styx-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@styx-mcphexdump and disasm on /tmp/malware.bin"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Styx MCP
冥河。二进制是彼岸,逆向是渡河。
MCP stdio server exposing 7 reverse-engineering tools for LLM agents (hermes-agent, Claude Desktop, etc.).
Tools
Tool | Description | Dependency |
| Hex dump + magic detection + Shannon entropy | (stdlib) |
| Capstone linear disassembly + function boundary detection |
|
| Multi-encoding (ASCII/UTF-16LE/UTF-8) string extraction + classification | (stdlib) |
| Cross-reference analysis: call-graph overview + per-address callers/callees/string refs |
|
| Ghidra headless decompiler — C pseudocode | Ghidra binary |
| Symbolic execution: CFG extraction / explore / avoid |
|
| OLLVM control-flow flattening recovery via PyGhidra |
|
Related MCP server: Ghidra MCP Server
Install
# Minimal — hexdump, disasm, strings, xref
pip install styx-mcp
# With angr
pip install styx-mcp[angr]
# With PyGhidra (deobfuscate)
pip install styx-mcp[pyghidra]
# Everything
pip install styx-mcp[all]Ghidra tool requires Ghidra headless: pacman -S ghidra (Arch) or download from ghidra-sre.org.
Usage
hermes-agent
# config.yaml
mcp_servers:
styx:
command: ["python", "-m", "styx.mcp_server"]Claude Desktop
{
"mcpServers": {
"styx": {
"command": "python",
"args": ["-m", "styx.mcp_server"]
}
}
}Standalone
python -m styx.mcp_serverPython API
from styx.tools.hexdump import hexdump
from styx.pipeline import run_pipeline
result = hexdump("/bin/ls")
print(result["output"])
# Batch pipeline
result = run_pipeline("/bin/ls", ["hexdump", "disasm", "strings", "xref"])Protocol
JSON-RPC 2.0 over stdin/stdout (MCP stdio transport). Each tool returns:
{
"success": true,
"error": null,
"output": "...",
"discovered_nodes": [],
"discovered_edges": [],
"hypothesis_updates": []
}License
MIT
This server cannot be deployed
Maintenance
Related MCP Connectors
Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.
Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.
PDF, image, video, OCR, screenshot, SQL, QR and text tools for agents. No API key, no signup.
Code intelligence for coding agents: semantic, AST, graph, and full-text search. 279+ languages.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables AI-assisted reverse engineering by bridging Binary Ninja with Large Language Models through 40+ analysis tools. Provides comprehensive binary analysis capabilities including decompilation, symbol management, type analysis, and documentation generation through natural language interactions.50MIT
- AlicenseNot gradedqualityCmaintenanceBridges Ghidra's reverse engineering capabilities with AI tools through 179 specialized tools for automated binary analysis and documentation. It supports full read/write access for function decompilation, renaming, and cross-binary documentation transfer in both GUI and headless modes.Apache 2.0
- AlicenseNot gradedqualityCmaintenanceEnables LLMs to automate reverse engineering tasks using Cutter, including function analysis, decompilation, disassembly, and more.55GPL 3.0
- AlicenseNot gradedqualityAmaintenanceEnables AI assistants to analyze binaries, debug processes, and inspect kernel state using Ghidra, x64dbg, WinDbg, and ILSpyCmd.9Apache 2.0