# GhidrAssistMCP

> Ghidra extension that runs an MCP server inside Ghidra over streamable HTTP and legacy SSE, with 100 explicitly named tools (93 enabled by default) for pseudocode, disassembly, P-code, control-flow and call graphs, cross-references, strings, imports and exports, plus renaming, retyping, comments and structure inference. Since version 3.0.0 the server starts with the project manager, so agents can create, open, save and close projects and open programs before a CodeBrowser exists, while one shared server tracks whichever CodeBrowser window has focus. Six program resource templates, seven analysis prompts and a bundled script for running the server under analyzeHeadless complete the package.

- Type: Integration
- Targets: Binary
- Category: Independent MCP integrations
- Relationship: Independent agent integration
- Sources reviewed: 2026-10-19
- Added to the catalog: 2026-10-19
- Original resource: <https://github.com/symgraph/GhidrAssistMCP>
- Primary source: <https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/README.md>
- Catalog page: <https://awesomerea.org/resources/ghidrassistmcp/>
- Record JSON: <https://awesomerea.org/resources/ghidrassistmcp/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/ghidrassistmcp/index.md)

## Requirements & limits

- Ghidra 12.0 or 12.1 Public running on Java 25 or newer; extension zips are specific to one Ghidra version. Release 3.0.0 (2026-10-09), whose tag is the reviewed commit, publishes a zip for Ghidra 12.1; installation goes through File → Install Extensions, and source builds use the bundled Gradle wrapper with Java 25 and GHIDRA_INSTALL_DIR. The server listens on localhost:8080 by default, with streamable HTTP at /mcp (MCP 2025-11-25) and legacy SSE at /sse (2024-11-05); the Java MCP SDK 2.0.1, Jetty and Jackson are bundled under private package names.
- Programs come from the user's own Ghidra project or imports; the extension supplies no target binaries. Headless mode runs the bundled GAMCPStartServerScript.java inside analyzeHeadless against the loaded program, with wait=true to keep the session open and a completion_file option to end it; the project lifecycle tools need the GUI project manager.
- Write tools change the program or project, including names, types, comments, structures, disassembly, analysis options and saves, and read and write tools carry separate MCP annotations. import_file, export_program and the five Ghidra script tools are disabled by default; a headless agent_lab profile enables sandbox-local program export while arbitrary-path import and scripts stay disabled. The README describes no client authentication; the server rejects browser requests whose Origin header is not allowed.
- The project's modernization review reports 90 passing tests in buildExtension test runs against Ghidra 12.0 and 12.1, and a live Ghidra 12.1 smoke test on 2026-10-09 that predates the four project-control tools; these are project-reported. MIT. The repository moved from jtang613/GhidrAssistMCP, and its README recommends the author's GhidrAssist client.

## Primary sources

1. <https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/README.md>
2. <https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/docs/modernization-review.md>
3. <https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/build.gradle>
4. <https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/src/main/java/ghidrassistmcp/GhidrAssistMCPServer.java>
5. <https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/ghidra_scripts/GAMCPStartServerScript.java>
6. <https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/LICENSE>
7. <https://github.com/symgraph/GhidrAssistMCP/releases/tag/3.0.0>

## More in Agents and MCP

- [Android Reverse Engineering Skill](https://awesomerea.org/resources/android-reverse-engineering-skill/index.md) · Integration
- [Reverify](https://awesomerea.org/resources/reverify-claim-verifier/index.md) · Integration
- [DecompAI](https://awesomerea.org/resources/decompai/index.md) · Integration
- [Kong](https://awesomerea.org/resources/kong-agentic-reverse-engineer/index.md) · Integration
- [Co-op Anything](https://awesomerea.org/resources/coop-anything/index.md) · Integration
- [DeepExtract (DeepExtractIDA)](https://awesomerea.org/resources/deepextract-ida/index.md) · Integration

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.