Hex-Rays IDA MCP plugin
The official Hex-Rays MCP server: an agent opens IDA databases, runs Python inside them and reverses binaries, with plugins for Claude Code and Codex
- 1,360 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- The execute_python tool runs arbitrary Python inside the IDA database and save_database writes changes to disk
- The agent opens any binary by path, including potentially malicious samples
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add plugins/hex-rays-ida-mcpDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The execute_python tool runs arbitrary Python inside the IDA database and save_database writes changes to disk
- The agent opens any binary by path, including potentially malicious samples
This is third-party code. Review the repository files before installing.
What it does
The server connects an AI agent to IDA, the Hex-Rays disassembler. The agent gets six tools: open_database, execute_python, reference, list_databases, save_database and close_database. Most of the work goes through execute_python, which runs Python code inside an open IDA database. The server also runs headless through idalib, and the IDA GUI plugin exposes a database that is open in the window. It ships as a plugin for Claude Code, Codex CLI and GitHub Copilot CLI, and as an extension for Pi and oh-my-pi. Other agents take a plain stdio server in their MCP config, started with uvx ida-mcp stdio. The plugins include a PreToolUse hook that links IDA calls to the agent's session transcript. The ida-mcp dashboard command opens a local dashboard with the call log, Python errors and task time. ida-mcp logs bundles a log archive for troubleshooting. The server builds on the IDA Nexus library, which lets several clients share one database.
Who it is for. For reverse engineers and security researchers with an IDA 9.4 or newer license who want Claude Code, Codex or Copilot CLI to take over routine binary analysis.
Good fit when
- You need to analyze a sample such as sample.elf: the agent opens the database, walks the functions and reports back
- You want to know what is open in IDA right now: the GUI plugin answers "What do I have open in the IDA GUI?"
- The job needs IDAPython scripts and writing them one by one is slow: the agent runs code inside the database and sees the output
- You need analysis without a GUI window, for instance on a server: idalib runs the database headless
- You want an audit trail of what the agent did in IDA: ida-mcp dashboard shows calls, errors and timing
Not a fit when
- You have no IDA 9.4 or newer with idalib and Python 3.11 or newer: the server will not start
- You work in Ghidra or another disassembler: the server targets IDA only
- Git and uv are missing and you cannot install them: both the automatic install and the launch depend on them
- Another IDA MCP server is already connected: the author recommends disabling it so the agent is not confused by similar tools
Example request
Reverse /path/to/sample.elf in IDA: find the entry point, list the string constants and describe what main does.Limitations
- You need an IDA 9.4 or newer license with idalib, plus Python 3.11 or newer, Git and uv.
- Without the IDA GUI plugin the server works headless only and cannot see databases open in the window.
- The execute_python tool runs arbitrary Python inside the IDA database, so you are responsible for the code the agent launches.
- The project is official but serves IDA only: it will not fit other disassemblers.
- The author recommends disabling other IDA MCP servers, otherwise the agent gets confused by similar tools.
How to disable. In Claude Code remove the plugin with claude plugin uninstall ida-mcp@HexRaysSA. For other agents delete the ida entry from mcpServers. The IDA GUI plugin is managed through hcli plugin.
FAQ
How do I install IDA MCP in Claude Code?
Run uvx ida-hcli mcp install and it offers the GUI plugin and plugins for the supported agents. By hand it takes two commands: claude plugin marketplace add HexRaysSA/claude-marketplace and claude plugin install ida-mcp@HexRaysSA.
Does IDA MCP work without IDA running?
Yes. Without the IDA GUI plugin the server runs headless through idalib. The plugin is only needed for the agent to see databases open in the IDA window. An IDA license and idalib are still required.
How does the Hex-Rays IDA MCP differ from ida-pro-mcp?
This repository comes from Hex-Rays, the maker of IDA, and gives the agent six tools centered on running Python in the database. It adds a call-log dashboard and hooks for Claude Code, Codex and Copilot CLI. The requirements are higher: IDA 9.4 or newer.
How can I see what the agent did in IDA?
Run uvx ida-mcp dashboard --open. The dashboard collects tool calls, Python errors and task time. For a support request, uvx ida-mcp logs builds an archive of logs.
Which environment variables does IDA MCP use?
None is required. IDAUSR sets the IDA user directory that session log paths resolve from, and IDA_MCP_STATE_DIR overrides that path. IDA_MCP_IDLE_TIMEOUT and IDA_MCP_ID tune the idle timeout and the process identifier.
Discussion
No questions or reviews yet.
Related
PluginsMCP server that bridges IDA Pro with an agent: reading decompilation, renaming and typing, comments and running IDAPython right in the database
MCP server for IDA Pro that hosts several headless idalib sessions: an agent opens binaries, keeps each database isolated and connects with an access key
An MCP server for IDA Pro with one endpoint for several open databases: decompilation, cross-references and similar-function search across binaries
A headless IDA Pro MCP server in Rust: the agent opens a database, lists functions, disassembles, decompiles and builds cross references
An offensive security MCP server: the agent runs 150+ pentest and recon tools and drives automated target assessments
A native MCP plugin for the x64dbg debugger: the agent drives debugging over HTTP, sets breakpoints, steps through code, reads and patches memory
Comparison with similar tools
Entries that share the main search query, and how they differ.
| Entry | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| Hex-Rays IDA MCP (this entry) | yes | not required | 1,360 | |
| IDA Pro MCP | no | not required | 13,096 | a third-party MCP server for IDA, while this one is published by the vendor itself |
| ida-mcp-rs | no | not required | 877 | another IDA server, written in Rust by a third party |
README in short
The repository covers installation and launch of the official Hex-Rays IDA MCP server. It starts with the requirements: Git, uv, IDA 9.4 or newer with idalib, and Python 3.11+. Next come the automatic install through hcli and manual steps for each agent. The README ends with the CLI commands and two sample prompts for the agent. For developers who want to build their own tools it points to the IDA Nexus library.