Vibe reversing: giving your IDA Pro disassembly an AI intern

What it does

IDA Pro MCP is a protocol bridge that turns IDA Pro into an MCP server, letting language-model agents read decompilation, cross-references, types, and metadata from an open database. Instead of copy-pasting assembly into a chat window, the agent calls structured tools like lookup_funcs and int_convert to inspect the binary interactively. It supports both a headless idalib-mcp mode and a legacy GUI plugin, though the latter is on its way out.

The interesting bit

The headless supervisor keeps each database in a separate worker process and can dynamically open or close arbitrary files over the server’s lifetime. If a database is already loaded in a GUI IDA instance, the server routes requests there rather than spawning a duplicate worker; if that GUI disappears, it silently falls back to a headless worker. That makes it feel less like a bolt-on script and more like a shared backplane for AI-assisted reversing.

Key highlights

• Broad client support: works with Claude, Cursor, VS Code, Codex, and many other MCP clients via stdio, SSE, or HTTP transports.
• Structured MCP resources expose IDB metadata, segments, imports, exports, structs, and cross-references as browsable URLs like ida://idb/segments.
• Session-aware multi-binary handling: open and switch between several databases via idalib_open and idalib_switch without restarting the server.
• Optional --isolated-contexts prevents multiple AI agents from accidentally clobbering each other’s default database binding.
• The README ships with battle-tested prompt templates to curb LLM hallucinations during decompilation and variable renaming.

Caveats

• Requires a paid IDA Pro license (8.3+, version 9 recommended); IDA Free is explicitly unsupported.
• The old GUI plugin is deprecated and slated for removal, so new users must adopt the headless idalib workflow.
• The authors warn that LLMs still struggle with obfuscated code—control-flow flattening, string encryption, and import hashing need manual cleanup before the agent can reason accurately.

Verdict

This is for reverse engineers who already own IDA Pro and want to speed up grunt work—renaming functions, annotating types, and triaging crackmes—with an LLM copilot. If you rely on IDA Free or hope AI will unwrap heavily obfuscated malware without preprocessing, this bridge won’t help.