AwesomeREA.org

Integration

IDA Pro MCP Server (fdrechsler)

An IDA Pro plugin and a TypeScript MCP server by Florian Drechsler: the plugin starts an HTTP server inside IDA on 127.0.0.1:9045, and the stdio MCP server forwards agent requests to it. Its twelve tools run IDAPython scripts passed inline or by file path, list functions, exports and strings, search names, immediate values and byte sequences, return cross-references to and from an address, and disassemble address ranges. It is a separate codebase from the mrexodia and Hex-Rays IDA MCP servers listed here.

Targets
Binary
Category
Independent MCP integrations
Relationship
Independent agent integration
Sources reviewed

Requirements & limits

  • Dormant: its six commits date from 2025-03-24 to 2025-03-26, with no tags, releases or npm package, so this entry pins the last main commit. The README asks for IDA Pro 8.3 or later, Node.js 18+ and TypeScript; the MCP server is built from a clone with npm install and npm run build, and ida_remote_server.py is copied into IDA's plugins directory, where it starts its server when IDA loads. MCP clients launch the built dist/index.js over stdio.
  • IDA Pro is commercial software installed separately, and the tools act on whatever database the analyst has open; the repository holds only source files and a screenshot. The README documents eight of the twelve tools and an npm test command, but package.json defines no test script and the project has no tests. At the pinned commit index.ts imports llamaindex, which package.json does not declare, and the search_text tool queries a MongoDB strings collection at localhost:27017 instead of IDA, with its IDA call commented out.
  • Script tools run arbitrary IDAPython inside IDA, and while a script runs the plugin overrides IDA's prompt functions so that dialogs are auto-confirmed or suppressed. The HTTP server has no authentication: the README's security note relies on the localhost-only default bind and warns about the implications of changing DEFAULT_HOST.
  • The LICENSE file and README state MIT, while package.json declares ISC. IDA Pro, MCP clients and analysed binaries keep their own terms. This record reviewed source only and ran neither component; the reviewed sources establish no REA connection.

About this entry

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014
  2. index.ts#L1-L24 GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014
  3. index.ts#L200-L424 GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014
  4. index.ts#L510-L564 GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014
  5. ida_remote_server.py#L267-L380 GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014
  6. ida_remote_server.py#L1308-L1335 GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014
  7. package.json GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014
  8. LICENSE GitHub · fdrechsler/mcp-server-idapro · Revision 6f96014

More in Agents and MCP

All 57 entries in Agents and MCP