Ghidra MCP Server: Setup for Claude, Cursor and Other Apps

• Shows which program is loaded

  Returns the name, architecture and function count of the open program. A good first call to confirm the connection.

  Try: “What binary do I have open in Ghidra?”

  Read · get_metadata

• Lists or searches functions in the program

  Lists functions a page at a time, or filters them by name pattern.

  Try: “List functions whose names contain "crypt".”

  Read · find_functions

• Shows where the program starts running

  Returns the entry points of the program, a good root for analysis.

  Try: “Where does this binary start executing?”

  Read · get_entry_points

• Shows everything about one or many functions

  Takes one function or up to 20 and returns the fields you ask for, such as decompiled code and callers.

  Try: “Decompile the function at 0x401000 and list what it calls.”

  Read · get_functions

• Shows who calls whom around a function

  Returns a call graph for a function, to the depth and direction you choose.

  Try: “Show the call graph two levels deep from main.”

  Read · get_function_call_graph

• Shows everything that references an address

  Lists the places in the program that point to an address, such as who reads a global.

  Try: “Who touches the global at 0x4a3000?”

  Read · get_xrefs_to

• Shows what an address references

  Lists the references that start at an address.

  Try: “What does the code at 0x401050 reference?”

  Read · get_xrefs_from

• Lists the strings defined in the program

  Returns the defined strings, an easy way to get oriented in an unknown binary.

  Try: “List the strings in this binary.”

  Read · list_strings

• Searches the program's strings by pattern

  Finds defined strings that match a substring or regex.

  Try: “Find strings that look like URLs.”

  Read · search_strings

• Lists imports, exports, segments and more

  Lists one kind of item at a time, such as imports or exports, with paging.

  Try: “List the imports of this binary.”

  Read · list_program_items

• Reads raw bytes from the program

  Returns raw memory from the program at an address.

  Try: “Show 64 bytes at 0x402000.”

  Read · read_memory

• Shows the assembly for a function

  Returns the disassembly of a function.

  Try: “Disassemble the function at 0x401000.”

  Read · disassemble_function

• Searches for a byte pattern

  Finds places in the program that match a byte pattern.

  Try: “Find this byte sequence in the binary.”

  Read · search_byte_patterns

• Searches for instructions

  Finds instructions by mnemonic or operand text.

  Try: “Find every call to an xor instruction with a constant.”

  Read · search_instructions

• Traces how a value moves through a function

  Follows a value forward or backward through a function's P-code.

  Try: “Trace where the argument of this function ends up.”

  Read · analyze_dataflow

• Looks for well-known crypto constants

  Scans for constants used by common encryption and hashing code.

  Try: “Does this binary contain crypto constants?”

  Read · detect_crypto_constants

• Flags suspicious behaviors in the program

  Looks for behavior patterns that often show up in malware.

  Try: “Does this sample show any malware behaviors?”

  Read · detect_malware_behaviors

• Pulls out indicators like URLs and IPs

  Extracts indicators of compromise along with the code around them.

  Try: “Extract the IOCs from this sample.”

  Read · extract_iocs_with_context

• Runs a function in an emulator with inputs you set

  Emulates one function with registers and memory you control, without running the real program.

  Try: “Emulate this function with r0 set to 5.”

  Runs code · emulate_function

• Renames a function

  Renames a function in the Ghidra database. Names that fail the built-in quality rules are rejected unless you switch that off.

  Try: “Rename FUN_00401000 to parse_header.”

  Write · rename_function

• Renames any kind of symbol

  Renames a symbol of any kind in the database.

  Try: “Rename this label to g_config.”

  Write · rename_symbol

• Sets a function's return and argument types

  Changes the prototype of a function: return type, parameter types and calling convention.

  Try: “Set the prototype of parse_header to int parse_header(char *buf, int len).”

  Write · set_function_prototype

• Adds a comment to the listing

  Writes a plate, pre, EOL, post or repeatable comment at any address.

  Try: “Add a comment at 0x401000 saying this checks the license.”

  Write · set_comment

• Creates a new structure type

  Creates a structure data type, and other tools add, change or remove its fields.

  Try: “Create a struct called Header with a magic and a length field.”

  Write · create_struct

• Applies a data type to an address

  Sets the data type of the data at an address.

  Try: “Apply the Header struct at 0x404000.”

  Write · apply_data_type

• Creates a function at an address

  Defines a new function at an address in the program.

  Try: “Create a function at 0x401200.”

  Write · create_function

• Deletes a function definition

  Deletes the function defined at an address from the program database.

  Try: “Delete the function at 0x401200.”

  Delete · delete_function

• Deletes a data type

  Deletes a data type from the program.

  Try: “Delete the unused type OldHeader.”

  Delete · delete_data_type

• Deletes a file from the project

  Deletes a file from the open Ghidra project. When a file root is set, paths must stay under it.

  Try: “Delete the old sample from the project.”

  Delete · delete_file

• Deletes a Ghidra project (headless only)

  Deletes an entire Ghidra project. It works only in headless mode.

  Try: “Delete the scratch project.”

  Delete · delete_project

• Imports a binary from disk into the project

  Imports a binary file from your disk into the current project and opens it.

  Try: “Import /tmp/sample.exe and open it.”

  Write · import_file

• Saves the current program

  Saves your changes to the open program.

  Try: “Save the program.”

  Write · save_program

• Runs inline script code in Ghidra (off by default)

  Runs script code you give it inside the Ghidra process. It does nothing unless you set GHIDRA_MCP_ALLOW_SCRIPTS.

  Try: “Run this short script to count the functions.”

  Runs code · run_script_inline

• Runs a Ghidra script (off by default)

  Runs a Ghidra script and returns its output. It does nothing unless you set GHIDRA_MCP_ALLOW_SCRIPTS.

  Try: “Run my CountStrings script.”

  Runs code · run_ghidra_script

• Resumes the debugged program (GUI only)

  Resumes execution of the process under Ghidra's debugger. Other debugger tools set breakpoints, read registers and step.

  Try: “Resume the target and break at the next breakpoint.”

  Runs code · debugger_resume

• Searches the full tool catalog

  Searches all tools by keyword, since most are loaded on demand.

  Try: “Which tools can edit struct fields?”

  Read · search_tools

• Loads another group of tools

  Registers a group of tools on demand, because only part of the catalog loads at connect.

  Try: “Load the cross-reference tools.”

  Read · load_tool_group

Watch out for

• It can delete files and projects

  Tools exist to delete project files, functions, data types and, in headless mode, whole projects. Keep a backup of your Ghidra project. github.com

• Script tools run code inside Ghidra

  Setting GHIDRA_MCP_ALLOW_SCRIPTS turns on tools that run arbitrary Java in the Ghidra process. They are off by default; leave them off unless you need them. github.com

• Edits change your analysis database

  Renames, types and comments write to the program. Save only when you are happy with the result. github.com

• Exposing it on a network is unsafe

  The default is local only, with no login. If you bind it to another address, the README says to set an auth token and a file root first. github.com

Security advisories