Skip to main content

IDA Pro backend for re-mcp — headless IDA Pro MCP server using idalib

Project description

re-mcp-ida

IDA Pro backend for RE-MCP — a headless IDA Pro MCP server using idalib. Exposes IDA's full analysis capabilities over the Model Context Protocol, letting LLMs drive reverse engineering directly.

This is a standalone server, not an IDA plugin. It uses idalib to run IDA's analysis engine without a GUI.

Requirements

  • Python 3.12+
  • IDA Pro 9+ with a valid license
  • macOS, Windows, or Linux

Installation

uv tool install re-mcp-ida

Or with pip:

pip install re-mcp-ida

Finding IDA Pro

The server looks for your IDA Pro installation in the following order:

  1. IDADIR environment variable — set this if IDA is in a non-standard location.
  2. IDA's config filePaths.ida-install-dir in ~/.idapro/ida-config.json (macOS/Linux) or %APPDATA%\Hex-Rays\IDA Pro\ida-config.json (Windows).
  3. Platform-specific default paths (e.g. /Applications/IDA Professional *.app/Contents/MacOS on macOS).

See the main documentation for the full list of default search paths per platform.

Usage

# Run the server (direct stdio mode)
re-mcp-ida

# Or with uvx (no install needed)
uvx re-mcp-ida

MCP client configuration

{
  "mcpServers": {
    "ida": {
      "command": "uvx",
      "args": ["re-mcp-ida"]
    }
  }
}

CLI subcommands

Command Description
re-mcp-ida (or re-mcp-ida stdio) Direct stdio mode — single-session, workers die on disconnect (default)
re-mcp-ida proxy Stdio proxy that auto-spawns a persistent HTTP daemon
re-mcp-ida serve Start the HTTP daemon directly
re-mcp-ida stop Gracefully shut down a running daemon
re-mcp-ida backends List installed backends

Environment variables

Variable Default Description
IDADIR (auto-detected) Path to IDA Pro installation directory
IDA_MCP_MAX_WORKERS (unlimited) Maximum simultaneous databases (1-8)
IDA_MCP_LOG_LEVEL WARNING Logging level
IDA_MCP_LOG_DIR (unset) Directory for per-run log files
IDA_MCP_IDLE_TIMEOUT 300 Auto-shutdown timeout in seconds (0 to disable)
IDA_MCP_ALLOW_SCRIPTS (unset) Set to 1, true, or yes to enable run_script for arbitrary IDAPython

Features

  • Full decompilation and disassembly
  • Function, type, and structure management
  • Cross-reference and call graph analysis
  • String and byte pattern search
  • Binary patching and instruction assembly
  • FLIRT signature and type library support
  • MCP prompts for guided workflows (binary triage, function analysis, crypto detection, etc.)
  • Multi-database support with concurrent analysis
  • MCP resources for structured read-only access

See the main documentation for the full tool catalog, multi-database workflows, and detailed usage.

License

Dual-licensed under MIT and Apache-2.0.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

re_mcp_ida-3.0.2.tar.gz (102.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

re_mcp_ida-3.0.2-py3-none-any.whl (146.0 kB view details)

Uploaded Python 3

File details

Details for the file re_mcp_ida-3.0.2.tar.gz.

File metadata

  • Download URL: re_mcp_ida-3.0.2.tar.gz
  • Upload date:
  • Size: 102.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.2.tar.gz
Algorithm Hash digest
SHA256 c484d46d7ffade567d60d8ba5f7270ca02526a7624a351ef2884e29708a845bb
MD5 0f43f6ccbcb478313a19f5db67aba153
BLAKE2b-256 d841814d060c3cd58774504c1fde1cc3c357e67c2522156f70bc5d1bdba0156a

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.2.tar.gz:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file re_mcp_ida-3.0.2-py3-none-any.whl.

File metadata

  • Download URL: re_mcp_ida-3.0.2-py3-none-any.whl
  • Upload date:
  • Size: 146.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for re_mcp_ida-3.0.2-py3-none-any.whl
Algorithm Hash digest
SHA256 1ba99904a8013d193311ab2692f8e05ed06c937ab548c0edf9566718b200b091
MD5 f822a9481b406b6264d964fc04ba00b6
BLAKE2b-256 5c88841012be8fbd8092016e0e996a804ac2c056fb9c83a329fcee7cb6a80cd5

See more details on using hashes here.

Provenance

The following attestation bundles were made for re_mcp_ida-3.0.2-py3-none-any.whl:

Publisher: publish.yml on jtsylve/re-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page