Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution ×5 in bethington/ghidra-mcp
- HIGH code analysis flagged dynamic code execution ×3 in bethington/ghidra-mcp
- HIGH code analysis flagged dynamic code execution in bethington/ghidra-mcp
transport stdio · http counts 8 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
check_tools
-
connect_instance
-
import_file
-
list_instances
-
list_tool_groups
-
load_tool_group
-
search_tools
-
unload_tool_group
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit e4d293c · analyzer v33 · 1w ago
skills & prompt files 14
- agent-rules bethington-ghidra-mcp-e4d293c/AGENTS.md
- agent-rules bethington-ghidra-mcp-e4d293c/CLAUDE.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/CUSTOMIZING_CONVENTIONS.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/DATA_SECTION_WORKFLOW.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/DATA_TYPE_INVESTIGATION_QUICK.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/FUNCTION_DOC_WORKFLOW_V5.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/FUNCTION_DOC_WORKFLOW_V5_BATCH.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/GLOBAL_DATA_ANALYSIS_WORKFLOW.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/ORPHANED_CODE_DISCOVERY_WORKFLOW.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/PLATE_COMMENT_EXAMPLES.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/QUICK_START_PROMPT.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/README.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/STRING_LABELING_CONVENTION.md
- prompt-file bethington-ghidra-mcp-e4d293c/docs/prompts/TOOL_USAGE_GUIDE.md
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 293
tool registrations 8
- list_instances bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :207
- connect_instance bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :249
- list_tool_groups bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :279
- load_tool_group bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :293
- unload_tool_group bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :363
- check_tools bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :398
- search_tools bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :456
- import_file bethington-ghidra-mcp-e4d293c/python/bridge_mcp_ghidra/static_tools.py :512
declared dependencies 21
- ghidra:Generic@*
- ghidra:SoftwareModeling@*
- ghidra:Project@*
- ghidra:Docking@*
- ghidra:Decompiler@*
- ghidra:Utility@*
- ghidra:Base@*
- ghidra:Gui@*
- ghidra:FileSystem@*
- ghidra:Help@*
- ghidra:Emulation@*
- ghidra:Debugger-api@*
- ghidra:Framework-TraceModeling@*
- ghidra:Debugger-rmi-trace@*
- com.google.code.gson:gson@2.14.0
- junit:junit@4.13.2
- org.mockito:mockito-core@5.23.0
- ghidra:DB@*
- org.jdom:jdom2@2.0.6.1
- junit:junit@4.13.2
- org.mockito:mockito-core@5.23.0