// MCP TOOL REFERENCE

IDA DOMAIN TOOLS

74 tools from the Ida Domain MCP Server, categorised by risk level.

// ALL 74 IDA DOMAIN TOOLS

READ 50 tools

Read decompile Decompile functions to pseudocode Read analyze_funcs Comprehensive function analysis: decompilation, xrefs, callees, strings, constants, blocks Read analyze_strings analyze_strings Read basic_blocks basic_blocks Read callees Get all functions called by the specified functions Read callers Get all functions that call the specified functions Read cursor_addr Get current address Read cursor_func Get current function Read dbg_callstack Get call stack Read dbg_current_gpregs Get current thread GP registers Read dbg_current_regs Get specific current thread registers Read dbg_gpregs_thread Get GP registers for threads Read dbg_list_bps List breakpoints Read dbg_read_mem Read debug memory Read dbg_regs Get all registers Read dbg_regs_cur Get current thread registers Read dbg_regs_for_thread Get specific thread registers Read dbg_regs_thread Get thread registers Read disasm disasm Read entrypoints Get entry points Read find_bytes find_bytes Read find_insn_operands find_insn_operands Read find_insns find_insns Read find_paths Find execution paths between source and target addresses Read get_bytes Read bytes from memory addresses Read get_global_value Read global variable values by address or name Read get_string Read strings from memory addresses Read get_u16 Read 16-bit unsigned integers from memory addresses Read get_u32 Read 32-bit unsigned integers from memory addresses Read get_u64 Read 64-bit unsigned integers from memory addresses Read get_u8 Read 8-bit unsigned integers from memory addresses Read idb_meta Get IDB metadata Read imports List imports Read list_funcs List functions Read list_globals List globals Read local_types List local types Read lookup_funcs Get functions by address or name (auto-detects) Read read_struct Read struct fields Read search search Read search_structs Search structs Read segments List all segments Read stack_frame Get stack vars Read strings List strings Read struct_info Get struct info Read structs List all structures Read xref_matrix Build matrix showing cross-references between entities Read xrefs_to Get all cross-references to specified addresses Read xrefs_to_field Get cross-references to structure fields Read export_funcs Export function data in various formats Read int_convert Convert numbers to different formats

WRITE 8 tools

Write apply_types Apply types (function/global/local/stack) Write dbg_add_bp Add breakpoints Write declare_stack Create stack vars Write declare_type Declare types Write patch Patch bytes at memory addresses with hex data Write rename Unified rename operation for functions, globals, locals, and stack variables Write set_comments Set comments at addresses (both disassembly and decompiler views) Write upload_binary Load a binary file from the local disk to the server for analysis.

DESTRUCTIVE 3 tools

Destructive dbg_delete_bp Delete breakpoints Destructive delete_stack Delete stack vars Destructive close_database Close the project's IDA database and terminate its worker process.

EXECUTE 13 tools

Execute callgraph Build call graph starting from root functions Execute dbg_run_to Run to address Execute dbg_start Start debugger Execute py_eval Execute Python code in IDA context Execute dbg_continue Continue debugger Execute dbg_exit Exit debugger Execute dbg_step_into Step into Execute dbg_step_over Step over Execute infer_types Infer types Execute dbg_enable_bp Enable/disable breakpoints Execute dbg_write_mem Write debug memory Execute open_database open_database Execute patch_asm Patch assembly instructions at addresses

// FAQ

How many tools does the Ida Domain MCP server have? +

The Ida Domain MCP server exposes 74 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Ida Domain tools? +

Route the Ida Domain server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Ida Domain tools fall into? +

Ida Domain tools are categorised as Read (50), Write (8), Destructive (3), Execute (13). Each category has a recommended default policy.

Enforce policy on every Ida Domain tool call.

Start from Ida Domain, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Free to start. No card required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.