blacktop/ida-mcp-rs

What it solves

ida-mcp-rs is a headless Model Context Protocol (MCP) server that allows AI agents (like Claude Code, Cursor, or Gemini) to drive IDA Pro for reverse engineering. It eliminates the need for agents to write complex scripts for common tasks, providing them with a set of native tools for binary analysis, decompilation, and database management.

How it works

The project is a native Rust server that interfaces with IDA Pro via idalib. It exposes a suite of tools to AI agents through the MCP standard, allowing them to perform actions such as opening binaries, listing functions, decompiling code, and patching binaries. It supports multiple modes of operation, including a default single-database mode and an opt-in "workspace mode" for managing multiple databases simultaneously via HTTP.

Who it’s for

Reverse engineers and security researchers who use IDA Pro and want to leverage AI agents to automate and accelerate the analysis of binaries, particularly those targeting Apple platforms (Mach-O, dyld_shared_cache).

Highlights

• Apple Target Optimization: Specialized tools for universal Mach-O slice selection, dSYM/DWARF loading, and dyld_shared_cache module loading.
• Native Rust Performance: Built for speed and efficiency, offering a "lean" profile to reduce token costs for AI agents.
• Robust State Management: Includes save_idb checkpoints and graceful shutdown handling to prevent data loss during IDA crashes or agent disconnects.
• IDAPython Integration: A run_script tool that allows agents to execute arbitrary Python code within the open database, maintaining state between calls.
• Broad Agent Support: Ready-to-use configuration for Claude Code, Codex CLI, Gemini CLI, and Cursor.