ida-multi-mcp

Install

Works in

• Claude Code
• Codex
• Gemini CLI
• GitHub Copilot
• OpenCode
• Cursor
• VS Code
• Windsurf
• Claude Desktop
• Cline
• Roo Code
• SourceCraft
• Koda
• Coddy

Manual install

pipx install git+https://github.com/MeroZemory/ida-multi-mcp.git

What it does

ida-multi-mcp is an MCP router for IDA Pro. The agent connects once, and several IDA databases work behind it, for example a dropper, a payload and a command server. Each IDA instance with the plugin installed registers itself in ~/.ida-mcp/instances.json when a database opens, so no client setup per binary is needed. Instances get short IDs like k7m2 and px3a, and requests to different instances run in parallel. The idalib mode opens a binary headless in a separate process per session and requires IDA Pro. Up to 76 tools cover a binary survey, function lists, decompilation and disassembly, cross-references and call graphs, byte and regex search, types and stack frames, renaming, comments, patches and memory reads. The py_eval tool runs arbitrary IDAPython inside IDA. Edits stay in memory until idb_save() is called. There are two differences from ordinary IDA servers. First, an auto-analysis wait rule: while the analysis queue is not empty, function lists and cross-references are incomplete, so analysis_status and analysis_wait show whether the work has finished and the router warns about incomplete answers. Second, search for identical and similar functions within a binary and across binaries (similar_functions, compare_functions, compare_binaries) by instruction MinHash, import, string and constant anchors and control-flow graph shape. Scoring and indexes are computed locally, and binaries are not uploaded to external services. The IDA tool implementations come from the ida-pro-mcp project.

Who it is for. For reverse engineers, malware analysts and vulnerability researchers with an IDA Pro license who analyze several related binaries together with an agent.

Example request

Which function in dropper.dll matches sub_140001000 in malware.exe? Wait for auto-analysis, build the indexes and show the similarity scores

MCP

Transport

stdio

Authentication

not required

Limitations

• Python 3.11 or newer and IDA Pro 8.5 or newer are required, 9.1 and later recommended. IDA 9.0 SP0 is unsupported.
• Local access only: the router binds to loopback and refuses non-local instances. The transport is stdio only, with no HTTP or SSE endpoint.
• Concurrency works across instances; inside one instance calls queue because IDA executes on a single main thread.
• Cancellation is not forwarded to IDA: the per-tool timeout bounds execution.
• Until auto-analysis finishes, function lists, cross-references and decompilation are incomplete. Call analysis_wait once after opening a binary.
• Neural similarity is opt-in (pip install ida-multi-mcp[neural] and IDA_MCP_SIM_NEURAL=1) and downloads a model to ~/.ida-mcp/models/.

How to disable. Run ida-multi-mcp --uninstall: it removes the previous installation, meaning the plugin and the configuration. Then remove the package with pip uninstall ida-multi-mcp or pipx uninstall ida-multi-mcp. The registry and indexes live in ~/.ida-mcp.

README in short

The README opens with a one-sentence install prompt for an agent pointing to docs/installation.md, then shows an example of analyzing two binaries and a table of two groups of strengths. Next come the relation to ida-pro-mcp, an architecture overview, the auto-analysis wait rule, the tool list, a section on function similarity, requirements, manual installation for Windows, macOS and Linux, the list of supported MCP clients, usage examples, limitations and documentation links.