IDA Pro plugin for reverse engineering via MCP
Top 17.2% on sourcepulse
This repository provides an MCP (Meta Communication Protocol) server for IDA Pro, enabling seamless integration with Large Language Models (LLMs) for reverse engineering tasks. It offers a streamlined way for LLM-powered tools like Claude, Cursor, and VSCode Agent Mode to interact with IDA Pro, allowing them to query database information, decompile functions, manipulate comments, and rename entities.
How It Works
The project utilizes a JSON-RPC protocol over a local socket to communicate between the IDA Pro plugin and the MCP server. The server, written in Python, exposes various functions to interact with the IDA Pro database. The IDA plugin acts as a bridge, translating LLM requests into IDA Pro API calls and returning the results. This architecture simplifies adding new functionalities with minimal boilerplate, as demonstrated by the ease of adding new @jsonrpc
functions.
Quick Start & Requirements
pip install --upgrade git+https://github.com/mrexodia/ida-pro-mcp
ida-pro-mcp --install
to install the IDA plugin and configure MCP servers.Highlighted Details
@jsonrpc
function in the Python server.Maintenance & Community
The project is maintained by mrexodia. Further community interaction and development can be found via GitHub issues and discussions.
Licensing & Compatibility
The repository does not explicitly state a license in the README. Users should verify licensing for commercial use or closed-source linking.
Limitations & Caveats
The README emphasizes that LLMs may hallucinate and require careful prompting, especially for numerical conversions. Obfuscated code and lack of symbol resolution can significantly degrade LLM accuracy, necessitating pre-processing steps.
2 days ago
1 day