Wraps Ghidra's reverse engineering toolkit in an MCP interface optimized for token efficiency. Exposes eight tools covering the full RE workflow: load binaries (ELF, Mach-O, PE), decompile functions, trace cross-references, search for strings or bytes, and extract metadata. Auto-detects Swift, Objective-C, and Hermes runtimes. Runs as a lightweight stdio proxy that forwards to a shared JVM backend, so multiple Claude sessions don't each spawn a 500MB process. Defaults to a "fast" analysis profile that skips slow analyzers to stay under MCP timeouts. Includes bootstrap mode for version-to-version diffing with stable synthetic labels. Reach for this when you need programmatic access to Ghidra's decompiler without managing headless scripts or parsing XML output yourself.
claude mcp add --transport stdio johnzfitch-pyghidra-lite uvx pyghidra-lite