ida-pro-mcp MCP — 사용 사례, 설치 & 라이브 데모

왜 쓰나요

핵심 기능

Full decompilation and disassembly access from AI assistants
Symbol management: rename functions/variables, declare types, set comments
Pattern search: find bytes, instructions, regex across the binary
Complete debugger control: breakpoints, stepping, register/memory access
Headless analysis support via SSE transport and idalib

라이브 데모

실제 사용 모습

ida-pro-mcp.replay ▶ 준비됨

0/0

설치

클라이언트 선택

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "ida-pro-mcp": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/mrexodia/ida-pro-mcp"
      ]
    }
  }
}

Claude Desktop → Settings → Developer → Edit Config 열기. 저장 후 앱 재시작.

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "ida-pro-mcp": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/mrexodia/ida-pro-mcp"
      ]
    }
  }
}

Cursor는 Claude Desktop과 동일한 mcpServers 스키마 사용. 프로젝트 설정이 전역보다 우선.

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "ida-pro-mcp": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/mrexodia/ida-pro-mcp"
      ]
    }
  }
}

Cline 사이드바의 MCP Servers 아이콘 클릭 후 "Edit Configuration" 선택.

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "ida-pro-mcp": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/mrexodia/ida-pro-mcp"
      ]
    }
  }
}

Claude Desktop과 같은 형식. Windsurf 재시작 후 적용.

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "ida-pro-mcp",
      "command": "TODO",
      "args": [
        "See README: https://github.com/mrexodia/ida-pro-mcp"
      ]
    }
  ]
}

Continue는 맵이 아닌 서버 오브젝트 배열 사용.

~/.config/zed/settings.json

{
  "context_servers": {
    "ida-pro-mcp": {
      "command": {
        "path": "TODO",
        "args": [
          "See README: https://github.com/mrexodia/ida-pro-mcp"
        ]
      }
    }
  }
}

context_servers에 추가. 저장 시 Zed가 핫 리로드.

claude mcp add ida-pro-mcp -- TODO 'See README: https://github.com/mrexodia/ida-pro-mcp'

한 줄 명령. claude mcp list로 확인, claude mcp remove로 제거.

사용 사례

실전 활용법: ida-pro-mcp

How to reverse engineer a binary with AI assistance in IDA Pro

👤 Reverse engineers and security researchers analyzing binaries they own or have authorization to test ⏱ ~60 min advanced

언제 쓸까: You have a binary loaded in IDA Pro and want AI to help understand and annotate it.

사전 조건

IDA Pro 8.3+ (not IDA Free) — Commercial license from Hex-Rays
ida-pro-mcp installed — pip install <repo-url> && ida-pro-mcp --install

흐름

Get an overview

List all functions in this binary. Which ones look like they handle network communication based on their names and imports?✓ 복사됨

→ Categorized function list with network-related functions highlighted
Decompile key functions

Decompile the main network handler function. Explain the protocol it implements and rename variables to be descriptive.✓ 복사됨

→ Decompiled C code with renamed variables and protocol analysis
Trace data flow

Find all cross-references to the encryption key buffer. Who reads it and who writes it?✓ 복사됨

→ Xref chain showing data flow from key generation to encryption calls

결과: A well-annotated IDB with key functions understood, renamed, and documented.

함정

Decompilation can be slow on large functions — Start with smaller callees and work up. Use disasm() for quick overviews.

함께 쓰기: filesystem

Solve a CTF reverse engineering challenge using IDA Pro and AI

👤 CTF participants working on binary reversing challenges ⏱ ~45 min intermediate

언제 쓸까: You have a CTF binary that needs static and/or dynamic analysis to find the flag.

사전 조건

IDA Pro with ida-pro-mcp — Install and connect

흐름

Find the validation logic

Search for strings containing 'flag', 'correct', 'wrong'. Decompile the functions that reference them.✓ 복사됨

→ Validation function with flag-checking logic
Debug to extract the flag

Set a breakpoint at the comparison. Run the binary with input 'AAAA' and show me what it compares against.✓ 복사됨

→ Expected flag value visible in registers or memory

결과: Flag extracted through combined static and dynamic analysis.

함정

Anti-debug tricks prevent breakpoint hits — Use find_insns to locate anti-debug checks and patch them with patch_asm

조합

다른 MCP와 조합해 10배 효율

ida-pro-mcp + filesystem

Export decompiled code and analysis notes to files

Decompile all functions related to the crypto module and save the annotated code to ~/analysis/crypto.c.✓ 복사됨

도구

이 MCP가 노출하는 것

도구	입력	언제 호출
decompile	address_or_name: str	Decompile a function to C pseudocode
disasm	address: str, count?: int	Disassemble instructions at an address
rename	old_name: str, new_name: str	Rename a function or variable
xrefs_to	address: str	Find all cross-references to an address
find_bytes	pattern: str	Search for a byte pattern in the binary
patch_asm	address: str, asm: str	Patch assembly instructions at an address
dbg_run	none	Start the debugger
set_comments	address: str, comment: str	Add a comment at an address

비용 및 제한

운영 비용

API 쿼터: N/A — local IDA Pro instance
호출당 토큰: 200–3000 tokens (decompilation output can be large)
금액: Requires IDA Pro commercial license ($). The MCP plugin itself is free.
팁: Use list_funcs to identify targets before decompiling to avoid decompiling every function.

보안

권한, 시크릿, 파급범위

자격 증명 저장: N/A — local tool

데이터 외부 송신: All analysis is local. No network calls from the MCP server.

⚠ This tool is designed for authorized security research, CTF competitions, and defensive analysis only. Do not use it against systems you don't own or have written authorization to test.
Patching binaries modifies the IDB. Use IDA's snapshot feature before making changes.
Debugger operations execute the target binary — only debug in sandboxed environments.

문제 해결

자주 발생하는 오류와 해결

ida-pro-mcp --install fails

Ensure Python 3.11+ and IDA Pro 8.3+ are installed. The installer needs to find IDA's plugin directory.

확인: python3 --version && which idat

Decompilation fails

Not all functions decompile cleanly (obfuscation, hand-written assembly). Try disasm() as a fallback.

확인: Try decompiling a simpler function first

Debugger won't start

Ensure IDA's debugger is configured for the target platform (local, remote, etc.). Check that the binary is not already running.

확인: Check IDA's debugger settings

대안

ida-pro-mcp 다른 것과 비교

대안	언제 쓰나	단점/장점
GhidrAssistMCP	You prefer free Ghidra over commercial IDA Pro	Ghidra is free but IDA Pro generally has faster analysis and wider format support
reverse-engineering-assistant	You want a Ghidra MCP with a tool-driven approach optimized for LLMs	Fewer tools but better context management for AI interaction

ida-pro-mcp

왜 쓰나요

핵심 기능

라이브 데모

실제 사용 모습

설치

클라이언트 선택

사용 사례

실전 활용법: ida-pro-mcp

How to reverse engineer a binary with AI assistance in IDA Pro

사전 조건

흐름

함정

Solve a CTF reverse engineering challenge using IDA Pro and AI

사전 조건

흐름

함정

조합

다른 MCP와 조합해 10배 효율

도구

이 MCP가 노출하는 것

비용 및 제한

운영 비용

보안

권한, 시크릿, 파급범위

문제 해결

자주 발생하는 오류와 해결

대안

ida-pro-mcp 다른 것과 비교

더 보기

리소스