Mcp Capstone
Wraps the Capstone disassembly framework so Claude can analyze binary code across 20+ architectures including x86, ARM, RISC-V, and even EVM bytecode. You get tools for full detailed disassembly, lightweight variants for speed, and helpers to check architecture support and list available constants. Reach for this when you need to reverse engineer binaries, understand assembly instructions, or analyze malware samples in conversation. The disasm tool takes hex strings and returns structured instruction data with addresses, mnemonics, and operands. Built on Capstone 5.0.7, so you're working with a mature disassembly engine that handles everything from 68K to WebAssembly.
- tools
- 12
- transport
- STDIO
- last updated
- Apr 9, 2026
Tools
12 toolsPublic tool metadata for what this MCP can expose to an agent.
get_versionGet Capstone version
Get Capstone version
No parameter schema in public metadata yet.
check_supportCheck architecture support
Check architecture support
No parameter schema in public metadata yet.
list_architecturesList all architectures
List all architectures
No parameter schema in public metadata yet.
disasmFull disassembly with details
Full disassembly with details
No parameter schema in public metadata yet.
disasm_liteLightweight disassembly
Lightweight disassembly
No parameter schema in public metadata yet.
disasm_quickQuick disassembly
Quick disassembly
No parameter schema in public metadata yet.
get_architecturesAll architecture constants
All architecture constants
No parameter schema in public metadata yet.
get_modesAll mode constants
All mode constants
No parameter schema in public metadata yet.
get_optionsAll option constants
All option constants
No parameter schema in public metadata yet.
get_operandsAll operand type constants
All operand type constants
No parameter schema in public metadata yet.
get_groupsAll instruction group constants
All instruction group constants
No parameter schema in public metadata yet.
get_errorsAll error constants
All error constants
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
mcp-capstone
MCP server that exposes Capstone 5.0.7 disassembly framework functionalities as tools and resources, enabling LLMs to perform binary disassembly, reverse engineering, and instruction analysis.
Install
pip install mcp-capstone
Usage
CLI
mcp-capstone
Python
from mcp_capstone import disasm, get_version
# Get version
version = get_version()
print(f"Capstone {version['major']}.{version['minor']}")
# Disassemble x86-64 code
instructions = disasm("8b440404", arch="x86", mode="64")
for insn in instructions:
print(f"0x{insn['address']:x}: {insn['mnemonic']} {insn['op_str']}")
Supported Architectures
Details
- Repository
- github.com/daedalus/mcp-capstone
- Package
mcp-capstone- Transport
- STDIO
- Registry
- MCP registry, active