ida-pro-mcp配置

发表于 分类于 本文字数： 1.1k

我去，好混乱

总结一下现在就是ida-pro-mcp+VSCode的Roo Code/Cherry Studio

Intro

参考

Cherry Studio方案以及ida-pro-mcp安装流程：https://www.cnblogs.com/alexander17/p/19089720

Roo Code方案以及启动流程：https://blog.dinlon5566.com/2025/09/15/IDA-MCP%E5%AE%89%E8%A3%9D%E8%88%87%E4%BD%BF%E7%94%A8%E6%95%99%E5%AD%B8/

mcp介绍

引用：https://blog.swizzer.cc/blog/sharpen-your-reverse-engineering-blade-with-ida-mcp/#%E4%BD%95%E4%B8%BAmcp

image-20260110105501177

模型上下文协议（Model Context Protocol, MCP） 是由 Anthropic 于 2024 年 11 月推出的开放协议，用于连接大型语言模型（LLM）与外部系统，包括工具、数据源、资源等。

安装

VSCode扩展-Roo Code

安装Roo Code之后重启VSCode，左边侧栏打开Roo Vode，注册账号并且添加模型之后点开设置

以及发现商店里有这个

image-20260110150907794

ida-pro-mcp

项目地址：https://github.com/mrexodia/ida-pro-mcp

注意要使用IDA的python而不是系统的python。指定ida python路径和安装路径

1
"IDA Professional 9.2\python311\python.exe" -m pip install --upgrade --target="D:\你的目标路径" git+https://github.com/mrexodia/ida-pro-mcp

安装，生成默认配置文件。需要指定ida-pro-mcp.exe的路径

1
2
"D:\CTF\reverse\IDA Professional 9.1\python311\Scripts\ida-pro-mcp.exe" --install
"D:\CTF\reverse\IDA Professional 9.1\python311\Scripts\ida-pro-mcp.exe" --config

image-20260110153210199

记一下配置

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
[HTTP MCP CONFIGURATION]
{
  "mcpServers": {
    "ida-pro-mcp": {
      "type": "http",
      "url": "http://127.0.0.1:13345/mcp"
    }
  }
}

[STDIO MCP CONFIGURATION]
{
  "mcpServers": {
    "ida-pro-mcp": {
      "command": "D:\\CTFTools\\IDA Professional 9.2\\python311\\python.exe",
      "args": [
        "D:\\CTFTools\\IDA Professional 9.2\\python311\\Lib\\site-packages\\ida_pro_mcp\\server.py",
        "--ida-rpc",
        "http://127.0.0.1:13345"
      ]
    }
  }
}

VSCode的相关配置更新到了User\settings.json用户配置文件里

打开VSCode时提示不应该在用户配置里，更改到专用配置，我点了是，然后配置就转移过来了。嘻嘻，好用。mcp.json：

image-20260110135529149

或者也可以手动贴过来

启动

启动IDA MCP Server

很重要，需要先用IDA打开目标，启动Edit > Plugins > MCP

image-20260110141247944

下面能看到输出

image-20260110143154534

配置Roo Code

（这一步也可以叫Roo Code自己来配，据说）

之前安装ida-pro-mcp的时候还没有安装Roo Code，所以没配置。得手动把配置贴进Roo Code的mcp配置文件里，是这个文件

image-20260110160543021

配置完了尝试连接，但是总报错

image-20260110151310631

尝试重装ida-pro-mcp

1
"D:\CTFTools\IDA Professional 9.2\python311\python.exe" -m pip uninstall ida-pro-mcp

确认一下文件都删干净了，然后再装。也还是不行

最后把command的路径改成了单正斜杠，好了

image-20260110161351018

ok了

image-20260110161315068

或者使用Cherry Studio

Cherry Studio 官方网站 - 全能的 AI 助手

安装之后打开。在设置里选择模型服务。都需要申请API key

点击mcp服务器，添加配置-从JSON导入。将前面生成的mcp配置文件里的内容粘贴过来，注意的一点是服务得改成”mcpServers”：

1
2
3
4
5
6
7
8
9
10
11
12
{
	"mcpServers": {
		"ida-pro-mcp": {
			"command": "D:\\CTFTools\\IDA Professional 9.2\\python311\\python.exe",
			"args": [
				
			],
			"type": "stdio"
		}
	},
	"inputs": []
}

然后启动服务

回到cherry studio首页，点击这个小锤子选择mcp服务器

image-20260110154016450

可以用了

image-20260110153956530

promt

https://github.com/mrexodia/ida-pro-mcp/blob/main/README.md

1
2
3
4
5
6
7
8
9
10
11
Your task is to analyze a crackme in IDA Pro. You can use the MCP tools to retrieve information. In general use the following strategy:

- Inspect the decompilation and add comments with your findings
- Rename variables to more sensible names
- Change the variable and argument types if necessary (especially pointer and array types)
- Change function names to be more descriptive
- If more details are necessary, disassemble the function and add comments with your findings
- NEVER convert number bases yourself. Use the `int_convert` MCP tool if needed!
- Do not attempt brute forcing, derive any solutions purely from the disassembly and simple python scripts
- Create a report.md with your findings and steps taken at the end
- When you find a solution, prompt to user for feedback with the password you found
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
Your task is to create a complete and comprehensive reverse engineering analysis. Reference AGENTS.md to understand the project goals and ensure the analysis serves our purposes.

Use the following systematic methodology:

1. **Decompilation Analysis**
   - Thoroughly inspect the decompiler output
   - Add detailed comments documenting your findings
   - Focus on understanding the actual functionality and purpose of each component (do not rely on old, incorrect comments)

2. **Improve Readability in the Database**
   - Rename variables to sensible, descriptive names
   - Correct variable and argument types where necessary (especially pointers and array types)
   - Update function names to be descriptive of their actual purpose

3. **Deep Dive When Needed**
   - If more details are necessary, examine the disassembly and add comments with findings
   - Document any low-level behaviors that aren't clear from the decompilation alone
   - Use sub-agents to perform detailed analysis

4. **Important Constraints**
   - NEVER convert number bases yourself - use the int_convert MCP tool if needed
   - Use MCP tools to retrieve information as necessary
   - Derive all conclusions from actual analysis, not assumptions

5. **Documentation**
   - Produce comprehensive RE/*.md files with your findings
   - Document the steps taken and methodology used
   - When asked by the user, ensure accuracy over previous analysis file
   - Organize findings in a way that serves the project goals outlined in AGENTS.md or CLAUDE.md