# Idamesh

> A Model Context Protocol (MCP) server for IDA Pro: decompiler, disassembler, and analysis tools for MCP clients like Claude.

- **Type:** MCP server
- **Install:** `agentstack add mcp-jordanro2-idamesh`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [JordanRO2](https://agentstack.voostack.com/s/jordanro2)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [JordanRO2](https://github.com/JordanRO2)
- **Source:** https://github.com/JordanRO2/idamesh

## Install

```sh
agentstack add mcp-jordanro2-idamesh
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# idamesh

A [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server for
**IDA Pro**. It exposes IDA's disassembler and the Hex-Rays decompiler to MCP
clients (Claude and others) as tools and resources, with a supervisor that fronts
multiple databases behind one endpoint so several agents can work in parallel.

## What it does

- **Read** — decompile (Hex-Rays), disassemble, cross-references, call graphs, type
  and struct inspection, memory reads, and string / byte / text search.
- **Query** — structured filters over functions, instructions, xrefs, types, imports.
- **Analyze** — survey / triage, crypto and dangerous-API detection, vulnerability
  heuristics, stack-string reconstruction, and dataflow / taint tracing.
- **Mutate** — rename, comment, retype, define code and data, edit stack frames,
  patch bytes / assembly, bookmarks, and annotation export / import.
- **Parallelize** — open each database over a private copy so multiple agents can
  work the same binary at once, and merge their edits back into one database.

Read-only IDB state is also projected as `ida://…` MCP resources.

## Requirements

- Python **3.9+**
- A licensed **IDA Pro** install providing the `idapro` / `idalib` Python API. Point
  the `IDADIR` environment variable at your IDA installation directory.

## Install

```bash
pip install idamesh
```

Or from a clone, for development:

```bash
pip install -e .[dev]     # editable install + pytest, to run the test suite
```

This provides the `idamesh` command with three subcommands: `worker`, `supervisor`,
and `install`.

## Usage

**Headless worker** — one database on stdio (the client launches it):

```bash
idamesh worker /path/to/target.exe
```

**Supervisor** — one HTTP endpoint fronting many databases:

```bash
idamesh supervisor                       # http://127.0.0.1:8745/mcp
```

Open and close databases behind it with the `idb_open` / `idb_list` / `idb_close`
tools; route any tool to a session with an optional `database` key (omit it when a
single database is open). Opening the same binary twice yields two independent
sessions; `idb_merge` reconciles their edits.

**GUI plugin** — serve MCP over your live, open IDA database:

```bash
idamesh install     # deploy the plugin into IDA's user directory, then restart IDA
```

Run `idamesh supervisor` (or set `IDAMESH_AUTOLAUNCH_SUPERVISOR=1` to have the
plugin start one), then open a binary in IDA — the supervisor adopts the live
session and routes to it.

Both the worker (`--transport http`) and the supervisor speak MCP **Streamable
HTTP** at a single `/mcp` endpoint, loopback-bound with `Origin` validation.

## Connect from Claude Code

```bash
claude mcp add --scope user --transport http idamesh http://127.0.0.1:8745/mcp
```

Or launch a single stdio worker directly:

```bash
claude mcp add --scope user -e IDADIR=/path/to/IDA-Pro \
  idamesh -- idamesh worker /path/to/target.exe
```

## Tests

```bash
pip install -e .[dev]
python -m pytest -q
```

The live `idalib` end-to-end tests skip cleanly when IDA is unavailable (no
`IDADIR`), so the suite is green without an IDA install.

## License

[MIT](LICENSE).

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [JordanRO2](https://github.com/JordanRO2)
- **Source:** [JordanRO2/idamesh](https://github.com/JordanRO2/idamesh)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-jordanro2-idamesh
- Seller: https://agentstack.voostack.com/s/jordanro2
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.