Skip to content

Security MCP Server

Ida Pro MCP

MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.

Scan flagged something by mrexodia6,410MITPythonAdvancedstdio
View on GitHub Install Guide

Install

No auto-install command available for this server.

Check the GitHub repository for setup instructions

Safety Report

33% Scan flagged something
Scanned 5 months ago
2 passed 4 warnings
Security
Authentication
details

py_eval tool allows arbitrary Python execution inside IDA Pro; no authentication on the MCP endpoint

Warning
CORS Policy
details

Local stdio or local HTTP transport; no web CORS surface

N/A
Rate Limiting
details

No rate limiting; py_eval enables unrestricted code execution in the IDA context

Warning
Known CVEs
details

No known CVEs for the MCP plugin; py_eval is a significant capability that must be used carefully

Info
Code Quality
Dependency Audit
details

Python plugin; minimal external dependencies. No published audit

Info
Dangerous Patterns
details

Dangerous patterns detected: eval_call

Warning
License
details

License not explicitly stated in the README; verify before commercial use

Warning
Code Source
details

Open source at github.com/mrexodia/ida-pro-mcp; license not explicitly documented in README

Pass
Community
Maintenance Status
details

Actively maintained; installable from GitHub main branch

Pass

Learn about our security methodology →

Compatibility

Claude CodePython stdio MCP; configure with IDA Pro running and plugin loaded
Not Tested
CursorStandard MCP interface; requires IDA Pro license and plugin
Not Tested
VS CodeWorks via stdio MCP transport
Not Tested
WindsurfStandard stdio MCP; compatible
Not Tested
Claude DesktopWorks with Claude Desktop; requires local IDA Pro installation
Not Tested

Tools Provided (25)

lookup_funcs

Retrieve functions by address or name

int_convert

Convert numbers between formats (decimal, hex, bytes, ASCII, binary)

list_funcs

List functions with pagination and optional filtering

list_globals

List global variables with pagination

imports

List imported symbols with their module names

decompile

Decompile a function at the specified address using the Hex-Rays decompiler

disasm

Disassemble a function with full details

xrefs_to

Get cross-references to one or more addresses

xrefs_to_field

Get cross-references to a struct field

callees

Get functions called by the specified function(s)

set_comments

Add comments in both disassembly and decompiler views

patch_asm

Patch assembly instructions at a given address

declare_type

Declare C type(s) in the IDA type library

define_func

Define a function at one or more addresses

define_code

Convert raw bytes to code instructions

undefine

Undefine item(s), converting them back to raw bytes

get_bytes

Read raw bytes from a specified address

get_string

Read a string from a specified address

stack_frame

Get the stack frame layout for a function

py_eval

Execute arbitrary Python code in the IDA Pro context (powerful but use with caution)

analyze_funcs

Run comprehensive analysis on one or more functions

find_regex

Search for patterns matching a regular expression in the binary

find_bytes

Search for a specific byte sequence in the binary

basic_blocks

Get the basic block structure of a function

callgraph

Generate a call graph for the specified function

Frequently Asked Questions

What is Ida Pro MCP?

MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.

What tools does Ida Pro MCP provide?

Ida Pro MCP provides 25 tools including lookup_funcs, int_convert, list_funcs, list_globals. Each tool can be called by AI agents to perform specific operations.

Is Ida Pro MCP safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Ida Pro MCP and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. At least one matched — the specific finding is in the scan report on this page. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Ida Pro MCP?

Similar MCP servers include GhidraMCP, Beelzebub, Jadx AI MCP. Each serves a similar purpose but may differ in features, language, and compatibility.

Similar MCP Servers

GhidraMCP

Not scanned
by LaurieWired

A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports.

security Java stdio
7.9k 27 tools
View

Beelzebub

Scan found nothing
by mariocandela

Beelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious agent behavior. The underlying idea is to provide the agent with tools it would never use in its normal work.

security Go stdio
1.9k
View

Jadx AI MCP

Scan flagged something
by zinja-coder

JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live reverse engineering support with LLMs like Claude.

security Java stdio
1.5k
View
Was this helpful?

Free AI writing tools

Check a draft for AI tells, then fix what the check finds.

AI Humanizer
make the text read naturally
AI Detector
Free, unlimited
View all plans — from $9.99/mo 3 free uses/day, no signup

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.