1. Conduid
  2. Developer Tools
  3. Awesome Re MCP
MCP server · Developer Tools

Awesome Re MCP

by · github.com/crowdere/Awesome-RE-MCP

A curated list of reverse engineering tools with MCP servers

Unclaimed last commit a year ago devtools
InstallView source
46Fair

Scored 4 months ago · breakdown

About Awesome Re MCP

Awesome Re MCP is an MCP server published by crowdere in the Developer Tools category: a curated list of reverse engineering tools with MCP servers. It has been installed 0 times through Conduid.

The repository has 16 stars and 1 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx awesome-re-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Awesome Re MCP

Powered by Claude · Grounded in docs

I know everything about Awesome Re MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

Awesome

Awesome RE-MCP

A curated list of reverse engineering tools with MCP (Model Context Protocol) servers, enabling AI-assisted analysis and automation. Help us build the most comprehensive collection by contributing new tools or creating MCP servers for missing categories!

Table of Contents

Disassemblers & Decompilers

IDA Pro

  • ida-pro-mcp: Most popular implementation with 20+ tools, automated installation, and streamlined architecture for function analysis and decompilation.
  • ida-mcp-server: Python-based implementation for developers preferring Python integration.
  • mcp-server-idapro: TypeScript-based MCP server providing tools for binary analysis and script execution.
  • ida-mcp-server-plugin: IDA Pro plugin with SSE (Server-Sent Events) protocol support for real-time integration with Claude and Cursor.
  • headless-ida-mcp-server: Headless automation-focused server for CI/CD integration and batch processing.

Ghidra

  • GhidraMCP: Most comprehensive with 5.4k+ stars, featuring extensive documentation and multi-client support.
  • reverse-engineering-assistant: AI-first approach with chain-of-reasoning techniques and tool-driven analysis (ReVa).
  • ghidra-mcp: Spring Boot enterprise integration for team environments.
  • GhydraMCP: Multi-headed MCP server supporting multiple Ghidra instances.

Binary Ninja

  • binary_ninja_mcp: Seamless Claude Desktop integration with comprehensive plugin architecture.
  • binaryninja-mcp: Feature-rich implementation with "superpower" capabilities.
  • binja_mcp: Alternative community implementation.
  • binja-lattice-mcp: Security-focused with token-based authentication and encrypted communication.

Other Disassemblers

  • radare2-mcp: Official Radare2 implementation with 26+ tools via STDIO transport.
  • x64dbgMCP: Exposes 40+ x64dbg SDK tools for Windows debugging.
  • CutterMCP: Rizin-based analysis with modern GUI integration.

Debuggers

Full MCP Support

  • LLDB: ⭐ Official native MCP support as of June 2025, plus community implementations.
  • GDB MCP Server: Multiple implementations providing comprehensive debugging capabilities.

Missing Debuggers 🚨

  • WinDbg: No MCP implementation (critical gap for Windows/kernel debugging)
  • OllyDbg: Missing MCP server
  • Immunity Debugger: No MCP integration
  • rr debugger: Time-travel debugging without MCP support

Static Analysis Tools

Available

  • YaraFlux: YARA-based MCP server for malware detection and signature matching.

Missing Static Analysis Tools 🚨

  • BinDiff: No MCP server for binary diffing
  • angr: Missing symbolic execution framework integration
  • Triton: No dynamic symbolic execution support
  • Bindiff: Binary comparison without MCP

Dynamic Analysis Tools

Available

  • frida-mcp: MCP server for Frida with process management, script injection, and real-time instrumentation.

Missing Dynamic Analysis Tools 🚨

  • Intel Pin: No MCP server for dynamic binary instrumentation
  • DynamoRIO: Missing MCP integration for code coverage analysis
  • API Monitor: No MCP support for Windows API monitoring
  • Process Monitor: Missing MCP server
  • Detours: No MCP integration for Windows API hooking

Network Analysis

Excellent Coverage

  • WireMCP: Wireshark MCP server with threat detection capabilities.
  • Burp Suite MCP: Official PortSwigger implementation.
  • BurpMCP: Community extension for enhanced security testing.
  • ZAP-MCP: OWASP ZAP integration with SQLMap support.

Missing Network Tools

  • Fiddler: No MCP server for HTTP debugging
  • mitmproxy: Missing MCP integration

Android/Mobile RE Tools

Available

  • Jadx MCP Plugin: Decompiling Android apps with AI assistance.
  • jadx-mcp-server: Alternative JADX integration.
  • apktool-mcp-server: APK manipulation and analysis (part of Android RE MCP Suites).
  • Frida: Available via frida-mcp for mobile dynamic analysis.

Missing Mobile Tools 🚨

  • dex2jar: No MCP server for DEX to JAR conversion
  • objection: Missing Frida-based mobile testing integration
  • MobSF: No MCP support for Mobile Security Framework
  • APK Analyzer: Missing Android Studio integration
  • Androguard: No MCP server for Python-based Android analysis

Security Testing Tools

Available

  • mcp-for-security: Collection including SQLMap, FFUF, NMAP, Masscan and more.
  • Multiple Burp Suite implementations: See Network Analysis section.
  • OWASP ZAP: Multiple MCP servers available.

Missing Categories (Need Community Help!) 🚨

The following categories represent significant opportunities for community contribution. These tools are essential to reverse engineering workflows but currently lack MCP integration:

Packers/Unpackers

  • UPX: Universal Packer - NO MCP SERVER
  • PEiD: Packer identifier - NO MCP SERVER
  • Detect It Easy: Signature-based packer detection - NO MCP SERVER
  • ExeinfoPE: Executable analyzer - NO MCP SERVER

Malware Analysis Platforms

  • MalCat: Dynamic malware analysis - NO MCP SERVER
  • Cuckoo Sandbox: Dynamic malware analysis - NO MCP SERVER
  • CAPE: Configuration and Payload Extraction - NO MCP SERVER
  • Joe Sandbox: Commercial malware analysis - NO MCP SERVER
  • ANY.RUN: Interactive malware analysis - NO MCP SERVER
  • pestudio: Static malware analysis - NO MCP SERVER

Fuzzing Tools

  • AFL++: Advanced fuzzing framework - NO MCP SERVER
  • libFuzzer: LLVM fuzzing library - NO MCP SERVER
  • honggfuzz: Security-oriented fuzzer - NO MCP SERVER
  • Radamsa: Test case generator - NO MCP SERVER

File Format Analysis

  • ExifTool: Metadata extraction - NO MCP SERVER
  • Foremost: File carving - NO MCP SERVER
  • binwalk: Firmware analysis - NO MCP SERVER

Presentations and Tutorials

Getting Started with MCP Development

Want to create an MCP server for a missing tool? Here are resources to get started:

Learning Resources

Development Patterns

Most successful RE tool MCP servers follow these patterns:

  • Plugin + Bridge Architecture: GUI tools use a plugin that bridges to an external MCP server
  • SSE (Server-Sent Events): Preferred transport for real-time integration
  • Headless Variants: Automation-focused servers for CI/CD workflows
  • Security-First: OAuth 2.1, encrypted communication, and sandboxed execution

Example Minimal Implementation

Check out the simplest implementations in each category:

  • IDA Pro: mrexodia/ida-pro-mcp - Clean, well-documented architecture
  • Ghidra: suidpit/ghidra-mcp - Straightforward Java implementation
  • Static Analysis: ThreatFlux/YaraFlux - Simple YARA integration

Priority Development Areas

Based on community needs assessment:

  1. Fuzzing Tools: AFL++ integration would enable AI-guided fuzzing
  2. Windows Debugging: WinDbg MCP would complete debugger ecosystem
  3. Malware Sandboxes: Cuckoo/CAPE integration for automated analysis

Community & Events

Recent Developments

Follow Development

Contributing

We welcome contributions! Here's how you can help:

Add New Tools

  1. Found an MCP server we missed? Open a PR with the tool details
  2. Created your own MCP server? We'd love to feature it!
  3. Know of tools that need MCP servers? Add them to the "Missing" sections

Improve Existing Entries

  • Add implementation details (language, transport method, key features)
  • Update status information (experimental, active, production-ready)
  • Include links to documentation, tutorials, or demo videos

Create MCP Servers

Priority areas needing development:

  • Packers/Unpackers (UPX, PEiD, DIE)
  • Fuzzing Tools (AFL++, libFuzzer, honggfuzz)
  • Windows Debugging (WinDbg)
  • Malware Analysis (Cuckoo, CAPE)

Quality Guidelines

When submitting entries, please include:

  • Brief description of the tool's purpose
  • Key features and capabilities
  • Implementation status (experimental/active/production)
  • Primary transport method (SSE/STDIO/HTTP)
  • Compatible clients (Claude Desktop, Cursor, VSCode, etc.)

License

This list is released under the MIT license.

Legend: ⭐ = Well-established with multiple implementations | 🚨 = Critical gap needing community contribution

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About Awesome Re MCP

How do I install Awesome Re MCP?

Run npx awesome-re-mcp, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Awesome Re MCP safe to use with an AI agent?

Its trust score is 46 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Awesome Re MCP still maintained?

The last commit was a year ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.