{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/mrphrazer/binary-ninja-headless-mcp/blob/7fafd7523838fa2627a972869e34815fc461834f/README.md#L15-L25",
    "https://github.com/mrphrazer/binary-ninja-headless-mcp/blob/7fafd7523838fa2627a972869e34815fc461834f/README.md#L197-L203",
    "https://github.com/mrphrazer/binary-ninja-headless-mcp/blob/7fafd7523838fa2627a972869e34815fc461834f/pyproject.toml",
    "https://github.com/mrphrazer/binary-ninja-headless-mcp/blob/7fafd7523838fa2627a972869e34815fc461834f/.github/workflows/ci.yml",
    "https://github.com/mrphrazer/binary-ninja-headless-mcp/blob/7fafd7523838fa2627a972869e34815fc461834f/CLI_VERIFICATION.md",
    "https://github.com/mrphrazer/binary-ninja-headless-mcp/blob/7fafd7523838fa2627a972869e34815fc461834f/LICENSE"
  ],
  "category": "agent-mcp",
  "description_en": "A third-party, headless-only MCP server by Ruben Marks (mrphrazer) that gives agents a large Binary Ninja tool surface the project counts as 181 tools across 36 feature groups, including disassembly, intermediate languages, cross-references, types, search, patching with undo/redo transactions, and arbitrary scripting through binja.eval and binja.call. It speaks MCP over stdio or TCP, ships a schema-derived command-line client (binja_cli), and is meant to run in the same container as the agent runtime. A fake-backend mode runs the CLI, tests and a feature fuzzer without a Binary Ninja license, while real analysis needs a headless-capable license.",
  "description_zh": "Ruben Marks（mrphrazer）开发的第三方、仅无界面运行的 MCP 服务器，向智能体提供庞大的 Binary Ninja 工具集，项目称共 181 个工具、分 36 个功能组，涵盖反汇编、中间语言、交叉引用、类型、搜索、带撤销/重做事务的打补丁，以及通过 binja.eval 和 binja.call 执行任意脚本。它通过 stdio 或 TCP 使用 MCP 协议，附带一个由模式生成参数的命令行客户端 binja_cli，设计上与智能体运行时位于同一容器内。假后端模式可在没有 Binary Ninja 许可证的情况下运行 CLI、测试和功能模糊器，实际分析则需要支持无界面模式的许可证。",
  "entry_url": "https://awesomerea.org/resources/binary-ninja-headless-mcp/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/binary-ninja-headless-mcp/",
  "evidence_url": "https://github.com/mrphrazer/binary-ninja-headless-mcp/blob/7fafd7523838fa2627a972869e34815fc461834f/README.md",
  "group": "agents",
  "id": "binary-ninja-headless-mcp",
  "json_url": "https://awesomerea.org/resources/binary-ninja-headless-mcp/record.json",
  "kind": "integration",
  "markdown_url": "https://awesomerea.org/resources/binary-ninja-headless-mcp/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/binary-ninja-headless-mcp/index.md",
  "name": "Binary Ninja Headless MCP",
  "name_zh": "Binary Ninja Headless MCP（无界面）",
  "record_type": "resource",
  "relationship": "independent-agent-integration",
  "requirements": [
    "Reviewed at main 7fafd75 (2026-09-19); the pyproject declares package version 0.2.0 and there are no tagged releases. The README positions it against GUI-bound or limited Binary Ninja MCP servers as a headless-only, agent-driven alternative with mutation workflows and scripting, and states the whole project, including its code, tests and documentation, is vibe coded.",
    "Needs Python 3.11+. Real analysis requires a Binary Ninja installation with a headless-capable license and the binaryninja Python module importable; the README notes enterprise and debugger APIs are not covered. A fake-backend mode (BINARY_NINJA_HEADLESS_MCP_FAKE_BACKEND=1) runs the CLI, the pytest suite and the feature fuzzer without a license, which is what CI exercises on Python 3.11 with ruff and pytest.",
    "Install with pip from a clone or straight from the repository. Register it with an MCP host such as Claude Code or Codex over stdio (default) or TCP; the recommended deployment runs the agent and this server in one container. The repository bundles a sample binary, samples/ls (a stripped aarch64 GNU coreutils ls), as the fuzzer and verification target, plus small C fixtures.",
    "The README's security model states that stdio and TCP transports are unauthenticated by default and that binja.eval and binja.call expose arbitrary scripting and broad API access, intended only for trusted containerized environments and not to be exposed to untrusted users or networks. Read-only mode is the session default, memory.read is capped at 65536 bytes, and mutations use undo/redo transactions.",
    "The bundled CLI_VERIFICATION.md reports native coverage of all 181 tools on Binary Ninja 6.0.10601 Ultimate (AArch64 Linux host) across both architectures, transports and argument styles, but its evidence links point to files in the authors' analysis environment rather than the shipped package. GPL-2.0. Use it on binaries the operator is authorized to examine."
  ],
  "requirements_zh": [
    "审阅基于 main 分支 7fafd75（2026-09-19）；pyproject 声明包版本为 0.2.0，没有任何标签发布。README 将其定位为相对于受图形界面限制或工具较少的 Binary Ninja MCP 服务器的替代方案，强调仅无界面运行、面向智能体，并带有变更工作流和脚本能力；README 声明整个项目（包括代码、测试和文档）均为 vibe coded。",
    "需要 Python 3.11+。实际分析需要安装 Binary Ninja，且具备支持无界面模式的许可证，并能导入 binaryninja Python 模块；README 指出不覆盖企业版和调试器 API。假后端模式（BINARY_NINJA_HEADLESS_MCP_FAKE_BACKEND=1）可在无许可证的情况下运行 CLI、pytest 测试套件和功能模糊器，这也是 CI 在 Python 3.11 上配合 ruff 和 pytest 所运行的内容。",
    "可用 pip 从克隆目录或直接从仓库安装。通过 Claude Code、Codex 等 MCP 宿主以 stdio（默认）或 TCP 注册；推荐的部署方式是让智能体与该服务器位于同一容器内。仓库附带一个示例二进制 samples/ls（去符号的 aarch64 GNU coreutils ls）作为模糊器和验证目标，另有少量 C 测试样本。",
    "README 的安全模型说明 stdio 和 TCP 传输默认不进行身份验证，binja.eval 和 binja.call 会暴露任意脚本执行和广泛的 API 访问，仅面向受信任的容器化环境，不应暴露给不受信任的用户或网络。会话默认只读，memory.read 上限为 65536 字节，变更操作使用撤销/重做事务。",
    "仓库附带的 CLI_VERIFICATION.md 报告称在 Binary Ninja 6.0.10601 Ultimate（AArch64 Linux 主机）上对全部 181 个工具进行了原生覆盖，涵盖两种架构、传输方式和参数风格，但其证据链接指向作者分析环境中的文件，而非随包发布的文件。许可证为 GPL-2.0。请仅用于操作者有权分析的二进制文件。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/mrphrazer/binary-ninja-headless-mcp",
  "verification": "source-reviewed",
  "verified_at": "2026-10-27"
}