Ghidralens MCP server
Interactive Ghidra views in your AI client: decompile, rename, and navigate a binary.
0 stars78 downloads/wk
Reviews
Write oneNobody has reviewed Ghidralens yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Ghidralens tools (4, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
find_stringsSearch defined string data. Usually the fastest way into an unknown
open_binaryLoad an executable into the Ghidra session and run auto-analysis.
program_infoWhat is currently open: format, architecture, function count.
save_programwrite actionWrite renames and comments back to the Ghidra project on disk. Nothing
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- Code scan10 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 21 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
Install directly
Runs npx -y ghidralens on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add ghidralens -- npx -y ghidralens
Ghidralens: common questions
- Is Ghidralens MCP server safe?
- Mostly: it is graded B (80/100). Read the Ghidralens safety report
- How do I install Ghidralens?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Ghidralens need an API key?
- Yes. The registry entry asks for
GHIDRALENS_TOKEN. - Is Ghidralens maintained?
- The last commit was 22 days ago (2026-08-30). The latest release is v0.1.1.