This is the TypeScript implementation of the Binary Ninja MCP bridge server. It provides a standalone MCP server that connects to a running Binary Ninja instance and exposes its capabilities through the Model Context Protocol.

• Standalone MCP Server: Run independently with any MCP client
• 50+ Tools: Full access to Binary Ninja's reverse engineering capabilities
• Easy Configuration: CLI options and environment variables for host/port
• TypeScript: Full type safety and better developer experience

npx -y binary-ninja-mcp

npm install -g binary-ninja-mcp
binary-ninja-mcp

cd bridge
npm install
npm run build

# Connect to default (localhost:9009)
npx -y binary-ninja-mcp

# Connect to custom host/port
npx -y binary-ninja-mcp --host 192.168.1.100 --port 9009

# Show help
npx -y binary-ninja-mcp --help

# Set host and port via environment
BINJA_MCP_HOST=localhost BINJA_MCP_PORT=9009 npx -y binary-ninja-mcp

Add to ~/.config/claude-desktop/claude_desktop_config.json:

{
  "mcpServers": {
    "binary-ninja-mcp": {
      "command": "npx",
      "args": ["-y", "binary-ninja-mcp", "--host", "localhost", "--port", "9009"]
    }
  }
}

Add to your Cline MCP configuration:

{
  "mcpServers": {
    "binary-ninja-mcp": {
      "command": "npx",
      "args": ["-y", "binary-ninja-mcp"]
    }
  }
}

If installed globally:

{
  "mcpServers": {
    "binary-ninja-mcp": {
      "command": "binary-ninja-mcp",
      "args": ["--host", "localhost", "--port", "9009"]
    }
  }
}

• list_methods - List all function names with pagination
• get_entry_points - List entry point(s) of the loaded binary
• search_functions_by_name - Search functions by name substring
• decompile_function - Decompile a function to C code
• get_il - Get IL (HLIL/MLIL/LLIL) for a function
• fetch_disassembly - Get assembly mnemonics for a function

• rename_function - Rename a function
• rename_single_variable - Rename a single variable
• rename_multi_variables - Batch rename multiple variables
• rename_data - Rename a data label

• set_comment - Set comment at an address
• get_comment - Get comment at an address
• delete_comment - Delete comment at an address
• set_function_comment - Set function comment
• get_function_comment - Get function comment
• delete_function_comment - Delete function comment

• define_types - Define types from C code
• list_local_types - List local types
• search_types - Search types by name
• get_user_defined_type - Get user defined type definition
• get_type_info - Get type information
• declare_c_type - Declare C type
• retype_variable - Retype a variable
• set_local_variable_type - Set local variable type

• list_data_items - List data labels
• hexdump_address - Hexdump at address
• hexdump_data - Hexdump data symbol
• get_data_decl - Get data declaration and hexdump

• get_xrefs_to - Get xrefs to address
• get_xrefs_to_field - Get xrefs to struct field
• get_xrefs_to_struct - Get xrefs to struct
• get_xrefs_to_type - Get xrefs to type
• get_xrefs_to_enum - Get xrefs to enum
• get_xrefs_to_union - Get xrefs to union

• set_function_prototype - Set function prototype
• make_function_at - Create function at address
• list_platforms - List available platforms
• patch_bytes - Patch bytes in binary

• function_at - Find function at address
• get_stack_frame_vars - Get stack frame variables
• list_classes - List classes/namespaces
• list_namespaces - List namespaces
• list_segments - List memory segments
• list_sections - List sections
• list_imports - List imports
• list_exports - List exports
• list_strings - List strings
• list_all_strings - List all strings (aggregated)
• get_binary_status - Get binary status
• list_binaries - List open binaries
• select_binary - Select active binary
• format_value - Format and annotate value
• convert_number - Convert number representations

• Node.js 18.0.0 or higher
• A running Binary Ninja instance with the MCP plugin
• MCP client (Claude Desktop, Cline, etc.)

GPL-3.0 - See LICENSE file for details.