Plugin:
- exec_python / exec_idc endpoints (token-gated arbitrary IDA scripting)
- function_info, lvars, segment_at, search_text (IDA 9.0 API)
- Plugins -> IDA MCP opens a settings dialog (bind/port/advertise/registry/token)
via ida_kernwin.Form, with a text-prompt fallback; Apply restarts the server live
Server:
- ida_overview (one-shot triage) and ida_batch (many calls, one round-trip)
- native TLS and mutual-TLS support (MCP_TLS_CERT/KEY/CLIENT_CA), MCP_BIND_HOST
- clearer warnings when running plaintext behind an HTTP tunnel
Docs:
- DEPLOY.md: hosting for endpoint availability + confidentiality (VPN back-channel,
public TLS front door, mutual TLS, firewall, systemd), and what hosting can't do
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
