idamesh — Claude Code MCP server: what it does, how to install
Connects Hex-Rays decompiler and IDA Pro to coding assistants via MCP. Helps analyze binary targets, audit vulnerabilities, and coordinate multi-agent research.
claude mcp add --env IDADIR=<IDADIR> --transport stdio idamesh -- uvx idameshWhat idamesh does
The server exposes IDA Pro disassembly and Hex-Rays decompilation to MCP clients. It turns executable analysis data into tools and read-only ida://… resources. Models inspect memory directly. They can search text strings, examine struct layouts, and run vulnerability heuristics.
You can launch a headless worker for a single binary or run a supervisor at http://127.0.0.1:8745/mcp. The supervisor coordinates multiple databases behind one HTTP endpoint. Several agents can analyze private copies of the same binary simultaneously and reconcile their modifications with idb_merge. Running idamesh install adds a companion plugin directly into the IDA GUI.
Running the tool requires Python 3.9+ and a licensed IDA Pro installation with idalib or idapro. Without IDADIR pointing to your IDA folder, the server cannot access disassembler APIs.
What it helps with
- decompile executable routines with Hex-Rays
- locate dangerous API usage and cryptographic routines
- track taint and reconstruct stack strings
- patch assembly and rename variables directly in IDA databases
- reconcile concurrent agent edits with idb_merge
Example prompts for the agent
- Decompile the routine at
0x140001080and explain the logic. - Check for cross-references to crypto constants and show the call graph.
- Rename variable
v1tobuffer_ptrand update its type definition.
How to install idamesh
Platform CLI
claude mcp add --env IDADIR=<IDADIR> --transport stdio idamesh -- uvx idameshReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from idamesh <command>
Platform CLI
codex mcp add idamesh --env IDADIR=<IDADIR> -- uvx idameshReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from idamesh <command>
Config file
{
"mcpServers": {
"idamesh": {
"command": "uvx",
"args": [
"idamesh"
],
"env": {
"IDADIR": "<IDADIR>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from idamesh <command>
Config file
{
"servers": {
"idamesh": {
"type": "stdio",
"command": "uvx",
"args": [
"idamesh"
],
"env": {
"IDADIR": "<IDADIR>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from idamesh <command>
Platform CLI
gemini mcp add -e IDADIR=<IDADIR> idamesh uvx idameshReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from idamesh <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about idamesh
How to install idamesh in Claude Code?
Run claude mcp add --env IDADIR=<IDADIR> --transport stdio idamesh -- uvx idamesh, replacing <IDADIR> with your actual IDA Pro directory path.
What does idamesh do?
It exposes IDA Pro disassembly and Hex-Rays decompilation to MCP-compatible assistants. You can inspect structures, trace execution, and update annotations directly from the chat interface.
What are the prerequisites for idamesh?
You need Python 3.9+ and a licensed IDA Pro setup providing idalib or idapro. The IDADIR environment variable must point to your IDA directory.
