ida-pro-mcp v1.0.0a4

IDA Pro MCP v1.0.0a4

IDA Pro MCP v1.0.0a4 provides deterministic IDA analysis with explicit, bounded Jev/custom advice and a stronger host-to-IDA security boundary.

Highlights

• Explicit host-side intelligence: Select Jev, a configured custom provider, or disabled mode. Provider-backed choices and ranking share a host advisor gate with bounded evidence cards; deterministic result order stays primary unless a caller opts in with accept_advisory=true. No implicit local, Gemini, or native-model fallback exists, and IDA child processes do not inherit provider credentials or configuration.
• Blackboard advice runs in the background: After finding changes, an optional host worker recommends finding lanes and ranks only xrefs and relations already present in stored evidence or graph snapshots. It interleaves bounded candidates and records the evidence card in Blackboard machinery, without writing findings or links.
• Architecture advice stays a hypothesis: Jev/custom suggestions do not fill inferred processor, bitness, or endianness fields and do not select an IDA processor.
• Shared response detail is part of the public contract: Every strict ida_* operation now accepts detail="triage"|"normal"|"deep"; omitting it keeps the normal budget. Truncation metadata uses _continue.fields as a descriptor list and retains the former mapping under fields_by_path.
• Safer, smaller tool surface: Binary opens report bounded lifecycle states; address handling and raw-image workflows have additional validation. The obsolete Rizin sidecar and unused firmware operations were removed; clients using ida_r2_* or ida_fw_* must update. Legacy firmware compatibility remains available. The default surface exposes 102 operations discoverable with tools/list and ida_help.

Compatibility and rollback

The 102 operation names remain unchanged. detail is optional and additive;
clients that do not send it continue to get the normal response budget. Clients
that read _continue.fields as a path map must use each descriptor's path
and read the compatibility copy from fields_by_path when needed.

ida_semantic_search and ida_next_target now accept optional
accept_advisory=true. The default is false: deterministic primary order is
preserved, while advisory_order and the evidence card are returned as
siblings. The host consumes this control; it is not passed to IDA. The shared
advisor gate caps candidate pools at 4 / 8 / 16 for detail=triage|normal|deep.

To roll back to v1.0.0a3, reinstall that version and omit the new detail
argument. The advisory snapshot uses the existing Blackboard machinery tables;
the alpha change does not migrate finding rows or change their lifecycle,
evidence, provenance, conflicts, or explicit links. Older clients can ignore
the additive accept_advisory, advisory_order, and evidence fields.

---

🚀 Instant Auto-Installation (No Manual Extraction Needed)

Linux & macOS (One-Line Install)

curl -fsSL https://github.com/GrecAndrei/ida-pro-mcp/releases/download/v1.0.0a4/install.sh | bash

Or download install.sh from this release and run ./install.sh.

Windows (One-Click Install)

Download install.bat from this release and double-click it. It auto-detects Python, configures IDA Pro, and sets up supported MCP clients.

Standalone Executable

Download ida-pro-mcp-installer-linux-x86_64 from this release, make it executable with chmod +x, and run it.

---

📦 Manual / Offline Installation

1. Download ida-pro-mcp-1.0.0a4-bundle.tar.gz or ida-pro-mcp-1.0.0a4-bundle.zip.

2. Extract the archive and run:

   python install.py --auto
   

The bundle does not include IDA Pro, proprietary files, model weights, or credentials.

---

🔒 Verification & Provenance

Verify the checksums manifest and GitHub provenance attestation:

sha256sum -c SHA256SUMS
gh attestation verify ida_pro_mcp-1.0.0a4-py3-none-any.whl --repo GrecAndrei/ida-pro-mcp

---

Links

• Official Wiki & Documentation
• Operations Reference — live discovery via tools/list and ida_help
• Safety & Mutation Policy
• Full Changelog

ida-pro-mcp v1.0.0a3

IDA Pro MCP v1.0.0a3

The third alpha release makes live operation discovery the single tool-surface
contract and adds whole-session binary diff triage for patch review.

Highlights

• Live discovery as the contract: Removed the static agent-skill and
  operation-reference snapshots that could drift from the exposed surface.
  tools/list enumerates every one of the 109 strict-schema ida_*
  operations, and ida_help returns exact arguments plus an example from the
  running server — nothing generated to go stale, and harnesses can never see
  skills for a tool set that is not exposed.
• Whole-session binary diff triage: ida_diff_sessions inventories two
  open sessions, automatically matches functions by stable symbol, normalized
  content, address, and bounded fuzzy similarity, then ranks modified pairs
  with added and removed calls, constants, unmatched functions, and scan
  coverage.
• Streamlined installer: The Codex / Claude Code / OpenCode skill phases
  and their --skills-mode, --install-skills, and --only skills options
  are removed. The installer configures runtimes, clients, shell shims, and
  signature packs; harnesses discover the surface live.
• Verified release gates: 6223 offline tests pass, plus Python 3.11/3.12
  standalone CI, CodeQL, immutable-action-pin checks, Rizin validation, and
  schema-integrity verification of the 34-tool legacy surface and the 109
  operation catalog.

---

🚀 Instant Auto-Installation (No Manual Extraction Needed)

Linux & macOS (One-Line Install)

curl -fsSL https://github.com/GrecAndrei/ida-pro-mcp/releases/download/v1.0.0a3/install.sh | bash

Or download install.sh from the release assets below and run ./install.sh.

Windows (One-Click Install)

Download install.bat from the release assets below and double-click it. It auto-detects Python, configures IDA Pro, and sets up your AI coding tools.

Standalone Executable

Download the native binary for your architecture from the release assets below (e.g. ida-pro-mcp-installer-linux-x86_64), make it executable (chmod +x), and run it directly.

---

📦 Manual / Offline Installation

If installing offline or in an air-gapped environment:

1. Download the ida-pro-mcp-1.0.0a3-bundle.tar.gz (or .zip) from the assets below.
2. Extract the archive and execute:

   python install.py --auto

The bundle does not include IDA Pro, proprietary files, model weights, or
credentials.

---

🔒 Verification & Provenance

Verify release integrity using the checksums manifest and GitHub provenance attestations:

sha256sum -c SHA256SUMS
gh attestation verify ida_pro_mcp-1.0.0a3-py3-none-any.whl --repo GrecAndrei/ida-pro-mcp

---

Links

• 📖 Official Wiki & Documentation
• 📋 Operations Reference — live discovery via tools/list and ida_help
• 🛡️ Safety & Mutation Policy
• 📝 Full Changelog

ida-pro-mcp v1.0.0a2

IDA Pro MCP v1.0.0a2

The second alpha release adds deterministic cross-session function comparison
and hardens the HTTP, testing, and native-build release paths.

Highlights

• Cross-session function comparison: Compare decompiled functions from two
  live IDA sessions with bounded unified diffs and raw/normalized similarity.
• Security-aware normalization: Suppresses IDA-generated naming and
  whitespace noise while preserving numeric constants such as bounds and masks.
• Production hardening: Rejects control characters before reflecting CORS
  origins and validates cloud endpoint hosts structurally.
• Verified release gates: 108 strict-schema operations, real IDA 9.3/9.4
  tests, Python 3.11/3.12 offline coverage, Rizin validation, and the pinned
  native backend smoke build.

---

🚀 Instant Auto-Installation (No Manual Extraction Needed)

Linux & macOS (One-Line Install)

curl -fsSL https://github.com/GrecAndrei/ida-pro-mcp/releases/download/v1.0.0a2/install.sh | bash

Or download install.sh from the release assets below and run ./install.sh.

Windows (One-Click Install)

Download install.bat from the release assets below and double-click it.

Standalone Executable

Download ida-pro-mcp-installer-linux-x86_64, make it executable with
chmod +x, and run it directly.

---

📦 Manual / Offline Installation

1. Download ida-pro-mcp-1.0.0a2-bundle.tar.gz or the .zip asset.

2. Extract it in the offline environment.

3. Run:

   python install.py --auto

The bundle does not include IDA Pro, proprietary files, model weights, or
credentials.

---

🔒 Verification & Provenance

sha256sum -c SHA256SUMS
gh attestation verify ida_pro_mcp-1.0.0a2-py3-none-any.whl --repo GrecAndrei/ida-pro-mcp

---

Links

• Official Wiki & Documentation
• Operations Reference
• Safety & Mutation Policy
• Full Changelog

ida-pro-mcp v1.0.0a1

IDA Pro MCP v1.0.0a1

The first alpha release of IDA Pro MCP connects AI coding agents directly to Hex-Rays IDA Pro for deterministic reverse engineering, decompilation, and binary analysis.

Highlights

• 107 Public Agent Operations (ida_*): Action-specific, strict-schema capabilities covering Hex-Rays decompilation, cross-references, type management, and firmware analysis.
• Dual-Engine Isolation: Headless multi-process idat engine with automatic crash recovery, alongside an in-process idalib kernel for IDA 9.3+.
• 22+ Supported Agent Environments: Built-in configuration for Cursor, Claude Code, OpenClaw, Pi Coding Agent, Hermes Agent, Prime Agent, VS Code, Codex, ZCode, Kimi Code, and MiniMax Code.
• Progressive Disclosure Skills: Standardized .agents/skills/ida-pro-mcp/ specification minimizing context window bloat.
• Automated Installer: Single-command setup with --auto and clean uninstallation with --uninstall.

---

🚀 Instant Auto-Installation (No Manual Extraction Needed)

Linux & macOS (One-Line Install)

curl -fsSL https://github.com/GrecAndrei/ida-pro-mcp/releases/download/v1.0.0a1/install.sh | bash

Or download install.sh from the release assets below and run ./install.sh.

Windows (One-Click Install)

Download install.bat from the release assets below and double-click it. It auto-detects Python, configures IDA Pro, sets up your AI coding tools, and installs skills automatically.

Linux Standalone Binary

Download ida-pro-mcp-installer-linux-x86_64 from the release assets below, run chmod +x and execute it directly.

---

Links

• 📖 Official Wiki & Guides
• 📋 Operations Reference
• 🔒 Safety & Mutation Policy