general MCP Server
An native MCP server extension for Ghidra
Discovered via github-topic:mcp-server and last synced 1d ago.
Install instructions not detected yet
Check the source repository for the latest setup steps.
Comprehensive statistics for all functions
List namespaces in the program
boolean
List string references with optional filtering
Get detailed data type information and structure definitions
Merge (overlay) fields from a C definition onto an existing structure without deleting existing fields
Description
Recover structure definitions from usage patterns
Get current cursor address
Find all references to/from a specific address
Find all cross-references for a function
Search for byte patterns in memory
Data flow analysis prompt
Security vulnerability identification
variable` - `comments`: `action: get
Get function at current cursor position
`decompiler`, `disassembly`, `pcode`
Rename a local variable or a global/data symbol using `scope`
List all pending/running/completed tasks
pcode` - `classes`: `action: list
Patch raw bytes in program memory at a given address
Get basic block information for a function
List all binary entry points
Export the current program to disk (`binary` or `original_file`) *(disabled by default)*
Set function signature/prototype
Get basic program information (name, architecture, compiler, etc.)
List memory segments
List functions with optional pattern filtering and pagination
List exported functions/symbols
`function`, `data`, `variable`
auto_create
Remove a bookmark
Description
Cancel a running async task
Search strings by pattern
Define data variables at addresses
Values
Set/insert a single field at a specific offset without needing a full C struct (use `field_name` to name it)
create
Description
Get stack frame layout with variable offsets
List imported functions/symbols
Include callers/callees (replaces separate call graph tool)
Rename a field within a structure
Generate function documentation
Automatically create structure from variable usage patterns
remove` - `variables`: `action: list
Find cross-references to a specific struct field
Check status and retrieve results of async tasks
Trace network send/recv call stacks for protocol analysis and network vulnerability identification
Assemble instruction text at an address and optionally patch it into program memory
Find functions by name pattern
Create/define a function at an address, optionally clearing existing data/code first
Disassemble code at an address, optionally clearing existing data/code in the range first
Create a new structure from C definition or empty
Delete a data type by name (optionally scoped by `category`)
create_typedef
List/open project programs in CodeBrowser, with optional analysis prompt suppression and analysis-after-open task submission
Close an open CodeBrowser program; changed programs require `save=true` or `ignore_changes=true`
Import a host file into the current Ghidra project and optionally open it *(disabled by default)*
List or delete files/folders in the active Ghidra project; deletion requires `confirm=true`
List/read/create/delete/run Ghidra scripts *(disabled by default)*
List/set/reset Auto Analysis options and save/apply/list/delete option presets for the current program
Run Auto Analysis on the current program or all open programs; supports full re-analysis, pending-changes analysis, address ranges, and option overrides
list_presets
List all open programs across all CodeBrowser windows, including Project Path values for unambiguous `program_name` targeting
Query Auto Analysis status or request cancellation of queued analysis tasks
reset
Comprehensive function analysis prompt
Diff two functions for similarity analysis
merge
set_prototype` with `scope: auto
List relocation entries
List data definitions in the program
Get hexdump/data at a specific address