MCP.Market

Ghidralens MCP server

by hellosverre·io.github.hellosverre/ghidralens·v0.1.1
No reviews yet

Interactive Ghidra views in your AI client: decompile, rename, and navigate a binary.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

0 stars168 downloads/wk

Reviews

Write one

Nobody has reviewed Ghidralens yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Ghidralens tools (4, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • find_strings

    Search defined string data. Usually the fastest way into an unknown

  • open_binary

    Load an executable into the Ghidra session and run auto-analysis.

  • program_info

    What is currently open: format, architecture, function count.

  • save_programwrite action

    Write renames and comments back to the Ghidra project on disk. Nothing

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan10 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 61 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Ghidralens compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,243 servers
Tools
4
the typical server has 7
Tools that change things
25%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
168
more than 72% of 12,306 servers with a package

What its tools let an agent do: 2 read · 2 create

Install Ghidralens in Claude Code, Cursor or VS Code

Runs npx -y ghidralens on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add ghidralens -- npx -y ghidralens
Add to Cursor

What the publisher says

From the Ghidralens repository's README, as published. We do not edit it. Read it on GitHub

GhidraLens

Ghidra, rendered inside your AI client. Click a symbol to rename it. Click a call to follow it.

Every Ghidra MCP server so far returns text. The model can read it; you cannot navigate it. GhidraLens returns the same analysis as an interactive view — built on MCP Apps (io.modelcontextprotocol/ui), the extension that lets a server ship real HTML into the conversation.

You and the model are looking at the same live program. Rename a variable by clicking it and the model's next decompile sees the new name.

That is a real screenshot: where.exe, decompiled by Ghidra, every identifier carrying the address it came from.

What you get

Function browser

Call graph

Ten tools total. Three open views; the rest are lookups and writes, including two the model never sees — they exist only so a click in a view can fire them.

How it fits together

MCP client  ──stdio──▶  server/  ──HTTP──▶  bridge/  ──JPype──▶  Ghidra (JVM)
  (Claude,                 TypeScript         PyGhidra            program stays
   Cursor, …)              MCP server         session             resident
       ▲
       │  ui:// HTML in a sandboxed iframe
       └──  ui/  three self-contained views

The bridge is a separate long-lived process on purpose. Ghidra's auto-analysis is the expensive step, and it happens once. Measured on a 64 KB Windows system utility (198 functions):

Restart the MCP server or the client and the analysed program is still there.

Setup

Prerequisites: Ghidra 11.3+, a JDK 21+, Python 3.9–3.13 (not 3.14 — JPype has no wheel for it yet), Node 20+. See bridge/setup.py.md — the Python side is fussy and that file covers every way it goes wrong. GhidraLens finds a JDK for you if JAVA_HOME is unset, which covers the usual "installed Java, shell has not restarted" case.

git clone https://github.com/hellosverre/ghidralens
cd ghidralens
npm install
npm run build

Then start the bridge on the binary you want to look at:

python bridge/serve.py --binary /path/to/target.exe

It prints a token. Put that, and the path to the built server, into your MCP client config:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Ghidralens: common questions

Is Ghidralens MCP server safe?
Mostly: it is graded B (75/100). Read the Ghidralens safety report
How do I install Ghidralens?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Ghidralens need an API key?
Yes. The registry entry asks for GHIDRALENS_TOKEN.
Is Ghidralens maintained?
The last commit was 67 days ago (2026-08-30). The latest release is v0.1.1.
How does Ghidralens compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,243 servers); tools 4 (the typical server has 7); tools that change things 25% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.