GhidrAssistMCP

# GhidrAssistMCP A powerful Ghidra extension that provides an MCP (Model Context Protocol) server, enabling AI assistants and other tools to interact with Ghidra's reverse engineering capabilities through a standardized API. ## Overview GhidrAssistMCP bridges the gap between AI-powered analysis tools and Ghidra's comprehensive reverse engineering platform. By implementing the Model Context Protocol, this extension allows external AI assistants, automated analysis tools, and custom scripts to seamlessly interact with Ghidra's analysis capabilities. ### Key Features - **MCP Server Integration**: Full Model Context Protocol server implementation using official SDK - **Dual HTTP Transports**: Supports SSE and Streamable HTTP transports for maximum client compatibility - **39 Built-in Tools**: Comprehensive set of analysis tools covering functions, data, cross-references, structures, and more - **Multi-Program Support**: Work with multiple open programs simultaneously using `program_name` parameter - **Multi-Window Support**: Single MCP server shared across all CodeBrowser windows with intelligent focus tracking - **Active Context Awareness**: Automatic detection of which binary window is in focus, with context hints in all tool responses - **Configurable UI**: Easy-to-use interface for managing tools and monitoring activity - **Real-time Logging**: Track all MCP requests and responses with detailed logging - **Dynamic Tool Management**: Enable/disable tools individually with persistent settings - **Current Context Awareness**: Tools that understand Ghidra's current cursor position and active function ## Clients Shameless self-promotion: [GhidrAssist](https://github.com/jtang613/GhidrAssist) supports GhidrAssistMCP right out of the box. ## Screenshots   ## Installation ### Prerequisites - **Ghidra 11.4+** (tested with Ghidra 11.4 Public) - **An MCP Client (Like GhidrAssist)** ### Binary Release (Recommended) 1. **Download the latest release**: - Go to the [Releases page](https://github.com/jtang613/GhidrAssistMCP/releases) - Download the latest `.zip` file (e.g., `GhidrAssistMCP-v1.0.0.zip`) 2. **Install the extension**: - In Ghidra: **File → Install Extensions → Add Extension** - Select the downloaded ZIP file - Restart Ghidra when prompted 3. **Enable the plugin**: - **File → Configure → Configure Plugins** - Search for "GhidrAssistMCP" - Check the box to enable the plugin ### Building from Source 1. **Clone the repository**: ```bash git clone <repository-url> cd GhidrAssistMCP ``` 2. **Set Ghidra installation path**: ```bash export GHIDRA_INSTALL_DIR=/path/to/your/ghidra/installation ``` 3. **Build the extension**: ```bash gradle buildExtension ``` 4. **Install the extension**: - Copy the generated ZIP file from `dist/` directory - In Ghidra: **File → Install Extensions → Add Extension** - Select the ZIP file and restart Ghidra 5. **Enable the plugin**: - **File → Configure → Configure Plugins** - Search for "GhidrAssistMCP" - Check the box to enable the plugin ## Configuration ### Initial Setup 1. **Open the Control Panel**: - Window → GhidrAssistMCP (or use the toolbar icon) 2. **Configure Server Settings**: - **Host**: Default is `localhost` - **Port**: Default is `8080` - **Enable/Disable**: Toggle the MCP server on/off ### Tool Management The Configuration tab allows you to: - **View all available tools** (39 total) - **Enable/disable individual tools** using checkboxes - **Save configuration** to persist across sessions - **Monitor tool status** in real-time ### Available Tools #### Program Analysis - `get_program_info` - Get basic program information - `list_programs` - List all open programs (for multi-program support) - `list_functions` - List all functions in the program - `list_data` - List data definitions - `list_data_types` - List all available data types - `list_strings` - List string references - `list_imports` - List imported functions - `list_exports` - List exported functions - `list_segments` - List memory segments - `list_namespaces` - List namespaces - `list_classes` - List class definitions - `list_methods` - List method definitions #### Function Analysis - `get_function_info` - Get detailed function information - `get_class_info` - Get detailed class information - `get_function_by_address` - Find function at specific address - `get_current_function` - Get function at cursor position - `decompile_function` - Decompile function to C-like code - `disassemble_function` - Get assembly disassembly - `search_functions` - Search functions by name pattern - `search_classes` - Search classes by name pattern - `function_xrefs` - Get function cross-references #### Location & Navigation - `get_current_address