Agentic IDA with idalib

IDA Pro, Classroom and Home are available to AI-driven workflows through idalib. If you are wondering how to use IDA with your agent of choice, this page covers the main approaches.

Approaches

Hex-Rays IDA MCP Server

The Hex-Rays IDA MCP Server is Hex-Rays' official MCP server for agentic IDA workflows; it works for Claude Code, Codex, Pi, and any other MCP-compatible agent.

It can attach to a database already open in a running IDA GUI session, or spin up a managed idalib worker headlessly when no GUI instance is available.

See Getting Started for setup instructions, or the Hex-Rays IDA MCP section for the full documentation.

Community MCP servers (alternative)

You can also try one of the well-maintained community implementations, as an alternative.

Code mode (manual)

Rather than connecting an agent to a running IDA instance, you can let the agent generate and run idalib scripts on the fly. The agent writes a Python script, executes it against the binary, and reads the output.

To help the agent understand the Domain API, point it at the ida-domain llms.txt.

For a worked example, see Malware analysis with Claude Code and idalib.

Claude Code Skills

Hex-Rays provides a set of pre-built skills that teach Claude to work with idalib and the Domain API, e.g., inspecting binary files, writing analysis scripts, and more. See the Hex-Rays Marketplace.