List all running IDA instances with MCP plugin enabled.

Returns: str: JSON-formatted list of IDA instances with their ports and database info.

Example response: { "count": 2, "instances": { "12345_crackme.exe": {"port": 13338, "database": "crackme.exe"}, "67890_malware.dll": {"port": 13339, "database": "malware.dll"} } }

Execute Python code or script file in IDA Pro context.

This tool sends Python code to the IDA Pro plugin for execution. The code runs in IDA's main thread with full access to all IDA API modules.

For long-running scripts, the tool polls for completion up to timeout seconds. If the timeout is exceeded, a task_id is returned so you can check status later using the check_task_status tool. Long scripts should poll the injected mcp_cancelled() helper so they can be stopped cooperatively via the cancel_ida_task tool.

Avoid calling ida_kernwin.ask_* and other interactive dialogs in scripts: they block IDA's main thread until answered and freeze the whole task queue.

Args: params (ExecuteScriptInput): Validated input parameters containing: - code (Optional[str]): Python code string to execute - script_path (Optional[str]): Path to Python script file - capture_output (bool): Whether to capture stdout/stderr - instance_id (Optional[str]): Target IDA instance ID (e.g., "crackme.exe" or full ID) - port (Optional[int]): Target IDA instance port (e.g., 13338) - timeout (int): Maximum wait time in seconds (default: 600)

Returns: str: JSON-formatted string containing: - result: The value of the last expression (or a local result variable), as a string or null - stdout: Captured standard output - stderr: Captured standard output (including errors) - instance: The IDA instance that executed the code - task_id: Present if script is still running or timed out

Examples: # Execute on default instance execute_idapython(code="print(idaapi.get_root_filename())")

# Execute on specific instance by database name
execute_idapython(code="len(list(idautils.Functions()))", instance_id="crackme.exe")

# Execute on specific instance by port
execute_idapython(code="idc.get_func_name(0x401000)", port=13339)

Check if IDA Pro instances are running and accessible.

Returns: str: JSON-formatted string with connection status and all instances.

Get information about an IDA database.

Args: instance_id: Target IDA instance ID (optional, uses default if not specified).

Returns: str: JSON-formatted string with database information.

Check the status of a long-running script execution task.

Use this tool when execute_idapython returns a task_id with status 'running' or 'pending', indicating the script is still executing in IDA Pro and the timeout was exceeded.

Args: task_id: The task ID returned by execute_idapython instance_id: Target IDA instance ID (optional, uses default if not specified) port: Target IDA instance port (optional, uses default if not specified)

Returns: str: JSON-formatted task status with result if completed.

Request cancellation of a script execution task.

Cancellation is cooperative:

• Pending tasks (not yet started in IDA) are cancelled immediately.

• Running tasks set a flag that is visible to the script through the injected mcp_cancelled() helper; a script in a tight loop that never polls it cannot be interrupted, so long scripts should check it.

Args: task_id: The task ID returned by execute_idapython instance_id: Target IDA instance ID (optional, uses default if not specified) port: Target IDA instance port (optional, uses default if not specified)

Returns: str: JSON-formatted cancellation result.