Idapromcp 333 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Idapromcp 333 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
ida-pro-mcp 是一个面向 IDA Pro 的 MCP 服务端/插件项目,用于把 IDA 分析能力暴露给 MCP 客户端(如 Cline、Roo Code、Claude Desktop 等)。
本项目基于 mrexodia/ida-pro-mcp 进行二次开发与功能扩展,聚焦于去除冗余 MCP 能力,减少上下文占用,节省 Token 开销。
在使用过程中,其实ai才是主力了,但是似乎我觉得原项目太多工具,反而拖垮。所以让克劳德先生跑了一个轻量化的(之前想做大做强,但是根本比不上人家),方便ai去读,减少上下文吧。其实我也是自己搞着玩玩,本来想着烂尾了算了,没想到师傅们这么热情,就趁着空改一改。但是还是十分推荐大家去看原项目,可能你的ai推荐到我这里了,大家多多仔细斟酌。
当前仓库包含两条运行路径:
| 路径 | 说明 |
|---|---|
server | 连接 IDA 内插件提供的 JSON-RPC 能力(常用模式,端口 13339) |
idalib_server | 基于 idalib 的无界面模式(需要本机 IDA 运行库) |
get_current_context_summaryget_selected_function_overviewsrc/ida_pro_mcp/
├── __init__.py
├── server.py # MCP 主服务(连接 IDA 插件 JSON-RPC)
├── idalib_server.py # idalib 模式 MCP 服务
├── mcp-plugin.py # IDA 侧插件(JSON-RPC 服务,基于 MCP-Test v1.6.0)
├── script_utils.py # 脚本生成辅助
├── mcp_config.json # 默认配置
└── server_generated.py # 自动生成(请勿手改)>= 3.8(兼容 IDA Pro 内置 Python 环境)>= 7.5(插件模式)>= 9.0(idapro / idalib 运行库可用)IDADIR 到有效 IDA 安装目录pip install -e .可选依赖(按需):
pip install angr frida-tools默认配置文件:src/ida_pro_mcp/mcp_config.json
{
"host": "127.0.0.1",
"port": 13339,
"script_utils_path": "script_utils.py",
"plugin": { "port": 13339, "auto_reuse": true, "auto_select_port": true },
"simple_server": { "port": 13339 },
"idalib_server": { "port": 8746 }
}配置优先级(高 → 低):
| 环境变量 | 说明 |
|---|---|
MCP_HOST | 覆盖监听地址 |
MCP_PORT | 覆盖 server.py 的 RPC 目标端口 |
IDALIB_MCP_PORT | 覆盖 idalib_server.py 端口(优先于 MCP_PORT) |
注:若缺少配置文件,server.py内置端口默认为13339(与新版插件 MCP-Test v1.6.0 一致)。
# 安装
ida-pro-mcp --install
# 卸载
ida-pro-mcp --uninstallpython -m ida_pro_mcp.server常用参数:
| 参数 | 说明 |
|---|---|
--transport | stdio(默认)或 http://127.0.0.1:8744 |
--ida-rpc | 指定 IDA 插件 RPC 地址(默认 http://127.0.0.1:13339) |
--unsafe | 启用危险工具 |
--config | 打印 MCP 客户端配置 JSON |
--auto-run-ida <binary> | 自动启动 IDA 并加载指定样本(Windows 体验更完整) |
python -m ida_pro_mcp.idalib_server <binary_path> --host 127.0.0.1 --port 8746若报错 Cannot load IDA library file idalib.dll,请检查:
IDADIR 是否指向有效 IDA 安装目录IDA 插件启动后,可对以下路径发起请求:
http://127.0.0.1:13339/mcphttp://127.0.0.1:13339/jsonrpc示例:
import json
import requests
resp = requests.post(
"http://127.0.0.1:13339/jsonrpc",
headers={"Content-Type": "application/json"},
data=json.dumps({
"jsonrpc": "2.0",
"method": "check_connection",
"params": [],
"id": 1
})
)
print(resp.json())插件可在 IDA 中通过Edit → Plugins → IDA Pro MCP Test启动,热键为Ctrl+Alt+T(macOS 下为Ctrl+Option+T)。
就是安装插件那一套,ida里面开mcp即可。这些都是给ai看的,方便它甚至不用配置json就能跑
最近一次检查结果:
| 检查项 | 状态 |
|---|---|
python -m compileall src | ✅ 通过 |
python -m ida_pro_mcp.server --help | ✅ 通过 |
python -m ida_pro_mcp.server --config | ✅ 通过 |
check_connection(端口 13339) | ✅ 通过 |
get_current_context_summary | ✅ 通过 |
get_selected_function_overview | ✅ 通过 |
| 轻量版接口验收 | ✅ 40/40 通过 |
当前仓库未包含可直接执行的单元测试集合,pytest依赖存在但需自行安装并补充测试用例。idalib_server在无 IDA 运行库环境下无法直接导入,属于预期行为。
Edit → Plugins → IDA Pro MCP Test(默认热键 Ctrl+Alt+T)mcp_config.json 端口一致性(默认 13339)mcp_config.json 中的 port / plugin.port(默认 13339)MCP_PORT / IDALIB_MCP_PORT 覆盖入口脚本:
ida-pro-mcp → ida_pro_mcp.server:mainidalib-mcp → ida_pro_mcp.idalib_server:mainserver_generated.py由server.py动态生成,不建议手工维护。
| 名称 | 联系方式 |
|---|---|
| name | QQ:1559820232 |
| grand | QQ:3527424707 |
| Britney | QQ:2855057900 |
本项目采用 MIT License 开源,任何人均可自由使用、复制、修改、合并、发布、分发、再授权或销售本软件,无需经过作者许可。
MIT License
Copyright (c) 2025 name, grand, Britney
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.