iida-mcp-ida-integration

Expose IDA Pro static analysis as MCP tools over HTTP.

7|2|Updated May 16, 2026

Search Tags:#static analysis #reverse engineering #binary analysis #decompilation #mcp tools #ida pro #kernel memory

Ready to run

npx skills add https://github.com/Aradotso/mcp-skills --skill iida-mcp-ida-integration

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: iida-mcp-ida-integration
Source: https://github.com/Aradotso/mcp-skills/tree/main/skills/iida-mcp-ida-integration
Command: npx skills add https://github.com/Aradotso/mcp-skills --skill iida-mcp-ida-integration

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

iida-mcp-ida-integration removes the friction of using IDA Pro’s GUI-only workflows by exposing static analysis actions as MCP tools you can call programmatically.

Core Features & Use Cases

MCP-enabled IDA static analysis: access function listing, disassembly, decompilation (Hex-Rays), cross-references, CFG, and byte/text searches through an MCP server.
Multi-IDB / multi-instance routing: automatically route tool requests to the correct open IDA instance and analyzed file database.
Optional kernel analysis (Windows): for supported setups, read kernel memory and map IDA addresses to runtime addresses for deeper reverse-engineering workflows.

Quick Start

Connect your MCP client to the local server endpoint at http://127.0.0.1:13897/mcp, then ask for a function’s disassembly and decompiled pseudocode for a known address in your currently opened IDA database.

Frequently Asked Questions about iida-mcp-ida-integration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate IDA Pro static analysis without using the GUI?▼

You can automate IDA Pro static analysis by running an MCP plugin that exposes function listings, disassembly, and decompilation as HTTP tools, allowing programmatic queries instead of manual GUI operations.

Can I get Hex-Rays decompilation output through an MCP server?▼

Yes, the MCP server exposes Hex-Rays decompilation capabilities as tools, enabling you to request decompiled pseudocode for specific addresses directly from your MCP client over a local HTTP endpoint.

How do I route MCP tool requests to multiple open IDA databases?▼

Multi-instance routing automatically directs MCP tool requests to the correct open IDA instance and analyzed file database, ensuring file-scoped requests reach the appropriate IDB without manual switching.

Does this IDA MCP integration support Windows kernel memory analysis?▼

Yes, supported setups can read Windows kernel memory and map IDA addresses to runtime addresses, requiring an optional Windows kernel driver for deeper reverse-engineering workflows.

What do I need to use IDA Pro MCP tools for reverse engineering?▼

You need IDA Pro with the MCP plugin running locally, and optionally Hex-Rays and Capstone for decompilation and disassembly workflows on x86/x86-64 binaries.