GhidraMCP
Hacker ApprovedRanked 2 of 9 reverse engineering tools by recommenders
Gives AI coding assistants like Claude access to Ghidra's functions, letting them label and analyze binaries much faster. Critics say its 110-tool surface adds context noise.
Gives AI coding assistants like Claude access to Ghidra's functions, letting them label and analyze binaries much faster. Critics say its 110-tool surface adds context noise.
41 people gave an opinion
- recommend it
- 30
- criticize it
- 11
- approval share
- 73%
Recommended in 10 of 13 months
- November 2025: not recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: not recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it carries the badge
- 30 people recommend itNeeds 10 or more, met.
- 2.7 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 10 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Much faster reverse engineering work
“claude code and a ghidra mcp server is better than most of the reverse engineers out there and way, way faster”
Comment from 11 Apr 2026 in “The Barrier Between Source Code and Compiled Code Has Dissolved” “It's incredible watching it do in an hour what took me literal weeks before AI.”
Comment from 14 Oct 2026 in “AI is mass decompiling games. That's both awesome and scary” “ghidra MCP has been an absolute gamechanger for helping me write tools”
Comment from 14 May 2026 in “Claude AI recovers an 11 yrs old BTC wallet holding 400k USD” - Comment from 16 Apr 2026 in “Codex Hacked a Samsung TV”
Pairs well with Claude and Codex
“with Codex CLI + Ghidra MCP for reverse engineering a game without many issues.”
Comment from 2 May 2026 in “DeepSeek V4–almost on the frontier, a fraction of the price” “It's essentially here, I've had success with gpt-5.6 and Ghidra MCP”
Comment from 24 Jul 2026 in “Claude Opus 5” “check out how Claude uses Ghidra MCP”
Comment from 17 Apr 2026 in “Cybersecurity Looks Like Proof of Work Now” - Comment from 3 May 2026 in “Metal Gear Solid 2's Source Code Has Been Leaked on 4Chan”
Extensive coverage with 110 tools
“Most complete toolset — 110+ MCP tools, 130+ REST endpoints.”
Comment from 11 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” “110 tools is impressive coverage for Ghidra.”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” “110 tools is impressive coverage.”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” Names and labels functions automatically
“It correctly identified and named MD5 functions, file IO functions, and the whole chain from a UI dialogue function.”
Comment from 30 Jul 2026 in “Kuna: Decompiler Development in the Age of Coding Agents” “claude+ghidra mcp is very good at understanding firmware, labeling functions”
Comment from 11 Feb 2026 in “The Singularity will occur on a Tuesday”
What people warn about
Each mark is one comment
Too many tools bloat context
“MCP interfaces with high amounts of tools perform much worse than MCP interfaces with fewer tools”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” “Having the description of 110 tools in your context window at all times is just noise.”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” “Tool stuffing degrades LLM tool use quality. 100+ tools is crazy.”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” - Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering”
MCP layer may be unnecessary
“could be rephrased into a pure skill and not come with all the context baggage”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” “I'm not sure you even need the MCP tbh”
Comment from 30 Jul 2026 in “Kuna: Decompiler Development in the Age of Coding Agents” Output can be sloppy or fabricated
“everything has deviated too much from the original. look a bit sloppy in places”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” “the agent fabricated as lot of code, instead for translating it from source”
Comment from 4 Feb 2026 in “Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering” Popular version crashes and badly architected
“Chrome/Ghidra MCP does have a tendency of crashing”
Comment from 29 May 2026 in “MCP Is Dead” “the popular Ghidra MCP is really badly architected”
Comment from 6 Oct 2026 in “Tapo (Rust/Python library) now speaks TP-Link's TPAP protocol”
Other reverse engineering tools people recommend
The four most recommended other reverse engineering tools, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Ghidra | 80 | 20 | 80% | 13 | — | Approved |
| GhidraMCPThis page | 30 | 11 | 73% | 10 | — | Approved |
| IDA Pro | 25 | 7 | 78% | 9 | — | Approved |
| REA Reverse-Engineer Anything | 14 | 9 | 61% | 2 | — | — |
| Binary Ninja | 13 | 5 | 72% | 5 | — | Approved |
What people said
40 of the 44 comments that mention it, newest first. Each links to the original comment.
“It's incredible watching it do in an hour what took me literal weeks before AI.”
“the popular Ghidra MCP is really badly architected”
“I'm not sure you even need the MCP tbh”
“It correctly identified and named MD5 functions, file IO functions, and the whole chain from a UI dialogue function.”
“It's essentially here, I've had success with gpt-5.6 and Ghidra MCP”
“allegedly really good for reverse engineering”
“Ghidra MCP is not a silver bullet.”
“Chrome/Ghidra MCP does have a tendency of crashing”
“it's a lot of fun exploring all this stuff with Ghidra MCP”
“ghidra MCP has been an absolute gamechanger for helping me write tools”
“they might get a lot out of a ghidra mcp”
“primarily Claude Code and Ghidra MCP”
“with Codex CLI + Ghidra MCP for reverse engineering a game without many issues.”
“check out how Claude uses Ghidra MCP”
“It makes things much easier.”
“I highly recommend hooking up a ghidra mcp”
“claude code and a ghidra mcp server is better than most of the reverse engineers out there and way, way faster”
“Good project, please remove the need for inputing the API key”
“It also pairs nicely with a Ghidra or IDA MCP setup”
“Most complete toolset — 110+ MCP tools, 130+ REST endpoints.”
“claude+ghidra mcp is very good at understanding firmware, labeling functions”
“The cross-binary documentation transfer via normalized function hashing is really compelling”
“could be rephrased into a pure skill and not come with all the context baggage”
“Tool stuffing degrades LLM tool use quality. 100+ tools is crazy.”
“I can’t express how fun straightforward it was to analyze the binary and generate a keygen.”
“110 tools. That's probably a reason why Anthropic is probably switching to sandboxed code execution over MCPs.”
“110 is a bit... much. Not complaining about the achievement”
“110 tools is impressive coverage for Ghidra.”
“110 tools is impressive coverage.”
“everything has deviated too much from the original. look a bit sloppy in places”
“Having the description of 110 tools in your context window at all times is just noise.”
“I think your installation instructions are incomplete.”
“Ive been using it (the original 15 tool version) for months now. It's amazing.”
“the agent fabricated as lot of code, instead for translating it from source”
“MCP interfaces with high amounts of tools perform much worse than MCP interfaces with fewer tools”
“The MCP surface area here (110 tools) is a great example of why tool-output validation is becoming critical.”
“it's a a huge amount of work and I now know how I'll be spending this weekend”
“All your documentation (names, types, comments) transfers automatically.”
“Check out the ghidra MCP server which is insane to see real-time”
“would of made it a lot quicker”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.