ida-mcp-rs
A headless IDA Pro MCP server in Rust: the agent opens a database, lists functions, disassembles, decompiles and builds cross references
- 904 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Runs IDAPython scripts and can modify the analysis database
- A reverse engineering tool; use it on your own or authorized binaries
- Working with untrusted binaries requires environment isolation
Install
- Works in
Manual install
brew install blacktop/tap/ida-mcpmacOS and Linux via Homebrew; use Scoop on Windows.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Runs IDAPython scripts and can modify the analysis database
- A reverse engineering tool; use it on your own or authorized binaries
- Working with untrusted binaries requires environment isolation
This is third-party code. Review the repository files before installing.
What it does
The server connects an AI agent to IDA Pro in headless mode through the idalib library and runs without a GUI. It opens a database from a file, quickly returns the function list, disassembly and strings, while heavier cross reference analysis and decompilation run in the background with status polling. It supports raw image loading with processor, bitness and entry point, dyld_shared_cache work, IDAPython script execution and a read-only mode. Transports include stdio and streamable HTTP, plus a workspace with several databases.
Who it is for. For reverse engineers and malware analysts with an IDA Pro license who automate analysis through an agent.
Good fit when
- You automate binary analysis in IDA Pro from an AI client
- You need headless mode for pipelines and batch analysis
- You need disassembly, decompilation and cross references on the agent's request
Not a fit when
- You do not have an IDA Pro 9.4 license
- You analyze someone else's proprietary code without rights
- You only need the IDA GUI without automation
Example request
Open this binary and decompile the main functionMCP
- Transport
- stdio, http
- Authentication
- not required
Environment variables
IDADIR- Path to the IDA install on Linux for library discovery when it is non-standard.
DYLD_LIBRARY_PATH- Path to IDA libraries on macOS when the binary cannot find libida.dylib.
IDA_MCP_READ_ONLY- Enables read-only mode and removes mutating tools.
Limitations
It needs an IDA Pro 9.4 license, and server versions are tied to IDA versions. Decompilation requires Hex-Rays and a completed analysis. Non-standard install paths need environment variables, for example DYLD_LIBRARY_PATH on macOS or IDADIR on Linux. Script execution and database editing tools can be disabled with the read-only mode.
How to disable. Remove the server with the client command, for example claude mcp remove ida, and uninstall the binary through the manager used to install it (Homebrew, Scoop, Nix).
FAQ
Do I need paid IDA Pro?
Yes. A valid IDA Pro 9.4 license is required, and server versions match IDA versions.
How do I limit capabilities?
There is a read-only mode and toolset filtering that strip database edits and arbitrary code execution.
Discussion
No questions or reviews yet.
Related
MCP serversMCP server for IDA Pro that hosts several headless idalib sessions: an agent opens binaries, keeps each database isolated and connects with an access key
MCP server that bridges IDA Pro with an agent: reading decompilation, renaming and typing, comments and running IDAPython right in the database
An MCP server for IDA Pro with one endpoint for several open databases: decompilation, cross-references and similar-function search across binaries
The official Hex-Rays MCP server: an agent opens IDA databases, runs Python inside them and reverses binaries, with plugins for Claude Code and Codex
RE-MCP opens IDA Pro and Ghidra to an agent in headless mode: functions, decompiler, cross-references, types and patching.
An MCP server for the Ghidra disassembler: hundreds of tools for reverse engineering, decompilation, renaming, structures, emulation and debugging
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| ida-mcp-rs (this card) | no | not required | 904 | |
| kubectl-mcp-server | no | not required | 972 | reads cluster state and diagnoses pod failures |
| Unreal Engine MCP Server | no | not required | 1,032 | Unreal Engine assets, actors and blueprints |
| Android MCP | no | not required | 924 | controls an Android device through ADB |
README in short
The README covers install via Homebrew, Scoop and Nix, setup on macOS, Linux and Windows with environment variables for locating IDA libraries, and wiring to Claude Code, Codex CLI, Gemini CLI and Cursor. It shows the workflow: open a database, list functions, disassemble, background analysis and decompile. It also details the multi-database workspace, an HTTP pool, an experimental debugger, dyld_shared_cache work, IDAPython and disabling Lumina. It includes context optimization flags and a read-only mode.