{ "added_at": "2026-10-19", "additional_evidence_urls": [ "https://github.com/duty1g/x64dbg-mcp-server/blob/18be30ab417a371fd441de68d7252d2bc1830f11/SKILL.md", "https://github.com/duty1g/x64dbg-mcp-server/blob/18be30ab417a371fd441de68d7252d2bc1830f11/src/core/config.zig", "https://github.com/duty1g/x64dbg-mcp-server/blob/18be30ab417a371fd441de68d7252d2bc1830f11/src/core/mcp_server.zig", "https://github.com/duty1g/x64dbg-mcp-server/blob/18be30ab417a371fd441de68d7252d2bc1830f11/LICENSE", "https://github.com/duty1g/x64dbg-mcp-server/releases/tag/v1.6" ], "category": "agent-mcp", "description_en": "Native x64dbg plugin, written in Zig for both x32dbg and x64dbg, that serves an MCP endpoint over streamable HTTP and SSE from inside the debugger. Agents can load or attach to a process, set software, hardware, memory and conditional breakpoints, step and trace, read registers, call stacks, threads, memory maps, imports, strings and cross-references, and run arbitrary x64dbg commands. A bundled SKILL.md guide tells agents to confirm the debugger state before every action.", "description_zh": "以 Zig 编写、同时支持 x32dbg 与 x64dbg 的原生 x64dbg 插件，在调试器内部通过 streamable HTTP 和 SSE 提供 MCP 端点。智能体可以加载或附加进程，设置软件、硬件、内存及条件断点，单步与跟踪执行，读取寄存器、调用栈、线程、内存映射、导入表、字符串和交叉引用，并执行任意 x64dbg 命令。随附的 SKILL.md 指南要求智能体在每次操作前先确认调试器状态。", "entry_url": "https://awesomerea.org/resources/x64dbg-mcp-server/", "entry_url_zh": "https://awesomerea.org/zh/resources/x64dbg-mcp-server/", "evidence_url": "https://github.com/duty1g/x64dbg-mcp-server/blob/18be30ab417a371fd441de68d7252d2bc1830f11/README.md", "group": "agents", "id": "x64dbg-mcp-server", "json_url": "https://awesomerea.org/resources/x64dbg-mcp-server/record.json", "kind": "integration", "markdown_url": "https://awesomerea.org/resources/x64dbg-mcp-server/index.md", "markdown_url_zh": "https://awesomerea.org/zh/resources/x64dbg-mcp-server/index.md", "name": "x64dbg-MCP Server", "name_zh": "x64dbg-MCP Server 调试器 MCP 插件", "record_type": "resource", "relationship": "independent-agent-integration", "requirements": [ "Windows with x64dbg; the plugin loads into x32dbg or x64dbg and resolves the debugger API at runtime. Install by copying the x32 and x64 plugin folders from the v1.6 release zip (2026-10-12) or a dist/ build into the x64dbg root; building needs Zig 0.16-dev or later and can cross-compile from Linux, macOS or WSL. The server starts automatically with the debugger.", "Ports are 9094 for x64 and 9095 for x32. The README lists 0.0.0.0 as the default bind address, but the reviewed configuration code has defaulted to 127.0.0.1 since v1.2; the plugin's config dialog changes the address, port and token and saves them to mcp_config.json beside the x64dbg executable. A bearer token generated on first run is required on every request, and traffic is unencrypted HTTP, so the README warns against exposing the server to untrusted networks.", "Many tools change the target or debugger state: memory writes and patches, instruction assembly, register writes, memory allocation, thread suspension, breakpoint commands and arbitrary debugger commands. DumpMemory and DumpModule write files to disk, and OEP detection and module dumping are aimed at packed executables.", "MIT. The README limits use to authorized reverse engineering, malware analysis, security research and education." ], "requirements_zh": [ "需要 Windows 和 x64dbg；插件加载到 x32dbg 或 x64dbg 中，并在运行时解析调试器 API。安装时将 v1.6 发布 zip（2026-10-12）或 dist/ 构建产物中的 x32 与 x64 插件目录复制到 x64dbg 根目录；构建需要 Zig 0.16-dev 或更新版本，可在 Linux、macOS 或 WSL 上交叉编译。服务器随调试器启动自动运行。", "x64 使用 9094 端口，x32 使用 9095 端口。README 称默认绑定地址为 0.0.0.0，但所审阅的配置代码自 v1.2 起默认绑定 127.0.0.1；插件配置对话框可修改地址、端口和令牌，并保存到 x64dbg 可执行文件旁的 mcp_config.json。首次运行时生成的 Bearer 令牌是每个请求的必需项；通信使用未加密的 HTTP，因此 README 警告不要把服务器暴露给不受信任的网络。", "许多工具会改变目标进程或调试器状态：写入和修补内存、汇编指令、写寄存器、分配内存、挂起线程、设置断点命令以及执行任意调试器命令。DumpMemory 和 DumpModule 会把文件写入磁盘，OEP 检测和模块转储面向加壳的可执行文件。", "采用 MIT 许可。README 将用途限定于经授权的逆向工程、恶意软件分析、安全研究和教学。" ], "targets": [ "binary" ], "url": "https://github.com/duty1g/x64dbg-mcp-server", "verification": "source-reviewed", "verified_at": "2026-10-18" }