x64dbg MCP

https://github.com/user-attachments/assets/07b813eb-4175-4f14-b21b-602548906398

x64dbg MCP gives an MCP client guarded control of a real x64dbg or x32dbg session. It turns live debugging into a replayable reverse-engineering workflow: bind the exact process, observe runtime facts, recover useful artifacts, validate them independently, and hand the evidence to IDA.

What it does

• Launches or attaches with arguments, working directory, environment and child-process policy.
• Reads and changes registers, memory, threads, modules and owned breakpoints.
• Captures instruction, API, heap, exception and basic-block evidence.
• Finds comparison values, runtime strings, indirect calls, OEPs and imports.
• Produces memory PE dumps, minidumps, fixed imports and patched exports.
• Exchanges runtime facts with IDA using a portable file SHA-256 + module RVA identity instead of unstable runtime addresses.

Tool groups

The complete catalog, parameters and response contracts are in the tool reference. The compact profile keeps routine model-facing responses short; detail="full" and the full profile expose the complete evidence when it is needed.

Quick setup

Download the combined Windows bundle from Releases. It contains both native plugins and the Python backend:

• plugins\MCPx64dbg.dp64 for x64dbg
• plugins\MCPx64dbg.dp32 for x32dbg
• runtime\src and runtime\requirements.txt
• self-contained x64/x86 managed-runtime probes under runtime\tools\bin\managed_probe

Close x64dbg/x32dbg. Open PowerShell in the folder containing the downloaded ZIP, then run the block below. It asks where to keep the MCP bundle and where x64dbg is already installed; no drive or installation directory is assumed. Keep the same PowerShell window open for the client-specific commands below.

$Archive = Get-ChildItem -File .\x64dbg-mcp-windows-*.zip |

Sort-Object LastWriteTime -Descending | Select-Object -First 1 if (-not $Archive) { throw 'The x64dbg MCP release ZIP was not found in this folder.' }

$BundleRoot = Read-Host 'Absolute folder where x64dbg MCP should be extracted' $X64dbgRoot = Read-Host 'Absolute folder containing the x64 and x32 x64dbg folders' $BundleRoot = [IO.Path]::GetFullPath(

$X64dbgRoot = (Resolve-Path -LiteralPath (

if (-not (Test-Path -LiteralPath (Join-Path $X64dbgRoot 'x64\x64dbg.exe'))) { throw "x64dbg.exe was not found under $X64dbgRoot\x64" } if (-not (Test-Path -LiteralPath (Join-Path $X64dbgRoot 'x32\x32dbg.exe'))) { throw "x32dbg.exe was not found under $X64dbgRoot\x32" }

Expand-Archive -LiteralPath $Archive.FullName -DestinationPath $BundleRoot -Force Copy-Item (Join-Path $BundleRoot 'plugins\MCPx64dbg.dp64') (Join-Path $X64dbgRoot 'x64\plugins\MCPx64dbg.dp64') -Force Copy-Item (Join-Path $BundleRoot 'plugins\MCPx64dbg.dp32') (Join-Path $X64dbgRoot 'x32\plugins\MCPx64dbg.dp32') -Force

$RuntimeRoot = Join-Path $BundleRoot 'runtime' Set-Location $RuntimeRoot py -3.11 -m venv .venv .\.venv\Scripts\python.exe -m pip install -r requirements.txt

$PythonExe = (Resolve-Path .\.venv\Scripts\python.exe).Path $Launcher = (Resolve-Path .\src\mcp_stdio_launcher.py).Path [pscustomobject]@{ PythonExe = $PythonExe Launcher = $Launcher X64dbgRoot = $X64dbgRoot }

Codex

Add the server to ~\.codex\config.toml. Replace the three angle-bracketed values with the absolute paths printed by the setup block. TOML single-quoted strings preserve Windows backslashes as written.

[mcp_servers.x64dbg]

command = ' ' args = [' '] startup_timeout_sec = 90

[mcp_servers.x64dbg.env] X64DBG_ROOT = ' ' X64DBG_MCP_TOOL_PROFILE = 'compact'

For normal target startup, call InitDebuggee directly with the EXE path. It detects x86/x64, starts the matching debugger from X64DBG_ROOT, waits for the bridge and opens the target. A separate BridgeHello preflight or manual debugger-path search is not required.

Optional installation check: start x64dbg or x32dbg and verify the bridge:

& $PythonExe (Join-Path $RuntimeRoot 'src\x64dbg.py') GetDebuggerPluginStatus

GetScyllaHideStatus.installed and integrationReady describe the MCP InjectorCLI/HookLibrary backend. guiPluginPresent describes only the optional x64dbg GUI plugin; it is not required for MCP injection.

ScyllaHide is opt-in: launch tools default to use_scyllahide="off", and auto also skips injection. Use force with an explicit profile when needed. The CLI backend stages a private INI beside the injector and targets the exact PID. Its compatibility configuration disables NtContinueHook and KillAntiAttach together to avoid the reproduced continuation crash; the result reports these overrides. This does not guarantee that every third-party profile is compatible with every target or Windows build.

Claude Code

Add the same stdio server to Claude Code with the user scope. This command uses the paths selected by the setup block instead of embedding a machine-specific location:

$ClaudeServer = [ordered]@{

command = $PythonExe args = @($Launcher) env = [ordered]@{ X64DBG_ROOT = $X64dbgRoot X64DBG_MCP_TOOL_PROFILE = 'compact' } } | ConvertTo-Json -Depth 4 -Compress claude mcp add-json x64dbg $ClaudeServer --scope user claude mcp list

Alternatively, run claude mcp add and enter the same command, arguments and environment interactively.

Claude Desktop and other stdio clients

Use the client's MCP JSON configuration. For Claude Desktop on Windows, the file is %APPDATA%\Claude\claude_desktop_config.json. Generate a JSON block with the actual paths selected above:

$ClientConfig = [ordered]@{

mcpServers = [ordered]@{ x64dbg = [ordered]@{ command = $PythonExe args = @($Launcher) env = [ordered]@{ X64DBG_ROOT = $X64dbgRoot X64DBG_MCP_TOOL_PROFILE = 'compact' } } } } $ClientConfig | ConvertTo-Json -Depth 6

Cursor, VS Code MCP, Windsurf and other stdio clients use the same command/args/env contract; only the location of their JSON file differs.

Build from source

git clone https://github.com/rison1337/x64dbgMCP.git

Set-Location x64dbgMCP cmake -S . -B build -G "Visual Studio 17 2022" -DX64DBG_DOWNLOAD_SDK=ON cmake --build build --target all_plugins --config Release

$X64dbgRoot = (Resolve-Path -LiteralPath (Read-Host 'x64dbg installation folder')).Path Copy-Item build\build64\Release\MCPx64dbg.dp64 (Join-Path $X64dbgRoot 'x64\plugins\MCPx64dbg.dp64') -Force Copy-Item build\build32\Release\MCPx64dbg.dp32 (Join-Path $X64dbgRoot 'x32\plugins\MCPx64dbg.dp32') -Force

IDA Pro MCP Fusion handoff

The IDA workflow is designed for the rison1337/ida-pro-mcp-fusion fork. x64dbg MCP does not pretend to be an IDA replacement and does not silently mutate an unrelated database. Instead:

1. ExportRuntimeEvidence writes a versioned evidence document containing the target SHA-256, architecture, module RVAs, executed blocks, API calls, comments, labels and functions.
2. ResolveModuleRva and the coordinator normalize live addresses to the static image identity.
3. tools/ida_evidence_coordinator.py validates that the open Fusion database has the same SHA-256 and architecture, then creates deterministic set_name, set_comments, define_func and coverage/API comment actions.
4. Fusion applies those actions in its IDA worker and can retain the result in its persistent SQLite cache for later multi-binary analysis.

This is an explicit artifact/protocol handoff, so it remains inspectable and retryable. See the coordinator and the Fusion README for the IDA-side worker and cache model.

Documentation

• Tool reference
• Security model
• Contributing

CI covers the Python contract and both native plugin architectures. The release workflow also checks the packaged stdio server and managed probes. Live debugger gates run locally and retain JSON reports; see Contributing. Analyze untrusted binaries inside a disposable VM.

GPL-3.0. Based on x64dbgMCP by Sam W (Wasdubya). See NOTICE for attribution.

---

x64dbg MCP даёт MCP-клиенту защищённое управление настоящей сессией x64dbg или x32dbg. Он превращает живую отладку в воспроизводимый reverse-engineering workflow: привязать точный процесс, снять runtime-факты, восстановить полезные артефакты, независимо проверить результат и передать факты в IDA.

Возможности

• Запуск и attach с аргументами, cwd, окружением и политикой дочерних процессов.
• Регистры, память, потоки, модули и breakpoint'ы с контролем владельца.
• Instruction-, API-, heap-, exception-trace и basic-block evidence.
• Поиск сравнений, runtime-строк, косвенных вызовов, OEP и импортов.
• PE из памяти, minidump, исправление IAT и экспорт пропатченного файла.
• Обмен с IDA через переносимую связку SHA-256 файла + module RVA, а не случайный runtime VA.

Группы инструментов

| Управление | RegisterGet, RegisterSet, MemoryRead, MemoryWrite, DebugSetBreakpoint, `SetHardwareBr