AI ERP with agents inside the systems you run
AI phone and voice agents for real calls
LLM.coPrivate, self-hosted LLM deployments
Legal AI infrastructure for firms
AI RFP discovery and response drafting
Automatic.coBusiness process automation
CyberAttack.aiThreat detection and defense
Secure AI virtual data roomsida-pro-mcp
IDA Pro MCP is a Python-based bridge that connects IDA Pro reverse engineering tool with language models via the Model Context Protocol, enabling AI-assisted binary analysis. It supports multiple MCP clients and can operate in GUI or headless modes for automated reverse engineering workflows.
Key facts
Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.
| Field | Value |
|---|---|
| Repository | mrexodia/ida-pro-mcp |
| Owner | mrexodia |
| Primary language | Python |
| License | MIT — OSI-approved |
| Stars | 10k |
| Forks | 1.2k |
| Open issues | 41 |
| Latest release | 1.4.0 (2025-10-06) |
| Last updated | 2026-06-22 |
| Source | https://github.com/mrexodia/ida-pro-mcp |
What ida-pro-mcp is
Exposes IDA Pro's disassembly, decompilation, and analysis capabilities as MCP tools callable by LLM clients. Implemented in Python 3.11+, requires IDA Pro 8.3+ (not Free edition), and can run via stdio transport, HTTP SSE server, or through idalib worker processes for persistent headless sessions.
Get the ida-pro-mcp source
Clone the repository and explore it locally.
git clone https://github.com/mrexodia/ida-pro-mcp.gitcd ida-pro-mcp# follow the project's README for install & configurationNeed it deployed, integrated, or customized instead? DEV.co ships production installs.
Best use cases
Implementation considerations
- Requires Python 3.11+ and IDA Pro installation with idalib activated globally (via uv-based activation script); deployment tooling must handle binary-specific paths.
- MCP client selection is critical: Claude Code, Cline, VS Code, Cursor, and others have different transport modes (stdio, HTTP SSE); test integration thoroughly before scaling.
- LLM accuracy depends on prompt engineering; README provides two detailed prompts but users should iterate and may need supplementary tools (math-mcp) for number conversion.
- Headless idalib workers are persistent and self-managed with configurable idle TTL; requires monitoring to prevent resource exhaustion on long-running analysis farms.
- IDA GUI and headless modes can coexist; mode parameter (prefer_headless, force_gui, etc.) controls adoption of running GUI or spawning new workers—clarify expectations per workflow.
When to avoid it — and what to weigh
- You need to work with IDA Free edition — IDA Free is explicitly unsupported; requires paid IDA Pro 8.3 or higher, which is a significant cost barrier for some teams.
- Your LLM lacks strong reverse engineering domain knowledge — The tool amplifies LLM capabilities but does not replace expertise. The README warns about hallucinations; poor prompting or weak LLM RE reasoning will degrade output quality.
- You require air-gapped or offline-only analysis — Most supported MCP clients (Claude, Copilot, Gemini CLI) require internet connectivity to cloud LLM endpoints; on-premises setups require LM Studio or similar local alternatives.
- Your binary uses advanced obfuscation without preprocessing — README explicitly states LLMs perform poorly on obfuscated code; requires manual deobfuscation, string decryption, and FLIRT/Lumina resolution first—negating convenience benefits.
License & commercial use
MIT License (permissive OSI-approved). Allows unrestricted use, modification, and distribution for any purpose (commercial or proprietary) with only attribution required.
MIT License permits commercial use without restriction. However, this tool is a bridge; you must separately license IDA Pro (paid, not free), which has its own commercial terms. Verify IDA Pro's license for your intended use case. MCP client integration may also require separate licensing (e.g., Claude API, GitHub Copilot, Cursor Pro).
DEV.co evaluation signals
Editorial assessment — not user reviews. Directional, with an explicit confidence level.
| Signal | Assessment |
|---|---|
| Maintenance | Active |
| Documentation | Adequate |
| License clarity | Clear |
| Deployment complexity | Moderate |
| DEV.co fit | Good |
| Assessment confidence | High |
IDA Pro MCP acts as a local RPC gateway to IDA Pro internals. Key considerations: (1) No authentication/authorization on stdio or HTTP transports by default—restrict network exposure to trusted networks only. (2) LLM clients can invoke arbitrary MCP tools on the IDA database; audit prompt injection risks if receiving user-supplied binaries. (3) Headless workers are persistent processes; ensure proper access controls and monitoring to prevent unauthorized database access. (4) HTTPS/TLS recommended if HTTP transport used across networks. (5) IDA Pro's own security posture (plugin loading, binary parsing) is inherited. No claims made about code security audit.
Alternatives to consider
Ghidra + custom LLM integration
Ghidra is free, open-source, and scriptable; can build custom MCP server or API layer without commercial IDA Pro license. Trade-off: less mature decompilation, requires more integration work.
Binary Ninja + custom MCP/API
Commercial but cheaper than IDA Pro; has Python plugin API and active development. Can build similar LLM bridge. Trade-off: smaller ecosystem, fewer IDA-specific tools and Lumina/FLIRT integrations.
Automated malware analysis platforms (VirusTotal, ANY.RUN, Hybrid Analysis)
Pre-built sandboxes and analysis workflows without requiring local binary tooling setup. Trade-off: cloud-only, limited customization, not suitable for proprietary/sensitive binaries.
Build on ida-pro-mcp with DEV.co software developers
Integrate IDA Pro MCP with your workflow today. Choose an MCP client, set up Python 3.11+, and start analyzing binaries with LLM guidance. For enterprise-scale headless analysis, contact us to discuss deployment architecture.
Talk to DEV.coRelated open-source tools
Surfaced by semantic similarity across the DEV.co open-source index.
Related on DEV.co
Explore the category and the services that help you build with it.
ida-pro-mcp FAQ
Can I use IDA Free with this tool?
Which MCP client should I start with?
How do I run analysis on multiple binaries in parallel?
Why does the LLM produce hallucinated solutions?
From evaluation to production software
Bringing ida-pro-mcp into production usually means new services, new interfaces, and new failure modes. DEV.co is a software development agency that builds all three and stays on for the mcp servers maintenance.
Ready to supercharge your reverse engineering?
Integrate IDA Pro MCP with your workflow today. Choose an MCP client, set up Python 3.11+, and start analyzing binaries with LLM guidance. For enterprise-scale headless analysis, contact us to discuss deployment architecture.