PcmHackMCP

PcmHackMCP is a fork of LaurieWired/GhidraMCP (Apache-2.0): a Model Context Protocol (MCP) server plus Ghidra plugin that lets MCP clients (Claude, etc.) drive Ghidra for reverse engineering.

It keeps all of the upstream tools and adds one thing: a server-side run_python tool that executes an arbitrary Jython script inside Ghidra in a single call. Bulk work - mass renames, xref sweeps, batch comments, applying data types over many addresses - runs as one loop inside Ghidra instead of thousands of individual MCP/HTTP round-trips. Only the printed result crosses the wire.

To run alongside the original GhidraMCP without clashing, every identifier is renamed and the default port is changed:

	Upstream GhidraMCP	PcmHackMCP
MCP server name	ghidra-mcp	pcmhack-mcp
Ghidra module / extension	GhidraMCP	PcmHackMCP
Java class	com.lauriewired.GhidraMCPPlugin	com.pcmhack.mcp.PcmHackMCPPlugin
Default HTTP port	8080	8765
MCP bridge script	bridge_mcp_ghidra.py	bridge_mcp_pcmhack.py

Features

• Everything in upstream GhidraMCP (decompile, list/rename functions and data, imports/exports, xrefs, strings, set prototypes, and more).
• run_python(code, timeout=600) - run an arbitrary Jython script server-side against the current program. Full GhidraScript environment is available (currentProgram, the flat API, monitor); a program transaction is opened and committed automatically; both print(...) and println(...) output is captured and returned.

Install

Prerequisites

• Ghidra 11.3.2
• Python 3.10+ and the MCP SDK: pip install "mcp>=1.2.0,<2" "requests>=2,<3"

Ghidra plugin

1. Run Ghidra
2. File -> Install Extensions
3. Click + and select PcmHackMCP-11.3.2.zip
4. Restart Ghidra
5. Enable PcmHackMCP in File -> Configure -> Developer
6. Optional: change the port in Edit -> Tool Options -> PcmHackMCP HTTP Server (default 8765)

MCP client (Claude Desktop example)

Claude -> Settings -> Developer -> Edit Config, then:

{
  "mcpServers": {
    "pcmhack": {
      "command": "py",
      "args": [
        "-3",
        "C:\\ABSOLUTE_PATH_TO\\bridge_mcp_pcmhack.py",
        "--ghidra-server",
        "http://127.0.0.1:8765/"
      ]
    }
  }
}

Host/port default to 127.0.0.1:8765 if not set.

Claude Code

claude mcp add pcmhack -- py -3 "C:\ABSOLUTE_PATH_TO\bridge_mcp_pcmhack.py"

run_python example

curl -s -X POST http://127.0.0.1:8765/run_python --data-binary @- <<'PY'
count = 0
for f in currentProgram.getFunctionManager().getFunctions(True):
    if f.getName().startswith("FUN_"):
        count += 1
print("auto-named functions:", count)
PY

The script runs inside Ghidra and returns its printed output.

Security: the embedded HTTP server binds to all interfaces and run_python executes arbitrary code in your Ghidra session. Run it only on a trusted network.

Claude Code skill

A Claude Code skill ships with this repo at .claude/skills/pcmhack-mcp/SKILL.md. It captures the discipline for writing good run_python payloads: the whole-script model, printing results as JSON, the automatic (commit-on-error) transaction, and the Jython 2.7 traps that bite. It loads automatically when you work with run_python.

Build from source

No Maven required (it is a single source file). With JDK 17-21:

1. Copy these jars from your Ghidra install into lib/:
   • Base.jar, Decompiler.jar, Docking.jar, Generic.jar, Project.jar, SoftwareModeling.jar, Utility.jar, Gui.jar
2. Compile and package:

   javac --release 17 -cp "lib/*" -d build/classes src/main/java/com/pcmhack/mcp/PcmHackMCPPlugin.java
   jar --create --file target/PcmHackMCP.jar --manifest src/main/resources/META-INF/MANIFEST.MF -C build/classes .
   

3. Stage an extension folder target/ext/PcmHackMCP/ containing extension.properties, Module.manifest, and lib/PcmHackMCP.jar, then zip it with the jar tool:

   jar --create --file target/PcmHackMCP-11.3.2.zip -C target/ext PcmHackMCP
   

   Do not zip it with PowerShell Compress-Archive or .NET ZipFile.CreateFromDirectory - on Windows PowerShell 5.1 both write backslash zip entry paths, which Ghidra's installer rejects ("Unexpected error installing extension"). The jar tool writes forward-slash paths and directory entries, which Ghidra accepts.

Or, if you have Maven installed: mvn clean package assembly:single.

Credits

Fork of GhidraMCP by LaurieWired. Licensed under Apache-2.0; see LICENSE.