r2mcp-1.2.0

What's Changed

• Add the ability to sandbox the MCP to one specific directory
• Add -i flag to ignore the analysis depth, just use basic aa for large bins is usually enough
• Initial support for task-specific prompts, some agents may behave better
• Tool catalog registry is now dynamically managed
• Support remote r2 via http webserver r2pipe connections

New tools

• Add listFiles tool for multi-file tasks
• listFunctionsTree: structured dependency callgraph
• runCommand: enabled when -r is used, run r2 commands instead of high level actions
• Fix setComment tool

New Contributors

• @juergenhoetzel made their first contribution in #9

Full Changelog: 1.1.0...1.2.0

1.1.0

• Add -m (minimode) to expose less tools to reduce context usage
• Add -d flag to specify the default decompiler to use
• Add -n flag to avoid loading any plugin within the r2 context
• Add -c flag to run r2 commands after loading the file
• Add support for remote r2pipe over http instead of local RCore instances
• You can now build it with Make or Meson

This release has been tested and known to work with Mai, Zed, Visual Studio Copilot, CLine and Claude.

1.0.0

What's r2mcp?

This is the very first release of r2mcp, it's been stable and usable since the beginning, we just forgot to tag!

Initially implemented and heavily tested by Daniel Nakov (@dnakov) but lately updated and maintained by pancake (@trufae), this model context protocol brings you the power of radare2 to your agentic workflows.

Feel free to play, develop and investigate multiple ways to use this agent helper to get the best of r2 without actually knowing about r2! And as usual, if anything goes wrong or not as good as you expected file us some tickets!

Features

• Fully written in C, using the radare2 C libraries
• Exposes 26 tools with generic and easy to use (by llm) features
• Works on all tested coding agents (Claude Desktop, VSCode, CLION, Mai, ...)
• Runs in sandbox mode by default (as usual, don't trust any mcp)
• Debug capabilities enabled, useful for troubleshoting
• Supports any decompiler that you have installed in r2
• Reasoning and example tags for better tool usage via prompt engineering
• Capture logging messages as context for the output

Examples

• Solve crackmes without human interaction
• Create security assessments on binaries
• Find vulnerabilities on compiled programs
• Extract network endpoints and collect SBOM data
• Assist your firmware analysis with new ideas
• Investigate in background and extract artifacts

Kudos to

• @cpholguera updating installation instructions
• @cryptax testing and feedback
• @seifreed automated testing on malware

Full Changelog: https://github.com/radareorg/radare2-mcp/commits/1.0.0