcp — headless IDA Pro MCP server using idalib

Project description

re-mcp-ida

IDA Pro backend for RE-MCP — a headless IDA Pro MCP server using idalib. Exposes IDA's full analysis capabilities over the Model Context Protocol, letting LLMs drive reverse engineering directly.

This is a standalone server, not an IDA plugin. It uses idalib to run IDA's analysis engine without a GUI.

Requirements

  • Python 3.12+
  • IDA Pro 9+ with a valid license
  • macOS, Windows, or Linux

Installation

uv tool install re-mcp-ida

Or with pip:

pip install re-mcp-ida

Finding IDA Pro

The server looks for your IDA Pro installation in the following order:

  1. IDADIR environment variable — set this if IDA is in a non-standard location.
  2. IDA's config filePaths.ida-install-dir in ~/.idapro/ida-config.json (macOS/Linux) or %APPDATA%\Hex-Rays\IDA Pro\ida-config.json (Windows).
  3. Platform-specific default paths (e.g. /Applications/IDA Professional *.app/Contents/MacOS on macOS).

See the main documentation for the full list of default search paths per platform.

Usage

# Run the server (direct stdio mode)
re-mcp-ida

# Or with uvx (no install needed)
uvx re-mcp-ida

MCP client configuration

{
  "mcpServers": {
    "ida": {
      "command": "uvx",
      "args": ["re-mcp-ida"]
    }
  }
}

CLI subcommands

Command Description
re-mcp-ida (or re-mcp-ida stdio) Direct stdio mode — single-session, workers die on disconnect (default)
re-mcp-ida proxy Stdio proxy that auto-spawns a persistent HTTP daemon
re-mcp-ida serve Start the HTTP daemon directly
re-mcp-ida stop Gracefully shut down a running daemon
re-mcp-ida backends List installed backends

Environment variables

Variable Default Description
IDADIR (auto-detected) Path to IDA Pro installation directory
IDA_MCP_MAX_WORKERS (unlimited) Maximum simultaneous databases (1-8)
IDA_MCP_LOG_LEVEL WARNING Logging level
IDA_MCP_LOG_DIR (unset) Directory for per-run log files
IDA_MCP_IDLE_TIMEOUT 300 Auto-shutdown timeout in seconds (0 to disable)
IDA_MCP_ALLOW_SCRIPTS (unset) Set to 1, true, or yes to enable run_script for arbitrary IDAPython

Features

  • Full decompilation and disassembly
  • Function, type, and structure management
  • Cross-reference and call graph analysis
  • String and byte pattern search
  • Binary patching and instruction assembly
  • FLIRT signature and type library support
  • MCP prompts for guided workflows (binary triage, function analysis, crypto detection, etc.)
  • Multi-database support with concurrent analysis
  • MCP resources for structured read-only access

See the main documentation for the full tool catalog, multi-database workflows, and detailed usage.

License

Dual-licensed under MIT and Apache-2.0.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

re_mcp_ida-3.0.1.tar.gz (102.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

re_mcp_ida-3.0.1-py3-none-any.whl (146.0 kB view details)

Uploaded Python 3

File details

Details for the file re_mcp_ida-3.0.1.tar.gz.

File metadata

  • Download URL: re_mcp_ida-3.0.1.tar.gz
  • Upload date:
  • Size: 102.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.1.tar.gz
Algorithm Hash digest
SHA256 3f334379819301222c135f54645c6c04dbe0538cd286832ca877120981bc0ec6
MD5 59175406418bf4cd88051f89a335b24f
BLAKE2b-256 6c893edffd38831ffab25d815464a4ad463e0243194818d819e0536d7cd2f2d5

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.1.tar.gz:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file re_mcp_ida-3.0.1-py3-none-any.whl.

File metadata

  • Download URL: re_mcp_ida-3.0.1-py3-none-any.whl
  • Upload date:
  • Size: 146.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.1-py3-none-any.whl
Algorithm Hash digest
SHA256 0f034f760cd41ad27c78cf39e8c6b6d41e515f6893774b68e392e581cb6e4640
MD5 7c34afea45ad38aba0c1768898e30d74
BLAKE2b-256 56e1b13095c20238cdec8bef0dcbe771d275af1452c2110bb1fd6e25f10ae142

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.1-py3-none-any.whl:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page