Skip to main content
Glama

Server Details

Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Unhealthy
OAuth
Works in Glama
Last Tested
Transport
Streamable HTTP
URL

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 4 tool updates
    • Addedfetch_binary
    • Addedfinalize_upload
    • Addedstart_upload
    • Addedupload_chunk
  2. 39 tool updates
    • First observedask_ai
    • First observedcheck_sanitization
    • First observedfind_attack_surface
    • First observedget_binary_info
    • First observedget_call_tree
    • First observedget_code_blocks
    • First observedget_control_flow
    • First observedget_file_hash
    • First observedget_function_detail
    • First observedget_references_from
    • First observedget_references_to
    • First observedget_strings
    • First observedget_variables
    • First observedgoto_address
    • First observedinspect_address
    • First observedlist_exports
    • First observedlist_functions
    • First observedlist_imports
    • First observedlist_sections
    • First observedlist_segments
    • First observedlist_symbols
    • First observednavigate_cfg
    • First observedopen_binary
    • First observedread_assembly
    • First observedread_block
    • First observedread_lifted_il
    • First observedread_memory
    • First observedread_pseudocode
    • First observedread_ssa_form
    • First observedresolve_name
    • First observedsearch_bytes
    • First observedsearch_constants
    • First observedsearch_strings
    • First observedtrace_data_flow
    • First observedtrace_ssa_step
    • First observedtrace_variable
    • First observedupload_binary
    • First observedwhat_calls
    • First observedwho_calls

Frequently Asked Questions

Discussions

No comments yet. Be the first to start the discussion!

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    AI-powered cybersecurity automation platform with 150+ security tools and 12+ autonomous AI agents for penetration testing, vulnerability assessment, and bug bounty hunting. Enables comprehensive security testing through intelligent tool selection and automated workflows.
    2
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables autonomous AI agents and penetration testers to conduct authorized security audits with persistent cross-session memory, zero-trust secret scrubbing, dynamic OWASP/ASVS checklists, and hallucination-free exploit PoC generation from captured traffic.
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
    43
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A headless Ghidra server that enables AI agents to perform deep reverse-engineering tasks such as disassembly, decompilation, and patching via the Model Context Protocol. It supports extensive automation of analysis workflows in sandboxed environments through a catalog of over 200 specialized tools.
    162
    GPL 2.0
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.5/5.0
Disambiguation3/5

The tool set has clear distinct purposes for most tools, but there is notable overlap in some areas. For example, 'get_references_from' and 'get_references_to' are distinct, but 'get_call_tree', 'what_calls', and 'who_calls' all relate to call relationships and could cause confusion. Similarly, 'read_assembly', 'read_pseudocode', 'read_lifted_il', and 'read_ssa_form' all provide code views with subtle differences that might be hard for an agent to distinguish without deep domain knowledge.

Naming Consistency4/5

Tool names follow a consistent verb_noun pattern with minor deviations. Most tools use clear verbs like 'get_', 'list_', 'read_', 'trace_', etc., but there are a few inconsistencies such as 'ask_ai' (verb_abbreviation), 'goto_address' (verb_noun but 'goto' is less common), and 'navigate_cfg' (verb_abbreviation). Overall, the naming is predictable and readable, with only slight variations.

Tool Count2/5

With 43 tools, the count is excessive for a reverse engineering server, leading to potential overwhelm and redundancy. While the domain is complex, many tools could be consolidated (e.g., multiple code view tools or call analysis tools) without losing functionality. This high number may hinder agent usability and efficiency in selecting the right tool.

Completeness5/5

The tool set provides comprehensive coverage for binary analysis, including loading binaries (upload, fetch, open), navigation (goto, inspect), code examination (assembly, pseudocode, CFG), data flow (trace, SSA), vulnerability detection (attack surface, sanitization), and utility functions (hashes, strings). There are no obvious gaps; it supports full CRUD-like operations and advanced analysis workflows in the domain.

Resources