ILSpy-Mcp

ILSpy MCP Server is a Model Context Protocol (MCP) server that lets an AI assistant decompile and analyze .NET assemblies using ILSpy. It supports operations such as decompiling assemblies/types/members, listing and searching types, and analyzing type relationships/hierarchies, intended to be used by MCP-compatible clients.

Evaluated Mar 30, 2026 (21d ago)

Repo ↗ DevTools mcp ilspy dotnet decompiler reverse-engineering code-analysis ai-assist

⚙ Agent Friendliness

/ 100

Can an agent use this?

🔒 Security

/ 100

Is it safe for agents?

⚡ Reliability

/ 100

Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality

Documentation

Error Messages

Auth Simplicity

Rate Limits

🔒 Security

TLS Enforcement

Auth Strength

Scope Granularity

Dep. Hygiene

Secret Handling

README claims operations are read-only, with assembly path validation and timeout/cancellation support. However, there is no explicit authentication/authorization model described, and no details on TLS (suggesting local transport or unspecified network security). As a decompiler, outputs may expose sensitive code if pointed at confidential assemblies.

⚡ Reliability

Uptime/SLA

Version Stability

Breaking Changes

Error Recovery

Best When

You want an agent-driven, read-only decompilation assistant for local .NET assemblies and you can connect an MCP-capable client to run it.

Avoid When

You need strong enterprise security controls (auditing, fine-grained authorization, secret management guarantees) or you require a standardized network API with OpenAPI/SDKs.

Use Cases

• Decompiling .NET assemblies to inspect methods and types
• Searching for members by name within an assembly
• Reviewing type hierarchies and relationships for code archaeology
• Assisting debugging and reverse-engineering workflows in .NET

Not For

• Applications requiring authenticated multi-tenant access control
• Writing/modifying assemblies or performing any state-changing operations
• Use cases needing an HTTP/REST API contract or public SDKs

Interface

REST API

GraphQL

gRPC

MCP Server

Yes

SDK

Webhooks

Authentication

OAuth: No Scopes: No

README does not describe authentication/authorization; implies operations are for a local user/client context rather than a network service with auth.

Pricing

Free tier: No

Requires CC: No

No pricing information provided in the supplied README/metadata.

Agent Metadata

Pagination

none

Idempotent

False

Retry Guidance

Not documented

Known Gotchas

⚠ Assembly file path handling/validation may require careful input formatting; invalid paths could fail requests.
⚠ Decompilation/search can be compute-heavy for large assemblies; agents should avoid overly broad queries.

Alternatives

ILSpy (GUI) for interactive decompilation ILSpy CLI (direct command-line decompilation) dotPeek (JetBrains) for .NET reverse engineering dnSpy/dnSpyEx for decompilation/debugging workflows Other MCP servers that wrap static analysis tools for code inspection

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for ILSpy-Mcp.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

API endpoint ↗ Agent guide ↗ Report inaccuracy

Scores are editorial opinions as of 2026-03-30.