Summary
Wraps the Capstone disassembly framework so Claude can analyze binary code across 20+ architectures including x86, ARM, RISC-V, and even EVM bytecode. You get tools for full detailed disassembly, lightweight variants for speed, and helpers to check architecture support and list available constants. Reach for this when you need to reverse engineer binaries, understand assembly instructions, or analyze malware samples in conversation. The disasm tool takes hex strings and returns structured instruction data with addresses, mnemonics, and operands. Built on Capstone 5.0.7, so you're working with a mature disassembly engine that handles everything from 68K to WebAssembly.
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →mcp-capstone
MCP server that exposes Capstone 5.0.7 disassembly framework functionalities as tools and resources, enabling LLMs to perform binary disassembly, reverse engineering, and instruction analysis.
Install
pip install mcp-capstone
Usage
CLI
mcp-capstone
Python
from mcp_capstone import disasm, get_version
# Get version
version = get_version()
print(f"Capstone {version['major']}.{version['minor']}")
# Disassemble x86-64 code
instructions = disasm("8b440404", arch="x86", mode="64")
for insn in instructions:
print(f"0x{insn['address']:x}: {insn['mnemonic']} {insn['op_str']}")
Supported Architectures
- x86 (16/32/64-bit)
- ARM (ARM, Thumb, ARM mode)
- AArch64 (ARMv8)
- MIPS (MIPS32/64, MIPS2/3, R6)
- PowerPC (32/64-bit, SPE, QPX)
- RISC-V (RV32/64GC)
- SPARC (V8/V9)
- SystemZ
- M68K (68000-68060)
- M680X (6301/6309/6800/6805/6808/6809/6811/CPU12/HCS08)
- TriCore
- TMS320C64X
- WebAssembly
- XCore
- BPF (Classic/Extended)
- EVM (Ethereum Virtual Machine)
Tools
| Tool | Description |
|---|---|
get_version | Get Capstone version |
check_support | Check architecture support |
list_architectures | List all architectures |
disasm | Full disassembly with details |
disasm_lite | Lightweight disassembly |
disasm_quick | Quick disassembly |
get_architectures | All architecture constants |
get_modes | All mode constants |
get_options | All option constants |
get_operands | All operand type constants |
get_groups | All instruction group constants |
get_errors | All error constants |
Development
git clone https://github.com/daedalus/mcp-capstone.git
cd mcp-capstone
pip install -e ".[test]"
# run tests
pytest
# format
ruff format src/ tests/
# lint
ruff check src/ tests/
# type check
mypy src/
mcp-name: io.github.daedalus/mcp-capstone
Featured
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →