No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by symgraph · MCP Server · ★ 52
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is IDAssistMCP safe to install? View the security audit →
IDAssistMCP Standalone MCP (Model Context Protocol) server plugin for IDA Pro 9.x that exposes IDA's analysis capabilities to LLM clients like Claude Desktop. Features 38 MCP tools covering binary analysis, decompilation, cross-references, symbol management, type system, navigation, and more 6 consolidated tools with // parameters for comments, variables, types, xrefs, bookmarks, and code 8 MCP resources for browsable binary metadata (triage, functions, imports, exports, strings, info, segments, sections) 7 guided prompts for common reverse engineering workflows (function analysis, vulnerability identification, documentation, data flow tracing, function comparison, struct recovery, network protocol analysis) SSE and Streamable HTTP transports via Hypercorn ASGI server Thread-safe IDB modifications via wrapper LRU analysis cache for expensive operations like decompilation Async task manager for long-running operations Pydantic configuration with environment variable support ( prefix) Installation Prerequisites IDA Pro 9.x with Python 3.10+ Hex-Rays decompiler (optional, for decompilation tools) Option 1: IDA Plugin Manager (recommended) This automatically installs the plugin and...
| Stars | 52 |
| Forks | 12 |
| Language | Python |
| Category | MCP Server |
| License | MIT |
| Quality Score | 76.5492980057906/100 |
| Open Issues | 2 |
| Last Updated | 2026-09-20 |
| Created | 2026-02-25 |
| Platforms | mcp, python |
| Est. Tokens | ~15k |
Explore other popular mcp server tools:
IDAssistMCP is Standalone MCP server plugin for IDA Pro.. It is categorized as a MCP Server with 52 GitHub stars.
IDAssistMCP is primarily written in Python. It covers topics such as ida-plugin, ida-plugins, idapro.
You can find installation instructions and usage details in the IDAssistMCP GitHub repository at github.com/symgraph/IDAssistMCP. The project has 52 stars and 12 forks, indicating an active community.
IDAssistMCP is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: