x64dbg-mcp-server MCP server

x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros

What x64dbg-mcp-server does

Summarised from the project README; check the repository for the latest details.

Features

• 22 Event Callbacks: Full debugger event coverage — init, stop, breakpoint, exception, step, attach/detach, DLL load/unload, threads, and more.
• Zero Dependencies: Pure native plugin, no runtime or framework needed.
• x32 and x64: Single codebase, builds both architectures from one command.
• Dual Transport: Streamable HTTP + SSE — compatible with any MCP client (new and legacy).
• Bearer Auth: Mandatory token authentication — auto-generated on first run, required on every request to prevent unauthorized access.
• Config Dialog: Change IP/port/token from the Plugins menu, auto-restarts the server on save.

Tools exposed (20+)

• GetDebugState – Current debugger state, PID, instruction pointer
• LoadBinary – Load an executable into the debugger
• ExecuteDebuggerCommand – Run any x64dbg command
• ListCommandsByCategory – List available MCP tools
• SearchForStrings – Search process memory for text
• GetEventLog – Last N debugger events (exceptions, breakpoints, DLL loads)
• ClearEventLog – Clear the event log
• EvalExpression – Evaluate any x64dbg expression (address, register, arithmetic)
• AttachProcess – Attach to a running process by PID
• Echo – Echo input back
• WaitForEvent – Long-poll for debugger events (breakpoint, pause, resume, exception)
• GetCurrentAddress – Current EIP/RIP with label and comment
• Disassemble – Disassemble N instructions at an address
• DisassembleFunction – Disassemble an entire function by boundaries
• ReadMemory – Hex dump of process memory
• WaitForPause – Block until target pauses
• run – Resume execution (F9)
• StepInto – Single-step into calls (F7)
• StepOver – Step over calls (F8)
• StepOut – Run until return (Ctrl+F9)

Requirements

• Remote server URL (no local install)

How to install x64dbg-mcp-server MCP in Claude Desktop, Cursor and VS Code

claude mcp add --transport http x64dbg http://localhost:9094/ --header 'Authorization: Bearer YOUR_TOKEN_HERE'

{
  "mcpServers": {
    "x64dbg": {
      "type": "http",
      "url": "http://localhost:9094/",
      "headers": {
        "Authorization": "Bearer YOUR_TOKEN_HERE"
      }
    }
  }
}

{
  "servers": {
    "x64dbg": {
      "type": "http",
      "url": "http://localhost:9094/",
      "headers": {
        "Authorization": "Bearer YOUR_TOKEN_HERE"
      }
    }
  }
}

Add to config generator – combine it with other servers, or get the Windsurf format.

Featured in: Best MCP servers for long-term memory · Best MCP servers for research

Listed on Socketlist – add this badge to your README:

Badge markdown[](https://socketlist.pages.dev/s/duty1g-x64dbg-mcp-server/)

Maintain this project? Get it featured for free during launch →

Compare with ruflo →

Related Memory & Knowledge MCP servers