Side-by-side comparison of two Model Context Protocol servers — install paths, tools, quality signals, and directory engagement so you can pick the right one for Claude, Cursor, and other MCP clients.
A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports.
Exposes the RSigma Sigma detection-engineering toolkit to AI agents over stdio or Streamable HTTP with rsigma mcp serve. Tools to author, lint, validate, and convert Sigma detection rules, evaluate and explain detections against log events, and inspect correlation state, all backed by a native Rust engine.
Quality signal
51/100 (Fair)
48/100 (Fair)
Install path
Remote · high
npx · low
Engagement
1 0 0 9,719
1 0 0 128
Tools
Decompilation and binary analysis via GhidraAutomated renaming of methods and dataListing of methods, classes, imports, and exportsMCP server with Ghidra plugin for extensibilityConfigurable HTTP server interface for MCP clients
