{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/docs/modernization-review.md",
    "https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/build.gradle",
    "https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/src/main/java/ghidrassistmcp/GhidrAssistMCPServer.java",
    "https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/ghidra_scripts/GAMCPStartServerScript.java",
    "https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/LICENSE",
    "https://github.com/symgraph/GhidrAssistMCP/releases/tag/3.0.0"
  ],
  "category": "agent-mcp",
  "description_en": "Ghidra extension that runs an MCP server inside Ghidra over streamable HTTP and legacy SSE, with 100 explicitly named tools (93 enabled by default) for pseudocode, disassembly, P-code, control-flow and call graphs, cross-references, strings, imports and exports, plus renaming, retyping, comments and structure inference. Since version 3.0.0 the server starts with the project manager, so agents can create, open, save and close projects and open programs before a CodeBrowser exists, while one shared server tracks whichever CodeBrowser window has focus. Six program resource templates, seven analysis prompts and a bundled script for running the server under analyzeHeadless complete the package.",
  "description_zh": "在 Ghidra 内运行 MCP 服务器的 Ghidra 扩展，通过 streamable HTTP 和旧版 SSE 提供 100 个名称明确的工具（默认启用 93 个），涵盖伪代码、反汇编、P-code、控制流图与调用图、交叉引用、字符串、导入表和导出表，以及重命名、修改类型、注释和结构体推断。自 3.0.0 版起，服务器随项目管理器一同启动，智能体在 CodeBrowser 尚未打开时即可创建、打开、保存和关闭项目并打开程序；同一个共享服务器会跟踪当前获得焦点的 CodeBrowser 窗口。扩展另附六个程序资源模板、七个分析提示词，以及在 analyzeHeadless 下运行服务器的脚本。",
  "entry_url": "https://awesomerea.org/resources/ghidrassistmcp/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/ghidrassistmcp/",
  "evidence_url": "https://github.com/symgraph/GhidrAssistMCP/blob/b575acc1412cafcfd4dc9fedb7f99ecf219c68ab/README.md",
  "group": "agents",
  "id": "ghidrassistmcp",
  "json_url": "https://awesomerea.org/resources/ghidrassistmcp/record.json",
  "kind": "integration",
  "markdown_url": "https://awesomerea.org/resources/ghidrassistmcp/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/ghidrassistmcp/index.md",
  "name": "GhidrAssistMCP",
  "name_zh": "GhidrAssistMCP Ghidra 原生 MCP 扩展",
  "record_type": "resource",
  "relationship": "independent-agent-integration",
  "requirements": [
    "Ghidra 12.0 or 12.1 Public running on Java 25 or newer; extension zips are specific to one Ghidra version. Release 3.0.0 (2026-10-09), whose tag is the reviewed commit, publishes a zip for Ghidra 12.1; installation goes through File → Install Extensions, and source builds use the bundled Gradle wrapper with Java 25 and GHIDRA_INSTALL_DIR. The server listens on localhost:8080 by default, with streamable HTTP at /mcp (MCP 2025-11-25) and legacy SSE at /sse (2024-11-05); the Java MCP SDK 2.0.1, Jetty and Jackson are bundled under private package names.",
    "Programs come from the user's own Ghidra project or imports; the extension supplies no target binaries. Headless mode runs the bundled GAMCPStartServerScript.java inside analyzeHeadless against the loaded program, with wait=true to keep the session open and a completion_file option to end it; the project lifecycle tools need the GUI project manager.",
    "Write tools change the program or project, including names, types, comments, structures, disassembly, analysis options and saves, and read and write tools carry separate MCP annotations. import_file, export_program and the five Ghidra script tools are disabled by default; a headless agent_lab profile enables sandbox-local program export while arbitrary-path import and scripts stay disabled. The README describes no client authentication; the server rejects browser requests whose Origin header is not allowed.",
    "The project's modernization review reports 90 passing tests in buildExtension test runs against Ghidra 12.0 and 12.1, and a live Ghidra 12.1 smoke test on 2026-10-09 that predates the four project-control tools; these are project-reported. MIT. The repository moved from jtang613/GhidrAssistMCP, and its README recommends the author's GhidrAssist client."
  ],
  "requirements_zh": [
    "需要运行在 Java 25 或更新版本上的 Ghidra 12.0 或 12.1 Public；扩展 zip 与特定 Ghidra 版本对应。3.0.0 版（2026-10-09）的标签即所审阅的提交，该版本发布了适用于 Ghidra 12.1 的 zip；可通过 File → Install Extensions 安装，从源码构建则使用随附的 Gradle wrapper，并需要 Java 25 和 GHIDRA_INSTALL_DIR。服务器默认监听 localhost:8080，streamable HTTP 端点为 /mcp（MCP 2025-11-25），旧版 SSE 端点为 /sse（2024-11-05）；Java MCP SDK 2.0.1、Jetty 和 Jackson 以私有包名打包在扩展内。",
    "待分析的程序来自用户自己的 Ghidra 项目或导入的文件，扩展本身不提供任何目标二进制。无界面模式在 analyzeHeadless 中运行随附的 GAMCPStartServerScript.java，作用于已加载的程序；设置 wait=true 可保持会话不退出，completion_file 选项则用于结束会话。项目生命周期类工具需要图形界面的项目管理器。",
    "写入类工具会修改程序或项目，包括名称、类型、注释、结构体、反汇编、分析选项和保存操作；读写两类工具分别带有对应的 MCP 标注。import_file、export_program 和五个 Ghidra 脚本工具默认禁用；无界面模式下的 agent_lab 配置会开放沙箱内的程序导出，任意路径导入和脚本仍保持禁用。README 未说明任何客户端认证机制；服务器会拒绝 Origin 请求头不在允许范围内的浏览器请求。",
    "项目的现代化评审文档称，在 Ghidra 12.0 和 12.1 上运行 buildExtension test 均通过 90 项测试，并记录了 2026-10-09 在 Ghidra 12.1 上的一次实机冒烟测试，而四个项目控制工具是在该测试之后加入的；以上均为项目自报结果。采用 MIT 许可。仓库已从 jtang613/GhidrAssistMCP 迁移，README 推荐作者自己的 GhidrAssist 客户端。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/symgraph/GhidrAssistMCP",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}