In simple English
This tool connects the free Ghidra (a program used to look inside compiled software and read its hidden code) to artificial intelligence assistants. You can ask an assistant to study a program, name functions, and explain what the software does. It costs nothing in money, but you need a working Ghidra setup and an AI client that supports MCP (an open way for language models to talk to external tools). Setting it up takes some technical steps, and you must run your own language model or pay for an API.
What it is
GhidraMCP is a Model Context Protocol (an open standard that lets language models interact with local tools and data) server and a Ghidra extension. It exposes Ghidra features so artificial intelligence tools can decompile binaries, rename methods, and read imports automatically.
What it is good for
Solo builders and security researchers who want artificial intelligence to help them inspect compiled programs, find bugs, or understand undocumented file formats.
- Lets language models control Ghidra and read decompiled code directly.
- Supports headless mode so you can analyze files without opening the full Ghidra window.
- Works with popular coding assistants like Claude Code and VS Code.
- Requires a specific version of Ghidra and careful path configuration.
- Running local language models for heavy code analysis needs a powerful GPU (a specialized computer chip built for heavy math and rendering).
- Java (a programming language used to build desktop and server applications) is required to build the extension from source.
Manual reverse engineering in Ghidra without AI assistance
Claude Code
- NationalSecurityAgency/ghidra92k stars
The core reverse engineering suite that this tool connects to.
- dyad-sh/dyad22k stars
A desktop program that builds a web application from a written description, running locally with keys the user supplies.
- stackblitz-labs/bolt.diy20k stars
Turns a written description into a running web application in the browser, with any of more than 22 model providers.
- cloudflare/vibesdk5.4k stars
An open platform for running an application-building service, built end to end on one company's infrastructure.
uvx --from git+https://github.com/LaurieWired/GhidraMCP ghidra-mcp --ghidra-server http://127.0.0.1:8080/