Ghidra MCP by bethington

by bethington• 6k•• Scanned•Claim this listing•Request removal

Deployment & DevOpsaibinary analysisghidraghidra extensionjava

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

Ghidra MCP is an open-source mcp server by bethington, written mainly in Java, with 6,037 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 31, 2026.

Scan summary: scanned Nov 5, 2026 at commit 61a1fbc. No capabilities flagged by our checks. Scan policy

about README security reviews

What Ghidra MCP can touch

Run shell commandsNot seen in this scan
Run dynamic codeNot seen in this scan
Read or write filesNot seen in this scan
Read environment and secretsNot seen in this scan
Control a web browserNot seen in this scan
Connect to databasesNot seen in this scan
Read or send messagesNot seen in this scan
Touch money or tradingNot seen in this scan
Connect to the internetNo connections seen while running

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 61a1fbc, Nov 5, 2026. See the scan policy.

Before you install Ghidra MCP

AgenticMart scanned Ghidra MCP on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.
Based on its description and topics, it likely needs to act on cloud infrastructure.

Before you install

Use a role with only the permissions it needs, never an admin key.
Pin the version you reviewed instead of always installing the latest release.
Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.

Maintained by bethington on GitHub, 6,037 stars and 370 forks. Popularity is not proof of safety.
Last code change: Oct 31, 2026.
Open-source license: Apache-2.0.

Read the scan report What our scan checks

Tools Ghidra MCP exposes (8)

Listed by the server itself during our scan of commit 61a1fbc.

list_instances
List known Ghidra instances from UDS discovery and the active TCP fallback. Returns JSON with each instance's project name, PID, open programs, and socket path or TCP URL. Also shows which instance is currently connected.
connect_instance
Switch the MCP bridge to a different Ghidra instance by project name. IMPORTANT: Before calling this function only the static bridge tools are exposed (list_instances, connect_instance, tool-group management, debugger proxy). After a successful connect the bridge fetches the in
list_tool_groups
List all available tool groups with their tool counts and loaded status. Returns each category with: tool count, loaded status, and tool names. Use load_tool_group(group) to load a group's tools.
load_tool_group
Load all tools in a category. Accepts a category name or "all" to load everything. Use list_tool_groups() to see available categories. Args: group: Category name (e.g. "function", "datatype") or "all"
unload_tool_group
Unload all tools in a category. Default groups are protected from unloading. Args: group: Category name to unload
check_tools
Check if specific tools are callable right now. Returns status for each tool: "callable", "not_loaded" (exists but group not loaded), or "not_found" (doesn't exist). Args: tools: Comma-separated tool names, e.g. "rename_symbol,batch_set_comments,analyze_function_completeness"
search_tools
Search the full Ghidra tool catalog by keyword — including tools whose group is not currently loaded. Use this to discover the right tool without paying the context cost of loading all groups (run the bridge with --lazy and search on demand). Matches against tool name, description,
import_file
Import a binary file from disk into the current Ghidra project. Imports the file, opens it in the CodeBrowser, and optionally starts auto-analysis. When analysis is enabled, sends a log notification when analysis completes. For raw firmware binaries, specify language (e.g. "ARM:LE

Ghidra MCP is an open-source mcp server by bethington, written mainly in Java. Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

At a glance

Stars: 6k
Forks: 370
Language: Java
License: Apache-2.0
Created: Aug 2025
Last update: Oct 31, 2026
Type: MCP Server
Price: Free

Topics

aibinary-analysisghidraghidra-extensionjavamcpmcp-servermodel-context-protocolpythonreverse-engineeringstatic-analysis

Questions about Ghidra MCP

What is Ghidra MCP?

Who maintains Ghidra MCP?

Ghidra MCP is maintained by bethington on GitHub (bethington/ghidra-mcp). AgenticMart lists it from public repository data.

Is Ghidra MCP safe to use?

What license does Ghidra MCP use?

It is published under the Apache-2.0 license.

Guides

Ghidra MCP alternatives

View more →

Similar mcp servers in Deployment & DevOps, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

Name	Stars	Licence	Last updated	Scan
Ghidra MCP (this page) bethington	6k	Apache-2.0	Oct 31, 2026	Scanned, no flagged issues
OpenMetadata open-metadata	16k	Apache-2.0	Nov 1, 2026	Scanned, see report
Drawio Skill Agents365-ai	10k	MIT	Nov 1, 2026	Scanned, no flagged issues
Openstatus openstatusHQ	9.2k	AGPL-3.0	Nov 1, 2026	Scanned, no flagged issues
Kubefwd txn2	4.2k	Apache-2.0	Oct 27, 2026	Scanned, no flagged issues
Radar skyhook-io	4k	Apache-2.0	Nov 1, 2026	Scanned, no flagged issues