Frida MCP Server

A Model Context Protocol (MCP) server that exposes Frida dynamic instrumentation capabilities to AI assistants like Claude Code, Claude Desktop, and any other MCP-compatible client.

What this enables: Your AI assistant can list processes, attach to them, hook functions, read memory, and execute arbitrary instrumentation scripts — all through structured tool calls, without writing boilerplate.

Features

• Process management — list, attach, detach from running processes

• Module introspection — enumerate loaded DLLs/modules, find exported function addresses

• Memory access — read raw memory and strings (UTF-8, UTF-16, ANSI) from the target process

• Function hooking — intercept function calls, trace arguments and return values

• Batch hooking — hook multiple functions simultaneously

• Arbitrary scripting — execute custom Frida JavaScript in the target process

Installation

Prerequisites

• Python 3.10+

• Frida tools installed on your system

• (Windows) A Frida server running on the target device if targeting mobile/remote

Install from source

git clone https://github.com/cengziyang22-bit/frida-mcp.git
cd frida-mcp
pip install -e .

Quick install via pip

pip install git+https://github.com/cengziyang22-bit/frida-mcp.git

Configuration

Claude Code

Add to ~/.mcp.json:

{
  "mcpServers": {
    "frida": {
      "type": "stdio",
      "command": "python",
      "args": ["-m", "frida_mcp.server"]
    }
  }
}

Claude Desktop

Add to your Claude Desktop config (claude_desktop_config.json):

{
  "mcpServers": {
    "frida": {
      "command": "python",
      "args": ["-m", "frida_mcp.server"]
    }
  }
}

Tools Reference

Usage Examples

1. Find and attach to a process

attach_process("notepad.exe")

2. List loaded modules

list_modules(filter_name="kernel32")

3. Hook a Windows API function

hook_function("MessageBoxW", duration_seconds=10)

Then trigger a message box in the target app — all calls are captured with timestamps and arguments.

4. Read a string from memory

read_string("0x7ffb5fa80000", encoding="utf16")

5. Run a custom Frida script

run_script("""
  Process.enumerateModules().filter(m => m.name.includes('sqlite'))
    .forEach(m => send(m.name + ' @ ' + m.base));
""")

6. Batch hook multiple functions

hook_functions_batch("WriteFile,ReadFile,CreateFileW", duration_seconds=5)

Architecture

frida-mcp/
├── frida_mcp/
│   ├── __init__.py
│   └── server.py      # MCP server with all 11 tools
├── pyproject.toml      # Project metadata and dependencies
├── README.md
└── LICENSE

The server uses FastMCP over stdio transport. All tool state (attached process, hook queues) is session-scoped and thread-safe.

Frida Version Compatibility

Built and tested against Frida 17.x. Key API changes from Frida 16.x:

Security Considerations

• Frida requires elevated privileges to attach to processes on most platforms

• Hooking and memory manipulation can crash the target process

• Only attach to processes you own or have explicit permission to instrument

• The run_script tool executes arbitrary JavaScript in the target process — use with caution

License

MIT © 2025

Acknowledgments

• Frida — the dynamic instrumentation toolkit that makes this possible

• FastMCP — elegant Python MCP framework

• Model Context Protocol — Anthropic's open standard for AI-tool integration