gitwtfhub

wtf is ghidramcp?

dark-night0/ghidramcp — explained in plain English

Analysis updated 2026-05-18

3JavaAudience · developerComplexity · 4/5LicenseSetup · hard

TL;DR

A fork of GhidraMCP, updated to run on Ghidra 12.1.2, that lets AI assistants like Claude analyze and reverse engineer compiled programs through Ghidra.

Mindmap

mindmap
  root((GhidraMCP))
    What it does
      AI reverse engineering
      Decompile binaries
      Rename methods
    Tech stack
      Java plugin
      Python bridge
      Ghidra 12.1.2
    Use cases
      Binary analysis
      Claude Desktop client
      Cline client
    Audience
      Security researchers
      Developers

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Why would anyone build with this?

REASON 1

Let an AI assistant decompile and explain a compiled binary through Ghidra.

REASON 2

Automatically rename confusing function and variable names during reverse engineering.

REASON 3

Connect Claude Desktop, Cline, or 5ire to a running Ghidra instance for AI assisted analysis.

REASON 4

List a program's methods, classes, imports, and exports through an AI chat interface.

What's in the stack?

JavaPythonGhidraMCP

How it stacks up

dark-night0/ghidramcpcoder088/opencraftlabstack/labstack-java
Stars333
LanguageJavaJavaJava
Last pushed2019-12-10
MaintenanceDormant
Setup difficultyhardmoderatemoderate
Complexity4/53/52/5
Audiencedeveloperdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you spin it up?

Difficulty · hard Time to first run · 1h+

Requires installing Ghidra 12.1.2 itself plus Python and the MCP SDK, then importing and enabling the extension inside Ghidra.

Use freely for any purpose, including commercial use, as long as you keep the copyright and license notices.

Wtf does this do

GhidraMCP connects Ghidra, a popular reverse engineering tool used to analyze compiled programs, to AI assistants through the Model Context Protocol, often shortened to MCP. In plain terms, it lets an AI model like Claude look inside a compiled program the way a human reverse engineer would, reading decompiled code, renaming confusing function and variable names, and listing out a program's methods, classes, imports, and exports. This particular repository is a fork of the original GhidraMCP project, updated specifically to work with a newer version of Ghidra, version 12.1.2, since the original targets an older version, 11.3.2. According to the README, no actual plugin code needed to change, only version numbers in configuration files and a rebuilt Java library, since the underlying Ghidra features used by the plugin stayed stable between those versions. The project has two parts: a Ghidra plugin that runs inside Ghidra itself and exposes an HTTP server, and a Python bridge script that MCP clients talk to. Setup involves installing Ghidra 12.1.2, Python 3, and the MCP SDK, then importing the provided extension zip file into Ghidra through its Install Extensions menu and enabling the plugin. The README documents connecting three different MCP clients to this bridge: Claude Desktop, Cline, and a client called 5ire, each with its own configuration snippet showing how to point it at the running Ghidra server. Advanced users can also build the plugin from source using Maven or a direct Java compiler command, copying the required Ghidra library files into a local folder first. The project is licensed under the Apache 2.0 license.

Yoink these prompts

Prompt 1
Walk me through installing this GhidraMCP fork on Ghidra 12.1.2.
Prompt 2
Show me how to connect Claude Desktop to GhidraMCP using the bridge script.
Prompt 3
Explain what changed in this fork compared to the original GhidraMCP for Ghidra 11.3.2.
Prompt 4
Help me build the GhidraMCP plugin from source using Maven.

Frequently asked questions

wtf is ghidramcp?

A fork of GhidraMCP, updated to run on Ghidra 12.1.2, that lets AI assistants like Claude analyze and reverse engineer compiled programs through Ghidra.

What language is ghidramcp written in?

Mainly Java. The stack also includes Java, Python, Ghidra.

What license does ghidramcp use?

Use freely for any purpose, including commercial use, as long as you keep the copyright and license notices.

How hard is ghidramcp to set up?

Setup difficulty is rated hard, with roughly 1h+ to a first successful run.

Who is ghidramcp for?

Mainly developer.

View the repo → Decode another repo

This repo across BitVibe Labs

Don't trust strangers blindly. Verify against the repo.