{"passport":{"unfragile":{"@version":"1.0","version":"2026-05","artifact":{"id":"awesome-ida-pro-mcp","slug":"ida-pro-mcp","name":"IDA Pro MCP","type":"mcp","url":"https://github.com/mrexodia/ida-pro-mcp","page_url":"https://unfragile.ai/ida-pro-mcp","categories":["mcp-servers"],"tags":[],"pricing":{"model":"open_source","free":true,"starting_price":null},"status":"active","verified":false},"capabilities":[{"id":"awesome-ida-pro-mcp__cap_0","uri":"capability://tool.use.integration.ida.pro.binary.analysis.via.mcp.protocol","name":"ida pro binary analysis via mcp protocol","description":"Exposes IDA Pro's native binary analysis engine through the Model Context Protocol, allowing Claude and other LLM clients to query disassembly, control flow graphs, function metadata, and cross-references without direct IDA GUI interaction. Uses MCP's JSON-RPC transport layer to serialize IDA's C++ analysis results into structured data that LLMs can reason about and act upon.","intents":["I want Claude to analyze a binary and explain what functions do without opening IDA manually","I need to automate reverse engineering tasks by having an LLM orchestrate IDA analysis commands","I want to integrate binary analysis into an AI-powered security audit workflow"],"best_for":["security researchers automating malware analysis","reverse engineers building AI-assisted analysis pipelines","teams integrating binary analysis into LLM-driven threat intelligence workflows"],"limitations":["Requires IDA Pro license and local installation — cannot work with free IDA Freeware","MCP server must run on same machine as IDA Pro or have network access to IDA instance","Analysis depth limited by IDA's analysis capabilities; complex obfuscation may require manual intervention","No built-in caching of analysis results — each query re-executes IDA operations"],"requires":["IDA Pro 7.0+ (commercial license)","Python 3.8+ for MCP server runtime","Claude or compatible MCP client","Binary file to analyze (ELF, PE, Mach-O, etc.)"],"input_types":["binary executable paths","function addresses or names","cross-reference queries","disassembly range specifications"],"output_types":["disassembly text (x86/ARM/MIPS/etc.)","function metadata (signatures, xrefs, stack frames)","control flow graph structures","structured analysis results (JSON)"],"categories":["tool-use-integration","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_1","uri":"capability://code.generation.editing.function.disassembly.retrieval.with.context","name":"function disassembly retrieval with context","description":"Retrieves the complete disassembly of a function by address or name, including operand resolution, cross-references, and metadata like function boundaries, calling conventions, and stack frame information. Implements IDA's internal function analysis to reconstruct human-readable assembly with symbolic references resolved.","intents":["I want to get the full disassembly of a function to understand its behavior","I need to extract function signatures and calling conventions for API analysis","I want to identify all callers and callees of a specific function"],"best_for":["malware analysts examining suspicious function implementations","vulnerability researchers tracing exploit chains through function calls","reverse engineers documenting API behavior"],"limitations":["Disassembly accuracy depends on IDA's analysis quality — indirect jumps may be unresolved","Large functions (>10K instructions) may return verbose output requiring LLM summarization","Symbolic names only available if IDA has debug symbols or has performed name analysis"],"requires":["IDA Pro with binary already loaded and analyzed","Valid function address or exported function name","Sufficient IDA analysis time for complex binaries"],"input_types":["function address (hex)","function name (string)"],"output_types":["disassembly text with annotations","function metadata (JSON)","cross-reference lists"],"categories":["code-generation-editing","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_2","uri":"capability://planning.reasoning.cross.reference.graph.traversal","name":"cross-reference graph traversal","description":"Queries IDA's cross-reference database to build call graphs, data flow paths, and dependency chains between functions and data structures. Traverses xref edges (code-to-code, code-to-data, data-to-data) to identify relationships and propagate analysis context through the binary.","intents":["I want to trace all functions that call a specific API to find vulnerable code paths","I need to understand the dependency chain from an entry point to a security-critical function","I want to identify all data structures accessed by a function"],"best_for":["security auditors mapping attack surfaces","exploit developers tracing control flow to gadgets","binary analysts understanding module dependencies"],"limitations":["Indirect calls and dynamic function pointers may not be fully resolved without runtime analysis","Large binaries with thousands of functions may produce expensive graph traversals","Xref accuracy depends on IDA's analysis — obfuscated code may have incomplete references"],"requires":["IDA Pro with cross-reference analysis enabled","Starting function or data address","Traversal depth limit to prevent infinite loops"],"input_types":["source address (function or data)","traversal direction (callers/callees/data refs)","depth limit (integer)"],"output_types":["call graph (JSON/DOT format)","xref chain (list of addresses and names)","dependency tree"],"categories":["planning-reasoning","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_3","uri":"capability://code.generation.editing.decompilation.output.retrieval","name":"decompilation output retrieval","description":"Retrieves IDA's Hex-Rays decompiler output (pseudocode) for a function, translating low-level assembly into higher-level C-like code with variable recovery, type inference, and control flow reconstruction. Integrates with IDA's decompiler plugin to produce human-readable source approximations.","intents":["I want to understand what a function does without reading assembly","I need to extract variable types and data structures from decompiled code","I want Claude to reason about algorithm logic from pseudocode instead of raw instructions"],"best_for":["reverse engineers analyzing complex algorithms","security researchers identifying vulnerability patterns in pseudocode","developers documenting undocumented APIs"],"limitations":["Requires Hex-Rays decompiler license (separate from IDA Pro base license)","Decompilation quality varies by architecture and optimization level — obfuscated code produces poor pseudocode","Variable names are synthetic (e.g., 'v1', 'a2') unless debug symbols present","Some constructs (inline assembly, SIMD) may not decompile cleanly"],"requires":["IDA Pro with Hex-Rays decompiler plugin installed and licensed","Function address","Sufficient decompiler analysis time"],"input_types":["function address (hex)"],"output_types":["pseudocode (C-like syntax)","variable type annotations","control flow structure"],"categories":["code-generation-editing","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_4","uri":"capability://data.processing.analysis.binary.metadata.and.segment.extraction","name":"binary metadata and segment extraction","description":"Extracts structured metadata from the binary including segment layout, section information, entry points, imports, exports, and relocation tables. Parses PE/ELF/Mach-O headers through IDA's analysis to provide a complete binary blueprint for analysis planning.","intents":["I want to understand the binary's structure before diving into function analysis","I need to identify all exported APIs and their addresses","I want to find all imported functions and their dependencies"],"best_for":["binary auditors performing initial reconnaissance","API reverse engineers documenting library interfaces","malware analysts identifying suspicious imports"],"limitations":["Stripped binaries have no symbol information — exports/imports must be inferred","Relocatable code may have dynamic addresses that differ at runtime","Some metadata (debug info, DWARF) only available if not stripped"],"requires":["IDA Pro with binary loaded","Binary file (PE, ELF, Mach-O, etc.)"],"input_types":["binary file path"],"output_types":["segment/section list (JSON)","import/export tables","entry point addresses","relocation information"],"categories":["data-processing-analysis","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_5","uri":"capability://search.retrieval.string.and.constant.reference.discovery","name":"string and constant reference discovery","description":"Scans the binary for embedded strings, numeric constants, and data references, mapping them to their locations and associated functions. Uses IDA's string analysis to identify hardcoded values, error messages, and configuration data that may indicate functionality or vulnerabilities.","intents":["I want to find all error messages and debug strings to understand code flow","I need to identify hardcoded credentials, URLs, or API keys in the binary","I want to locate functions that reference specific strings or constants"],"best_for":["security researchers hunting for hardcoded secrets","malware analysts identifying C2 infrastructure from strings","reverse engineers using strings as anchors for function discovery"],"limitations":["Obfuscated or encrypted strings will not be detected","String encoding detection (UTF-8, UTF-16, etc.) may fail for non-standard encodings","Large binaries may have thousands of strings requiring filtering"],"requires":["IDA Pro with string analysis enabled","Binary loaded and analyzed"],"input_types":["string pattern (regex or literal)","address range (optional)"],"output_types":["string list with addresses","function references for each string","string context (surrounding code)"],"categories":["search-retrieval","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_6","uri":"capability://data.processing.analysis.type.and.structure.inference","name":"type and structure inference","description":"Queries IDA's type inference engine to recover data structure layouts, function signatures, and variable types from binary analysis. Reconstructs struct definitions, union layouts, and function prototypes based on memory access patterns and calling convention analysis.","intents":["I want to understand the data structures used by a function","I need to recover function signatures for API documentation","I want to identify struct members and their offsets"],"best_for":["reverse engineers documenting undocumented APIs","security researchers analyzing exploit payloads","developers rebuilding headers from stripped binaries"],"limitations":["Type recovery is heuristic-based — complex types may be inaccurate without debug symbols","Opaque pointers and void* casts limit type precision","Inlined functions may have incomplete type information"],"requires":["IDA Pro with type analysis enabled","Function or data address","Sufficient analysis context"],"input_types":["function address","data address"],"output_types":["function signature (C-like syntax)","struct/union definitions","type annotations"],"categories":["data-processing-analysis","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_7","uri":"capability://code.generation.editing.instruction.level.semantic.analysis","name":"instruction-level semantic analysis","description":"Provides detailed analysis of individual instructions including operand types, memory access patterns, register usage, and semantic meaning. Interprets instruction sequences to identify common patterns (prologue/epilogue, loops, conditionals) and extract control flow semantics.","intents":["I want to understand what a specific instruction sequence does","I need to identify register usage and stack frame manipulation","I want to detect common code patterns (loops, conditionals, function calls)"],"best_for":["exploit developers analyzing gadget chains","reverse engineers understanding low-level code behavior","security researchers detecting obfuscation patterns"],"limitations":["Architecture-specific — requires knowledge of target ISA (x86, ARM, MIPS, etc.)","Obfuscated code may have misleading semantics","Self-modifying code cannot be statically analyzed"],"requires":["IDA Pro with binary loaded","Instruction address or range","Target architecture support in IDA"],"input_types":["instruction address","instruction range"],"output_types":["instruction mnemonic and operands","semantic meaning (JSON)","register/memory effects"],"categories":["code-generation-editing","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_8","uri":"capability://automation.workflow.automated.analysis.task.orchestration","name":"automated analysis task orchestration","description":"Coordinates multi-step reverse engineering workflows by chaining analysis commands (disassembly → xref traversal → decompilation → type recovery) and managing IDA's analysis state. Implements task sequencing to optimize analysis order and cache intermediate results for efficiency.","intents":["I want to run a complete analysis pipeline on a binary without manual steps","I need to automate repetitive analysis tasks across multiple binaries","I want to coordinate analysis steps based on intermediate results"],"best_for":["security teams automating malware triage","researchers analyzing binary collections","CI/CD pipelines integrating binary analysis"],"limitations":["Workflow complexity limited by MCP's request/response model — no streaming for long-running tasks","IDA analysis time can be unpredictable for complex binaries","No built-in error recovery — failed steps require manual intervention"],"requires":["IDA Pro running and accessible","MCP client capable of sequential requests","Workflow definition (JSON or similar)"],"input_types":["workflow specification (JSON)","binary file path"],"output_types":["analysis results (aggregated JSON)","workflow execution log"],"categories":["automation-workflow","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0},{"id":"awesome-ida-pro-mcp__cap_9","uri":"capability://automation.workflow.patch.and.modification.tracking","name":"patch and modification tracking","description":"Tracks changes to binary analysis (renamed functions, added comments, modified types) and can export modified binaries or analysis databases. Maintains audit trails of analysis modifications for reproducibility and collaboration.","intents":["I want to document my analysis findings by annotating the binary","I need to track what analysis changes were made and by whom","I want to export analysis results for sharing with teammates"],"best_for":["collaborative reverse engineering teams","security researchers documenting findings","analysts maintaining analysis databases"],"limitations":["IDA database format is proprietary — exports require IDA's native tools","Concurrent modifications to same binary may cause conflicts","No built-in version control — requires external Git/SVN integration"],"requires":["IDA Pro with write access to database","Modification tracking enabled"],"input_types":["function name/address","comment text","type annotation"],"output_types":["modified IDA database","export formats (JSON, XML, etc.)"],"categories":["automation-workflow","reverse-engineering"],"confidence":0.5,"matches":0,"success_rate":0}],"trust":{"score":27,"verified":false,"data_access_risk":"high","permissions":["IDA Pro 7.0+ (commercial license)","Python 3.8+ for MCP server runtime","Claude or compatible MCP client","Binary file to analyze (ELF, PE, Mach-O, etc.)","IDA Pro with binary already loaded and analyzed","Valid function address or exported function name","Sufficient IDA analysis time for complex binaries","IDA Pro with cross-reference analysis enabled","Starting function or data address","Traversal depth limit to prevent infinite loops"],"failure_modes":["Requires IDA Pro license and local installation — cannot work with free IDA Freeware","MCP server must run on same machine as IDA Pro or have network access to IDA instance","Analysis depth limited by IDA's analysis capabilities; complex obfuscation may require manual intervention","No built-in caching of analysis results — each query re-executes IDA operations","Disassembly accuracy depends on IDA's analysis quality — indirect jumps may be unresolved","Large functions (>10K instructions) may return verbose output requiring LLM summarization","Symbolic names only available if IDA has debug symbols or has performed name analysis","Indirect calls and dynamic function pointers may not be fully resolved without runtime analysis","Large binaries with thousands of functions may produce expensive graph traversals","Xref accuracy depends on IDA's analysis — obfuscated code may have incomplete references","builder identity is not verified yet","no observed match outcomes yet"],"rank_breakdown":{"adoption":0.05,"quality":0.3,"ecosystem":0.39999999999999997,"match_graph":0.25,"freshness":0.52,"weights":{"adoption":0.25,"quality":0.25,"ecosystem":0.15,"match_graph":0.23,"freshness":0.12}},"observed_outcomes":{"matches":0,"success_rate":0,"avg_confidence":0,"top_intents":[],"last_matched_at":null},"maintenance":{"status":"active","updated_at":"2026-06-17T09:51:03.041Z","last_scraped_at":"2026-05-03T14:00:15.503Z","last_commit":null},"community":{"stars":null,"forks":null,"weekly_downloads":null,"model_downloads":null,"model_likes":null}},"distribution":{"claim_url":"https://unfragile.ai/submit?claim=ida-pro-mcp","compare_url":"https://unfragile.ai/compare?artifact=ida-pro-mcp"}},"signature":"IlCBzE0jGKDOhg9FqON/xZy98I0ECOxsSciFub84Tnh3gtea1OYDuFbOJ7KI+Q9aWjNrfgTnxpcm+X9hloNfAA==","signedAt":"2026-06-21T03:01:37.248Z","signedBy":"unfragile.ai","version":1},"_links":{"self":"https://unfragile.ai/api/v1/passport/ida-pro-mcp","artifact":"https://unfragile.ai/ida-pro-mcp","verify":"https://unfragile.ai/api/v1/verify?slug=ida-pro-mcp","publicKey":"https://unfragile.ai/api/v1/trust-passport-public-key","spec":"https://unfragile.ai/trust","schema":"https://unfragile.ai/schema.json","docs":"https://unfragile.ai/docs"}}