Ghidra MCP server & Claude connector

Does Ghidra have an official MCP server or Claude connector?

Community only

As of October 2026, no official Ghidra MCP server is verified. Ghidra is published by the NSA, and its repository contains no MCP server we could find. The most popular option is GhidraMCP, a community project by LaurieWired: a Ghidra plugin plus a local bridge that exposes decompile, search and rename tools. It has no documented authentication.

Last checked October 18, 2026

Verdict and evidence

What we checked: GhidraMCP (LaurieWired)
Published by: LaurieWired (community)
Runs: Runs locally
Sign-in: None
Stage: unknown
Plan: Free, Apache-2.0. Needs Ghidra 12.1.4 per the README and uv or Python 3.10+.

Evidence

LaurieWired/GhidraMCP (github.com, seen October 18, 2026)
NationalSecurityAgency/ghidra (no MCP server found) (github.com, seen October 18, 2026)

What an AI can do in Ghidra

Read

Get program infoget_program_info
List functionslist_functions
Decompile a functiondecompile_function
Disassemble a functiondisassemble_function
Get cross-references to an addressget_xrefs_to

Update

Rename a functionrename_function
Set a function prototypeset_function_prototype
Set a decompiler commentset_decompiler_comment

From the publisher’s documentation for the version we checked. Not every tool is listed.

Setup

Claude (claude.ai / Desktop)

Install the Ghidra extension from the repo release, then add the bridge to your MCP client config (README's generic example).

{
  "mcpServers": {
    "ghidra": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/LaurieWired/GhidraMCP",
        "ghidra-mcp",
        "--ghidra-server",
        "http://127.0.0.1:8080/"
      ]
    }
  }
}

Source

Other clients

README says any MCP client should work with the same JSON; no Cursor or VS Code specific steps are given.

Source

Safety check

Flag
Publisher verified
Owned by an individual (LaurieWired), not the NSA. NationalSecurityAgency/ghidra contains no MCP server we could find.
Flag
Auth model
No authentication is documented. A Ghidra plugin serves an HTTP API on a local port (default 8080) and the bridge connects to it; any local process could reach it.
Flag
Write and delete access
Includes rename, set-prototype, set-variable-type and comment tools that modify the open Ghidra project. No read-only mode found. Binaries you analyze are untrusted: decompiled strings or comments could carry injected instructions.
Pass
Tool-description injection scan
Read src/ghidra_mcp/server.py (tool definitions) and the README; no text aimed at changing the AI's behavior (Jev check 0.06).
Pass
Repo maintenance
LaurieWired/GhidraMCP: pushed 2026-10-10, not archived, 11,379 stars, Apache-2.0.

FAQ

Does Ghidra have an official MCP server?

No official MCP server verified as of October 2026. Ghidra is published by the NSA; the community GhidraMCP project is not an NSA product.

Is GhidraMCP made by the NSA?

No. It is a community project by LaurieWired under Apache-2.0.

Is Ghidra a Claude connector?

Not verified. It runs locally, so there is no hosted connector to add.

Is it safe to use on malware?

Treat analyzed binaries as untrusted input to the AI. It exposes rename and comment tools that modify your project, so work on a copy.

Does it need an API key?

No key is documented. It talks to Ghidra over a local HTTP port with no authentication documented.

Last reviewed October 18, 2026.

Compare Ghidra

All developer tools

Something changed?

Vendors ship MCP updates often. If Ghidra launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.

New official MCP servers, weekly

One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.