概述

pyghidra-mcp 是一款命令行模型上下文协议（MCP）服务器，将 Ghidra 这一强大的软件逆向工程（SRE）套件的全部分析能力带入智能代理和基于大型语言模型的工具领域。 它通过 pyghidra 和 jpype 将 Gihidra 的 ProgramAPI 和 FlatProgramAPI 桥接到 Python，然后通过模型上下文协议（Model Context Protocol）公开该功能。

MCP是一个统一界面，允许语言模型、开发工具（如VS Code）和自主代理访问结构化上下文、调用工具并智能协作。可以把MCP看作强大分析工具与大型语言模型生态系统之间的桥梁。

有了pyghidra-mcp，Ghidra 成为一个智能后端——随时准备响应丰富的上下文查询，自动化深度逆向工程任务，并集成到人工智能辅助的工作流程中。

pyghidra-mcp 现在支持两种操作模式：

• headless 模式用于基于 CLI 的分析和自动化
• --gui 模式，通过 pyghidra-mcp 启动 Ghira，并与运行中的图形界面共享实时程序状态

[!注] 该测试项目正在积极开发中。

PyGhidra-MCP - Ghidra Model Context Protocol Server

Overview

pyghidra-mcp is a command-line Model Context Protocol (MCP) server that brings the full analytical power of Ghidra, a robust software reverse engineering (SRE) suite, into the world of intelligent agents and LLM-based tooling. It bridges Ghidra’s ProgramAPI and FlatProgramAPI to Python using pyghidra and jpype, then exposes that functionality via the Model Context Protocol.

MCP is a unified interface that allows language models, development tools (like VS Code), and autonomous agents to access structured context, invoke tooling, and collaborate intelligently. Think of MCP as the bridge between powerful analysis tools and the LLM ecosystem.

With pyghidra-mcp, Ghidra becomes an intelligent backend—ready to respond to context-rich queries, automate deep reverse engineering tasks, and integrate into AI-assisted workflows.

pyghidra-mcp now supports two operating modes:

• headless mode for CLI-driven analysis and automation
• --gui mode, which launches Ghidra through pyghidra-mcp and shares live program state with the running GUI

[!NOTE] This beta project is under active development. We would love your feedback, bug reports, feature requests, and code.

Yet another Ghidra MCP?

Yes, the original ghidra-mcp is fantastic. But pyghidra-mcp takes a different approach:

• 🐍 Headless-first, GUI-capable – Run entirely via CLI for streamlined automation, or launch Ghidra with --gui when you want live GUI navigation and edits.
• 🔁 Designed for automation – Ideal for integrating with LLMs, CI pipelines, and tooling that needs repeatable behavior.
• ✅ CI/CD friendly – Built with robust unit and integration tests for both client and server sessions.
• 🚀 Quick startup – Asynchronous startup allows the server to start handling requests while binaries are still being analyzed in the background. Supports fast command-line launching with minimal setup.
• 📦 Project-wide analysis – Enables concurrent reverse engineering of all binaries in a Ghidra project