SetsunaYukiOvO/x64dbg-mcp

MCP server plugin for x64dbg debugger - enables AI agents and external tools to control debugging via JSON-RPC 2.0 over HTTP/SSE

What it solves

This project provides a bridge between the x64dbg/x32dbg debuggers and AI agents. It allows external applications and LLMs to programmatically control a debugger, perform reverse engineering tasks, and analyze binary execution in real-time using a standardized protocol.

How it works

It implements a Model Context Protocol (MCP) server as a plugin for x64dbg and x32dbg. The plugin starts an HTTP server (supporting JSON-RPC 2.0 and SSE) that exposes the debugger's internal functions as a set of AI-invokable tools, resources, and prompts. This enables AI agents to read memory, modify registers, manage breakpoints, and analyze stack traces through a language-agnostic interface.

Who it’s for

  • Reverse Engineers: To automate tedious debugging workflows and vulnerability hunting.
  • Security Researchers: For binary unpacking and algorithm reversing.
  • AI Developers: Who want to integrate low-level system debugging capabilities into AI agents or IDEs like Cursor.

Highlights

  • Extensive Toolset: 79 AI-invokable functions covering execution control, memory/register access, and thread management.
  • Dual Architecture Support: Fully compatible with both x64 and x86 architectures.
  • Standardized Protocol: Complies with the latest MCP specifications, including streamable HTTP transport.
  • Workflow Templates: Includes 10 pre-defined prompts for common tasks like crash analysis and code patching.
  • Security Hardening: Features permission-based access control, CORS support, and protection against command injection and path traversal.

Related

  • Project
    duty1g/x64dbg-mcp-server

    x64dbg‑MCP Server is a Zig‑written native plugin that turns the x64dbg debugger into an HTTP‑based MCP service. It exposes 71 debugger tools (breakpoints, memory reads, disassembly, PE analysis, etc.) and 22 event callbacks via JSON‑RPC, secured with a bearer token. AI agents can connect as MCP clients and control the debugger programmatically, enabling agentic reverse‑engineering workflows. The plugin is zero‑dependency, cross‑compiles for x86/x64, and starts automatically when x64dbg launches.

  • Project
    mrexodia/ida-pro-mcp

    An MCP server that integrates IDA Pro with LLMs, allowing AI assistants to perform reverse engineering tasks like decompilation, renaming, and binary analysis.

  • Project
    microsoft/DebugMCP

    An MCP server that grants AI coding agents autonomous control over the VS Code debugger to set breakpoints, step through code, and inspect variables locally.

  • Project
    svnscha/mcp-windbg

    An MCP server that bridges AI models with WinDbg, allowing users to analyze crash dumps and perform kernel or user-mode debugging using natural language.

  • Project
    zhizhuodemao/js-reverse-mcp

    An AI-native MCP server that enables AI assistants to perform JavaScript reverse engineering by providing specialized tools for debugging, script analysis, and anti-detection.