blacktop/ida-mcp-rs

What it solves

ida-mcp-rs provides a way for AI agents (like Claude Code, Cursor, or Gemini) to interact with IDA Pro, a professional reverse engineering tool. It allows an AI to perform complex binary analysis tasks—such as decompiling code, listing functions, and running scripts—without the user having to manually perform these actions in the IDA GUI.

How it works

The project implements a Model Context Protocol (MCP) server that links against IDA Pro's libraries. It acts as a bridge between an AI agent and a headless IDA Pro instance. The server can be configured to run via standard input/output (stdio) or as an HTTP/SSE worker pool for multi-client support.

It exposes a wide range of tools to the AI, including:

• Binary Management: Opening databases (.idb) and Apple's dyld_shared_cache modules.
• Analysis: Listing functions, disassembly, and decompilation (via Hex-Rays).
• Scripting: Executing arbitrary IDAPython code within the open database.
• Metadata: Querying and applying Lumina metadata.

Who it’s for

Reverse engineers and security researchers who use IDA Pro and want to leverage LLMs to automate the analysis of binaries, malware, or system libraries.

Highlights

• Extensive Toolset: Provides 73 different tools for the AI to navigate and analyze binaries.
• Headless Operation: Works without the IDA GUI, making it suitable for AI agent integration.
• ** uma Apple's dyld_shared_cache**: Native support for loading and analyzing Apple system modules.
• IDAPython Integration: Allows AI agents to run custom Python scripts for deep analysis.
• Flexible Deployment: Supports multiple platforms (macOS, Linux, Windows) and various transport methods (stdio, HTTP/SSE).
• Context Optimization: Includes flags to filter the toolset to reduce token usage in AI prompts.