x64dbg-mcp-server

x64dbg-MCP Server is a native plugin for the x64dbg Windows debugger that exposes its functionality over MCP, so an AI assistant can load a binary, set breakpoints, step, read registers and memory, scan patterns, extract strings and cross-references, and run PE analysis such as OEP detection and module dumping. It is written in Zig with no runtime dependencies, produces a single binary for both x32 and x64, and supports Streamable HTTP and SSE transports. The README gives an example session where the assistant loads calc.exe, breaks at the entry point and reads registers, memory and the call stack on request.

To install, copy the contents of `dist/` into the x64dbg folder and start x64dbg; the server starts automatically on port 9094 for x64 and 9095 for x32. Authentication is mandatory: a bearer token is generated on first run and required on every request, and the README says the server can read and write process memory, so never expose it to untrusted networks. The README's feature list says 84 tools and the tools section says 72, so treat the exact count as approximate. A disclaimer limits intended use to legitimate reverse engineering, malware analysis, security research and education, with proper authorization. It is MIT licensed and builds with Zig 0.16-dev or later.