Content
[](https://www.apache.org/licenses/LICENSE-2.0)
# PcmHackMCP
PcmHackMCP is a fork of [LaurieWired/GhidraMCP](https://github.com/LaurieWired/GhidraMCP) (Apache-2.0): a Model Context Protocol (MCP) server plus Ghidra plugin that lets MCP clients (Claude, etc.) drive Ghidra for reverse engineering.
It keeps all of the upstream tools and adds one thing: a **server-side `run_python` tool** that executes an arbitrary Jython script inside Ghidra in a single call. Bulk work - mass renames, xref sweeps, batch comments, applying data types over many addresses - runs as one loop inside Ghidra instead of thousands of individual MCP/HTTP round-trips. Only the printed result crosses the wire.
To run alongside the original GhidraMCP without clashing, every identifier is renamed and the default port is changed:
| | Upstream GhidraMCP | PcmHackMCP |
|---|---|---|
| MCP server name | `ghidra-mcp` | `pcmhack-mcp` |
| Ghidra module / extension | `GhidraMCP` | `PcmHackMCP` |
| Java class | `com.lauriewired.GhidraMCPPlugin` | `com.pcmhack.mcp.PcmHackMCPPlugin` |
| Default HTTP port | 8080 | 8765 |
| MCP bridge script | `bridge_mcp_ghidra.py` | `bridge_mcp_pcmhack.py` |
## Features
- Everything in upstream GhidraMCP (decompile, list/rename functions and data, imports/exports, xrefs, strings, set prototypes, and more).
- `run_python(code, timeout=600)` - run an arbitrary Jython script server-side against the current program. Full GhidraScript environment is available (`currentProgram`, the flat API, `monitor`); a program transaction is opened and committed automatically; both `print(...)` and `println(...)` output is captured and returned.
## Install
### Prerequisites
- Ghidra 11.3.2
- Python 3.10+ and the MCP SDK: `pip install "mcp>=1.2.0,<2" "requests>=2,<3"`
### Ghidra plugin
1. Run Ghidra
2. `File` -> `Install Extensions`
3. Click `+` and select `PcmHackMCP-11.3.2.zip`
4. Restart Ghidra
5. Enable **PcmHackMCP** in `File` -> `Configure` -> `Developer`
6. Optional: change the port in `Edit` -> `Tool Options` -> `PcmHackMCP HTTP Server` (default 8765)
### MCP client (Claude Desktop example)
`Claude` -> `Settings` -> `Developer` -> `Edit Config`, then:
```json
{
"mcpServers": {
"pcmhack": {
"command": "py",
"args": [
"-3",
"C:\\ABSOLUTE_PATH_TO\\bridge_mcp_pcmhack.py",
"--ghidra-server",
"http://127.0.0.1:8765/"
]
}
}
}
```
Host/port default to `127.0.0.1:8765` if not set.
### Claude Code
```
claude mcp add pcmhack -- py -3 "C:\ABSOLUTE_PATH_TO\bridge_mcp_pcmhack.py"
```
## run_python example
```
curl -s -X POST http://127.0.0.1:8765/run_python --data-binary @- <<'PY'
count = 0
for f in currentProgram.getFunctionManager().getFunctions(True):
if f.getName().startswith("FUN_"):
count += 1
print("auto-named functions:", count)
PY
```
The script runs inside Ghidra and returns its printed output.
> Security: the embedded HTTP server binds to all interfaces and `run_python` executes arbitrary code in your Ghidra session. Run it only on a trusted network.
## Claude Code skill
A Claude Code skill ships with this repo at [`.claude/skills/pcmhack-mcp/SKILL.md`](.claude/skills/pcmhack-mcp/SKILL.md). It captures the discipline for writing good `run_python` payloads: the whole-script model, printing results as JSON, the automatic (commit-on-error) transaction, and the Jython 2.7 traps that bite. It loads automatically when you work with `run_python`.
## Build from source
No Maven required (it is a single source file). With JDK 17-21:
1. Copy these jars from your Ghidra install into `lib/`:
- `Base.jar`, `Decompiler.jar`, `Docking.jar`, `Generic.jar`, `Project.jar`, `SoftwareModeling.jar`, `Utility.jar`, `Gui.jar`
2. Compile and package:
```
javac --release 17 -cp "lib/*" -d build/classes src/main/java/com/pcmhack/mcp/PcmHackMCPPlugin.java
jar --create --file target/PcmHackMCP.jar --manifest src/main/resources/META-INF/MANIFEST.MF -C build/classes .
```
3. Stage an extension folder `target/ext/PcmHackMCP/` containing `extension.properties`, `Module.manifest`, and `lib/PcmHackMCP.jar`, then zip it **with the `jar` tool**:
```
jar --create --file target/PcmHackMCP-11.3.2.zip -C target/ext PcmHackMCP
```
Do not zip it with PowerShell `Compress-Archive` or .NET `ZipFile.CreateFromDirectory` - on Windows PowerShell 5.1 both write **backslash** zip entry paths, which Ghidra's installer rejects ("Unexpected error installing extension"). The `jar` tool writes forward-slash paths and directory entries, which Ghidra accepts.
Or, if you have Maven installed: `mvn clean package assembly:single`.
## Credits
Fork of [GhidraMCP](https://github.com/LaurieWired/GhidraMCP) by LaurieWired. Licensed under Apache-2.0; see [LICENSE](LICENSE).
