AgentDecompile

Connect AI to Ghidra

Run an MCP server that talks to your Ghidra project. Ask an agent to list functions, decompile code, rename symbols, or walk a recovery pipeline that checks compile and objdiff before it calls anything verified.

Quick start Usage guide Tool list

Analyze with agents

Point Claude, Cursor, or any MCP client at AgentDecompile. Tools read live Ghidra state — functions, xrefs, memory, decompilation — instead of guessing from file names.

Recover rebuildable C

agentdecompile-reconstruct runs a staged pipeline. Only functions that compile and match with zero objdiff differences land in verified/. Everything else stays labeled advisory.

Run your way

Stdio for desktop MCP clients. HTTP at /mcp for remote or scripted use. Optional browser UI on port 8002 when you start the server locally.

Shared Ghidra projects

Open team repositories with server credentials. Checkout, edit through MCP, check in, and reload in CodeBrowser when you need the GUI view.

Docker stdio (MCP clients)

docker run --rm -i \
  --add-host host.docker.internal:host-gateway \
  --entrypoint /ghidra/venv/bin/agentdecompile-server \
  docker.io/bolabaden/agentdecompile-mcp:latest \
  -t stdio

Local HTTP server

uv run agentdecompile-server -t streamable-http /path/to/binary
# MCP endpoint: http://127.0.0.1:8080/mcp
# Web UI (optional): http://127.0.0.1:8002/