x64dbg MCP Server

What it does

• MCP server inside x64dbg — lets Claude inspect and control a live debugger session
• HTTP transport with Bearer auth; x64 on :9094, x32 on :9095
• SSE endpoint kept for legacy clients

When to use it

Reverse engineering and malware analysis with an AI pair: Claude reads disassembly, sets breakpoints, steps through code in a real x64dbg session.

Getting started

Download the latest release, copy `dist/` contents into the x64dbg root folder (deploys both x32 and x64), launch x64dbg — the server starts automatically. Client config:

{
  "x64dbg": {
    "type": "http",
    "url": "http://localhost:9094/",
    "headers": {
      "Authorization": "Bearer YOUR_TOKEN_HERE"
    }
  }
}

Things to know

Binds 0.0.0.0 by default — reachable from the network unless you firewall it; keep the Bearer token set. Debugger control means Claude can mutate the target process — only point it at binaries you intend to modify.