Repolode
Submit
duty1g

duty1g/x64dbg-mcp-server

An MCP plugin for x64dbg that lets AI assistants control the debugger over HTTP for breakpoints, stepping, and memory reads.

View on GitHubWebsite
Stars
2,795
Forks
319
Open issues
1
Last commit
4 days ago

What is it?

x64dbg-MCP Server is a native plugin for the x64dbg debugger that implements the Model Context Protocol, so any MCP-compatible AI assistant can drive a debugging session. It exposes a large set of debugger operations as tools, including setting breakpoints, stepping through code, reading memory, dumping registers, inspecting modules and threads, and scanning for byte patterns or strings.

The plugin is written in Zig with no external dependencies and ships as a single binary per architecture, supporting both x32 and x64 targets. It supports Streamable HTTP and SSE transports and requires a Bearer token on every request. Configuration, including bind address, port and token, is available from the x64dbg Plugins menu.

The server runs inside x64dbg's process and starts automatically when the debugger launches. Default ports are 9094 for x64 and 9095 for x32, and the server can be built from source on Windows, Linux, or macOS.

Key features

  • 01Exposes dozens of debugger operations as MCP tools, from stepping and breakpoints to memory and module inspection.
  • 02Runs as a single native plugin with no runtime or external dependencies.
  • 03Builds both x32 and x64 plugins from one codebase and can cross-compile from Linux or macOS.
  • 04Supports Streamable HTTP and SSE transports for MCP clients.
  • 05Requires a Bearer token for every request, auto-generated on first run.
  • 06Provides a config dialog for bind address, port and token, with automatic server restart on save.

Use cases

  • Letting an AI assistant walk through a binary's entry point, breakpoints and call stack during reverse engineering.
  • Automating repetitive debugging steps such as breakpoint setup, memory dumps and pattern searches.
  • Analyzing packed executables with OEP detection and module dumping.
  • Driving x64dbg from an agent workflow in a sandboxed malware analysis environment.

Quick start

  1. 1

    Download the latest release or build from source

  2. 2

    Build the plugin with Zig

    zig build -Doptimize=ReleaseSafe --prefix dist
  3. 3

    Copy the contents of dist/ into your x64dbg root folder

  4. 4

    Launch x64dbg; the MCP server starts automatically

Things to know

  • Requires Zig 0.16-dev or later to build from source.
  • Works only with x64dbg, a Windows debugger.
  • The server uses unencrypted HTTP, so it should not be exposed to untrusted networks.

In collections

MCP servers for Claude CodeReverse engineering toolsClaude Code tools, skills & pluginsOpen-source AI agent frameworks & appsMCP servers

Topics

#reverse-engineering#debugging#mcp#binary-analysis#zig#windows#malware-analysis#ai-agents#ai-debugging#claude

FAQ

What is x64dbg-mcp-server?
An MCP plugin for x64dbg that lets AI assistants control the debugger over HTTP for breakpoints, stepping, and memory reads. x64dbg-MCP Server is a native plugin for the x64dbg debugger that implements the Model Context Protocol, so any MCP-compatible AI assistant can drive a debugging session. It exposes a large set of debugger operations as tools, including setting breakpoints, stepping through code, reading memory, dumping registers, inspecting modules and threads, and scanning for byte patterns or strings.
Is x64dbg-mcp-server free to use? What license does it have?
x64dbg-mcp-server is open source under the MIT license. Check the license terms before using it in commercial products.
Is x64dbg-mcp-server still maintained?
Actively maintained. The last commit to x64dbg-mcp-server was on Nov 3, 2026.
What can I use x64dbg-mcp-server for?
Letting an AI assistant walk through a binary's entry point, breakpoints and call stack during reverse engineering. Automating repetitive debugging steps such as breakpoint setup, memory dumps and pattern searches. Analyzing packed executables with OEP detection and module dumping. Driving x64dbg from an agent workflow in a sandboxed malware analysis environment.
How do I install x64dbg-mcp-server?
Download the latest release or build from source Build the plugin with Zig: zig build -Doptimize=ReleaseSafe --prefix dist Copy the contents of dist/ into your x64dbg root folder Launch x64dbg; the MCP server starts automatically
Where can I get x64dbg-mcp-server?
The source code and installation instructions are on GitHub: https://github.com/duty1g/x64dbg-mcp-server

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects