IDA Pro MCP
MCP server that bridges IDA Pro with an agent: reading decompilation, renaming and typing, comments and running IDAPython right in the database
- 13,459 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Runs arbitrary IDAPython and modifies the IDA Pro database
- Opens and analyzes potentially malicious binaries
Install
- Works in
Manual install
claude plugin marketplace add mrexodia/claude-marketplace
claude plugin install ida-pro-mcp@mrexodiaInstalls the idalib MCP server as a plugin.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Runs arbitrary IDAPython and modifies the IDA Pro database
- Opens and analyzes potentially malicious binaries
This is third-party code. Review the repository files before installing.
What it does
The server exposes an IDA Pro database to an agent through a set of MCP tools. The agent can read the decompilation and disassembly, list functions and cross references, rename variables and functions, change argument and pointer types, leave comments and run arbitrary IDAPython. A dedicated tool converts numbers between bases so the model does not miscalculate. It runs in two modes: as a plugin inside a running IDA Pro, or headless through idalib, where a database is analyzed without the GUI. Transport is stdio for local clients and HTTP or SSE for connecting to the interface.
Who it is for. For reverse engineers and malware analysts who work with binaries in IDA Pro and want to bring an AI agent into the loop.
Good fit when
- You want the agent to work through a function in IDA Pro and add meaningful names and comments
- You need headless analysis of a binary through idalib without opening the GUI
- You want to connect IDA Pro to Claude Code, Cursor, Codex or another MCP client
Not a fit when
- You have IDA Free: it is not supported, a commercial IDA Pro is required
- The code is heavily obfuscated; string encryption and control flow flattening are better removed before the model works
- You need analysis without any risk of database edits: the server can modify and execute code
Example request
Work through this function in IDA Pro, rename the variables, fix the types and leave comments with your findingsMCP
- Transport
- stdio, http
- Authentication
- not required
Environment variables
IDA_MCP_URL- Address of the running GUI server the client connects to.
IDA_MCP_TOOL_TIMEOUT_SEC- Tool call timeout in seconds.
IDA_MCP_MAX_WORKERS- Maximum number of concurrent idalib worker processes.
Limitations
A commercial IDA Pro 8.3 or newer is required, 9 is recommended, IDA Free is not supported. Python 3.11 or newer and uv must be installed. Headless mode needs a one-time idalib activation with the script shipped in IDA. The GUI method via ida-pro-mcp --install is marked by the author as deprecated in favor of idalib-mcp. Models miscalculate base conversions, so arithmetic should explicitly use the int_convert tool.
How to disable. Remove the plugin: claude plugin uninstall ida-pro-mcp@mrexodia or codex plugin remove ida-pro-mcp@mrexodia. For a manual install, drop the server entry from the MCP client config and remove the IDA plugin, then pip uninstall ida-pro-mcp.
FAQ
Does it work with IDA Free?
No. A commercial IDA Pro 8.3 or newer is required, 9 is recommended.
How does GUI mode differ from idalib?
In GUI mode the server runs as a plugin inside an open IDA Pro. idalib-mcp runs analysis without the GUI, each database in its own worker process. The author recommends idalib and marks the old GUI plugin as deprecated.
How is IDA Pro MCP different from IDAPython scripts?
The agent works with the IDA Pro database through MCP tools: reads decompilation and disassembly, lists functions and cross references, renames variables and applies types. You do not write scripts, IDAPython runs on the agent's request.
How do I connect IDA Pro MCP?
For Claude Code: claude plugin marketplace add mrexodia/claude-marketplace and install the plugin. The server also works in Codex, Cursor, Cline, Roo Code, Gemini CLI, Copilot and Windsurf. Risk is high because the agent changes your IDA database.
Discussion
No questions or reviews yet.
Related
MCP serversMCP server for IDA Pro that hosts several headless idalib sessions: an agent opens binaries, keeps each database isolated and connects with an access key
An MCP server for IDA Pro with one endpoint for several open databases: decompilation, cross-references and similar-function search across binaries
A headless IDA Pro MCP server in Rust: the agent opens a database, lists functions, disassembles, decompiles and builds cross references
The official Hex-Rays MCP server: an agent opens IDA databases, runs Python inside them and reverses binaries, with plugins for Claude Code and Codex
RE-MCP opens IDA Pro and Ghidra to an agent in headless mode: functions, decompiler, cross-references, types and patching.
A skill for analysing malware samples in IDA Pro: IDAPython, decompilation, imports, strings, C2 addresses and encryption traces.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| IDA Pro MCP (this card) | no | not required | 13,459 | |
| Hex-Rays IDA MCP | yes | not required | 1,606 | the official Hex-Rays MCP server |
| BLA | no | 5,407 | a defensive layer for shipped builds against AI reverse-engineering |
README in short
The README describes an MCP server for analyzing binaries in IDA Pro together with an agent. It lists requirements: IDA Pro 8.3 and up, Python 3.11 and up, uv, and idalib activation for headless mode. It gives plugin install commands for Claude Code, Codex and Kimi Code, a manual pip install with ida-pro-mcp --install, and how to run SSE and headless idalib-mcp over stdio or HTTP. It also covers prompting advice: read the decompilation, rename and type, never convert numbers by hand but call the int_convert tool. MIT licensed.