x64dbg-MCP Server Released

x64dbg-MCP Server has been released to automate repetitive tasks in binary analysis. This tool is a Zig-based native plugin that runs inside x64dbg, exposing debugger functionalities via the MCP (Model Context Protocol) specification without requiring the installation of separate runtimes like Python or .NET.

Dependency-Free Native Approach

Unlike existing debugger automation tools that relied on separate processes or runtimes, this plugin directly calls symbols from x64bridge.dll and x64dbg.dll. This allows for deployment and execution as a single binary in environments where minimizing tool dependencies is critical, such as malware analysis. The transport layer uses JSON-RPC 2.0 and supports both the latest Streamable HTTP and the older SSE methods.

Exposure of 80 Tools and Security Considerations

The plugin provides a total of 80 tools to AI assistants, including setting breakpoints, stepping through execution, reading/writing memory, and assembling instructions. Of these, 11 can be used without running the debugger, while the remaining 69 require an active debug session. Since it includes high-risk operations such as memory patching and unpacking, the default binding address (0.0.0.0) must be restricted to local, and Bearer token authentication must be configured.

Installation and Usage

Copying the release to the x64dbg folder automatically starts the server. Building from source requires Zig 0.16-dev or higher, and it is released under the MIT license, allowing for commercial use. This tool enhances the real-time control capabilities of AI assistants in reversing and security research environments that require dynamic debugging.