ida-mcp-rs

Overview

ida-mcp-rs is a sophisticated MCP server that bridges AI agents with IDA Pro, the industry-standard reverse engineering tool. It exposes 71+ tools for analyzing binaries, including function listing, disassembly, decompilation (with Hex-Rays), cross-reference analysis, and IDAPython scripting capabilities. The server supports headless operation, making it ideal for automated analysis workflows. It includes special support for analyzing Apple's dyld_shared_cache files and provides comprehensive context optimization to work efficiently with various AI clients.

Try asking AI

After installing, here are 6 things you can ask your AI assistant:

• open_idb

  Open a binary IDA database for analysis

  Try:Open the binary at ~/samples/malwareTry:Load IDB file from /path/to/analysis
• list_functions

  List functions in the current binary

  Try:List all functions in the binaryTry:Show me 20 functions
• disasm_by_name

  Get disassembly instructions by function name

  Try:Show me disassembly for main functionTry:Display 20 instructions from function 'init'
• strings

  Extract strings from the binary

  Try:Find strings in the binaryTry:Show me 10 strings from the binary
• analyze_funcs

  Run analysis on functions in background

  Try:Analyze all functions in backgroundTry:Start function analysis
• task_status

  Check status of background analysis tasks

  Try:Check status of analyze-1 taskTry:Is the background analysis complete?
• decompile

  Decompile function at given address

  Try:Decompile function at 0x100000f00Try:Show decompiled code for main
• tool_catalog

  Search and discover available tools

  Try:Find tools for xrefsTry:Show me all available tools
• open_dsc

  Open a module from Apple's dyld_shared_cache

  Try:Open libobjc from dyld cacheTry:Load Foundation framework from DSC
• run_script

  Execute Python script in IDA database

  Try:Run analysis script.pyTry:Execute IDAPython code to list all functions
• dsc_add_dylib

  Add a dylib to an existing DSC database

  Try:Add libSystem to current DSCTry:Load another dylib into the database
• analysis_status

  Check readiness of analysis after adding components

  Try:Is the analysis ready?Try:Check if analysis is complete

Comparable tools

Installation

brew install blacktop/tap/ida-mcp

scoop bucket add blacktop https://github.com/blacktop/scoop-bucket
scoop install blacktop/ida-mcp

{
  "mcpServers": {
    "ida": {
      "command": "ida-mcp",
      "env": {
        "IDA_MCP_TOOLSETS": "core,functions,disassembly,decompile,xrefs",
        "IDA_MCP_READ_ONLY": "true"
      }
    }
  }
}

FAQ

What versions of IDA Pro are supported?

IDA Pro 9.2+ is supported. Version 9.3sp1 is recommended. The server version must match your IDA version.

Can I use this with other AI clients besides Claude?

Yes, the server supports multiple clients including Cursor, Codex CLI, and Gemini CLI. Each may require different tool filtering for optimal performance.

Is decompilation available without Hex-Rays?

No, decompilation tools require a valid Hex-Rays license and must be used with a completed analysis task.

Compare ida-mcp-rs with