Guild Wars Ghidra MCP
Use the ghidra MCP tools for read-only reverse engineering against a recent Gw.exe.
Connect
At the start of each session:
- Call
ghidra_connect_instancewith{ "project": "gw" }before any other Ghidra tool. - Call
ghidra_load_tool_groupwith{ "group": "xref" }to enable decompilation, cross-references, and call graphs. - Call
ghidra_list_open_programsand reuse the loadedGw.<build>.exeprogram. If none is loaded, ask the user to upload a.gzf.
Constraints
list_instancesreturns both a local TCP instance andghidra.gwtoolbox.com:13100. Use only the local TCP instance. The upstream repository entry is not MCP-routable and normally reportsconnected: false.- Keep all analysis read-only. The program is loaded in memory at
/Untitled, outside a Ghidra project, so mutations fail or disappear on reload. - Do not import files.
import_filerequires Ghidra GUI mode;load_programis the headless equivalent for raw.exeand.gzffiles. - Report findings in the response, issue, or pull request. Do not attempt to save them to Ghidra Server.
Useful Operations
- Use
ghidra_search_functionsto find demangled function names. - Use
ghidra_search_strings, thenghidra_get_xrefs_to, to find code referencing a string. - Use
ghidra_decompile_functionfor pseudo-C. - Use
ghidra_get_function_callersandghidra_get_function_calleesto traverse the call graph.
Full server reference: https://github.com/gwdevhub/gwdevhub-core/blob/master/docs/ghidra-mcp.md