x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg…
x64dbg is an MCP project maintained in the duty1g/x64dbg-mcp-server repository. The maintainer describes its purpose as “x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant…”. Read the project documentation for the complete scope.
The maintainer’s configuration uses http://localhost:9094/. It declares streamable-http transport. Check the project’s account and authentication instructions when adding the endpoint to your client.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| GetDebugState | Current debugger state, PID, instruction pointer |
| LoadBinary | Load an executable into the debugger |
| ExecuteDebuggerCommand | Run any x64dbg command |
| ListCommandsByCategory | List available MCP tools |
| SearchForStrings | Search process memory for text |
| GetEventLog | Last N debugger events (exceptions, breakpoints, DLL loads) |
| ClearEventLog | Clear the event log |
| EvalExpression | Evaluate any x64dbg expression (address, register, arithmetic) |
| AttachProcess | Attach to a running process by PID |
| Echo | Echo input back |
| WaitForEvent | Long-poll for debugger events (breakpoint, pause, resume, exception) |
| GetCurrentAddress | Current EIP/RIP with label and comment |
| Disassemble | Disassemble N instructions at an address |
| DisassembleFunction | Disassemble an entire function by boundaries |
| ReadMemory | Hex dump of process memory |
| WaitForPause | Block until target pauses |
| run | Resume execution (F9) |
| StepInto | Single-step into calls (F7) |
| StepOver | Step over calls (F8) |
| StepOut | Run until return (Ctrl+F9) |
| PauseDebug | Pause the target (F12) |
| StopDebug | Terminate debug session |
| RestartDebug | Restart debug session |
| SetBreakpoint | Set INT3 breakpoint at address/symbol |
| SetHardwareBreakpoint | Set hardware breakpoint (DR0-DR3, read/write/execute) |
| SetConditionalBreakpoint | Set breakpoint with condition expression and optional log |
| EnableBreakpoint | Enable a breakpoint at a given address |
| DisableBreakpoint | Disable a breakpoint without deleting it |
| ToggleBreakpoint | Toggle a breakpoint between enabled and disabled |
| DeleteBreakpoint | Remove a breakpoint |
| DeleteAllBreakpoints | Remove all breakpoints (normal, hardware, memory) |
| ResetHitCount | Reset a breakpoint's hit counter to zero |
| ListBreakpoints | List all active breakpoints |
| GetAllRegisters | Dump all general-purpose registers |
| SetRegister | Set a CPU register value |
| GetCallStack | Current thread call stack |
| GetThreads | List all threads with IDs and instruction pointers |
| SwitchThread | Switch active thread context |
| SuspendThread | Suspend a thread by its thread ID |
| ResumeThread | Resume a suspended thread |
| ListModules | List loaded modules with base addresses and sizes |
| GetMemoryMap | Memory regions with addresses, sizes, and protection |
| GetDumpableRegions | List committed, readable memory regions |
| AllocateMemory | Allocate memory in the target process |
| FreeMemory | Free allocated memory in the target process |
| WriteMemToAddress | Patch memory with hex bytes |
| RestorePatches | Restore all patches to original bytes |
| Assemble | Assemble an instruction at an address |
| CommentOrLabelAtAddress | Add comment/label in disassembly |
| SetBookmark | Set a bookmark at an address |
| DeleteBookmark | Delete a bookmark |
| ListBookmarks | List all bookmarks |
| GetImports | Show module import table |
| GetExports | Show module export table |
| SearchSymbols | Search for symbols matching a pattern |
| ListSymbols | List exported symbols of a module |
| GetPatches | List all memory patches |
| FindPattern | Scan module memory for byte pattern with ?? wildcards |
| GetStrings | Extract ASCII strings from a module's memory |
| GetReferences | Find CALL/JMP xrefs to a target address |
| GetFunctions | List analyzed functions with addresses and labels |
| AnalyzeModule | PE structure analysis: sections, EP, image size |
| DetectOEP | Detect Original Entry Point for packed executables |
| DumpMemory | Save memory region to file on disk |
| DumpModule | Dump an entire module to a file |
| RunToAddress | Run until hitting a specific address |
| TraceInto | Step N instructions recording address + disassembly |
| FollowPointer | Dereference pointer chain N levels deep |
| WatchExpressions | Evaluate multiple expressions in one call |
| GetSEHChain | Walk Structured Exception Handler chain (x32) |
| GetPEB | Read Process Environment Block fields |
| GetArguments | Read function arguments from stack/registers |
| SetMemoryBreakpoint | Set memory breakpoint (read/write/execute) |
| SetExceptionBreakpoint | Configure exception breakpoint (break or ignore, first/second/all chance) |
| DeleteExceptionBreakpoint | Delete an exception breakpoint |
| AnalyzeCode | Run code analysis (function, module, or control flow) |
| TraceOver | Trace N instructions stepping over calls |
| SetBreakpointCommand | Set a command to execute when a breakpoint is hit |
| SetBreakpointFastResume | Enable/disable fast resume (auto-continue) on a breakpoint |
| SaveDatabase | Save the x64dbg database (.dd64/.dd32) |
{
"mcpServers": {
"x64dbg": {
"type": "http",
"url": "http://localhost:9094/",
"headers": {
"Authorization": "YOUR_AUTHORIZATION"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Use Microsoft’s Playwright MCP server to navigate pages, inspect accessibility snapshots, fill forms and capture browser screenshots.
Connect GitHub MCP to repositories, issues and pull requests with GitHub’s hosted service or a locally run server.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Search Linear issues and projects, inspect work context and manage updates through Linear’s hosted MCP server with OAuth.