用于基于Ghidra的轻量级MCP服务器，支持iOS、Linux和游戏文件
概览
基于 Ghidra 的逆向工程高效 MCP 服务器。分析支持 Swift、Objective-C 和 Hermes 的 ELF、Mach-O 和 PE 二进制文件。 一个精简、以安全为先的Ghidra MCP。确实如此——分析工具永远不会改变你的二进制文件或服务器配置（服务器在进程生命周期内处于冻结状态）。唯一负责写入、注释（重命名/注释/原型）的工具是（--允许-写入）和：每个变更在提交前都经过你通过MCP引发提示批准，如果客户无法请求，则失败关闭。你得到一个分析代理，可以在监督下持久化其发现，而不放弃只读安全的故事。 通过自制软件（brew安装ghidra）或/opt/ghidra或~/ghidra安装的Ghidra会自动找到。GHIDRA_INSTALL_DIR设置为仅针对非标准路径。 在你的项目中创建.mcp.json（全局则用~/.claude.json）： 添加到 ~/Library/Application Support/Claude/claude_desktop_config。
概述（AI 翻译）
[pypi]： https://pypi.org/project/pyghidra-lite/ [pypi-badge]： https://img.shields.io/pypi/v/pyghidra-lite?logo=pypi&logoColor=white [蟒蛇徽章]： https://img.shields.io/pypi/pyversions/pyghidra-lite?logo=python&logoColor=white [下载徽章]： https://img.shields.io/pypi/dm/pyghidra-lite [许可证徽章]：https://img.shields.io/github/license/johnzfitch/pyghidra-lite [ci]： https://github.com/johnzfitch/pyghidra-lite/actions/workflows/ci.yml [CI徽章]： https://img.shields.io/github/actions/workflow/status/johnzfitch/pyghidra-lite/ci.yml?branch=master&label=CI&logo=githubactions&logoColor=white [注册处]：https://registry.modelcontextprotocol.io/?q=pyghidra-lite [登记徽章]： https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fregistry.modelcontextprotocol.io%2Fv0%2Fservers%2Fio.github.johnzfitch%252Fpyghidra-lite%2Fversions%2Flatest&query=%24.server.version&label=MCP Registry&prefix=v&color=blue [MCP]： https://modelcontextprotocol.io/specification/2025-11-25 [mcp-badge]： https://img.shields.io/badge/MCP_spec-2025--11--25-blue [插件徽章]： https://img.shields.io/badge/Claude_Code-plugin-D97757?logo=claude&logoColor=white [基陀罗]： https://github.
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
pyghidra-lite
Token-efficient MCP server for Ghidra-based reverse engineering. Analyze ELF, Mach-O, and PE binaries with Swift, Objective-C, and Hermes support — decompile, disassemble, trace calls and value flow, recover data types, and map addresses back to file offsets. Runs on Linux, macOS, and Windows; ships as a Claude Code plugin with a bundled reverse-engineering skill.
Bottom line: a lean, security-first Ghidra MCP. It is read-only by default — analysis tools never mutate your binaries or the server’s configuration (which is frozen for the life of the process). The one tool that writes, annotate (rename / comment / prototype), is opt-in (--allow-write) and human-confirmed: every change is approved by you through an MCP elicitation prompt before it’s committed, and it fails closed if your client can’t ask. You get an analyst-agent that can persist its findings — under supervision — without giving up the read-only safety story.
Quick Start
1. Prerequisites
A 64-bit JDK 21+ and Ghidra 11.x or 12.x are required (tested with Ghidra 12.1.2 and JDK 21).
# macOS
brew install openjdk@21安装
uvx pyghidra-lite配置
{
"mcpServers": {
"pyghidra-lite": {
"command": "pyghidra-lite"
}
}
}