x64dbg MCP server

The x64dbg MCP server connects your favorite LLMs with the x64dbg debugger, allowing you to control debugging functions through natural language prompts. This powerful bridge lets you issue debugging commands directly to x64dbg through text, making reverse engineering and debugging workflows more intuitive and efficient.

Installation

Plugin Setup

1. Download the appropriate plugin file:

   • Use .dp64 for 64-bit systems
   • Use .dp32 for 32-bit systems

2. Copy the plugin file to your x64dbg plugins directory:

   [x64dbg_installation_directory]/release/x64/plugins/
   

3. Configure Claude Desktop integration:

   • Copy the x64dbgmcp.py script from the source directory
   • Update your claude_desktop_config.json file with the path to the Python script

   {
     "mcpServers": {
       "x64dbg": {
         "command": "Path\\To\\Python",
         "args": [
           "Path\\to\\x64dbg.py"
         ]
       }
     }
   }
   

Verification

After installation, you can verify the plugin loaded correctly:

1. Launch x64dbg
2. Press ALT+L to open the logs panel
3. Check for successful loading messages from the MCP plugin

Usage

Basic Operation

1. Start x64dbg and load your target binary
2. Launch Claude Desktop (or your configured LLM)
3. Begin issuing natural language debugging commands

Command Examples

Here are some example commands you can issue through the LLM interface:

Breakpoint Management

Set a breakpoint at the main function and step through the first few instructions

Memory Analysis

Read 100 bytes from address 0x401000 and show me what's there

Register Inspection

What's the current value of RAX and RIP registers?

Pattern Searching

Find the pattern '48 8B 05' in the current module

Advanced Usage

API Access from Command Line

For more advanced workflows, you can run the MCP server directly from the command line:

python x64dbgmcp.py [API_KEY] [MAX_TOOL_CALLS] [PORT]

Where:

• API_KEY: Your LLM provider API key
• MAX_TOOL_CALLS: Maximum number of consecutive tool calls
• PORT: The port number where x64dbg plugin is running (check logs tab if unsure)

Providing Context for Automated Analysis

For the most effective automated analysis, provide the model with the full path of your binary:

init C:\Absolute\Path\to\EXE

This allows the model to restart the binary if it crashes or hangs, enabling more comprehensive automated analysis.

Features

The x64dbg MCP server provides:

• Over 40 x64dbg SDK Tools: Almost every debugging feature from the SDK is accessible
• Cross-Architecture Support: Compatible with both x64dbg and x32dbg
• API Compatibility: Direct API access to Claude from the command line for faster debugging

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "x64dbg" '{"command":"Path\\To\\Python","args":["Path\\to\\x64dbg.py"]}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "x64dbg": {
            "command": "Path\\To\\Python",
            "args": [
                "Path\\to\\x64dbg.py"
            ]
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json
• Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "x64dbg": {
            "command": "Path\\To\\Python",
            "args": [
                "Path\\to\\x64dbg.py"
            ]
        }
    }
}

3. Restart Claude Desktop for the changes to take effect