Capstone MCP server
MCP server exposing Capstone 5.0.7 disassembly framework
0 stars16 downloads/wk
Reviews
Write oneNobody has reviewed Capstone yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Capstone tools (14)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_supportCheck if a specific architecture is supported by Capstone.
disasmDisassemble raw binary code.
disasm_liteLightweight disassembly (returns only mnemonic and bytes).
disasm_quickQuick disassembly without detailed operand info.
get_access_typesGet all operand access type constants.
get_architecturesGet all architecture constants.
get_errorsGet all error constants.
get_groupsGet all instruction group constants.
get_modesGet all mode constants.
get_operandsGet all operand type constants.
get_optionsGet all option constants.
get_syntaxesGet all syntax option constants.
get_versionGet Capstone engine version information.
list_architecturesList all supported architectures.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan4 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 159 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Capstone compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,273 servers
- Tools
- 14
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 16
- more than 4% of 11,915 servers with a package
What its tools let an agent do: 14 read
Install Capstone in Claude Code, Cursor or VS Code
claude mcp add mcp-capstone -- uvx mcp-capstone
What the publisher says
From the Capstone repository's README, as published. We do not edit it. Read it on GitHub
mcp-capstone
MCP server that exposes Capstone 5.0.7 disassembly framework functionalities as tools and resources, enabling LLMs to perform binary disassembly, reverse engineering, and instruction analysis.
Install
pip install mcp-capstoneUsage
CLI
mcp-capstonePython
from mcp_capstone import disasm, get_version
# Get version
version = get_version()
print(f"Capstone {version['major']}.{version['minor']}")
# Disassemble x86-64 code
instructions = disasm("8b440404", arch="x86", mode="64")
for insn in instructions:
print(f"0x{insn['address']:x}: {insn['mnemonic']} {insn['op_str']}")Supported Architectures
- x86 (16/32/64-bit)
- ARM (ARM, Thumb, ARM mode)
- AArch64 (ARMv8)
- MIPS (MIPS32/64, MIPS2/3, R6)
- PowerPC (32/64-bit, SPE, QPX)
- RISC-V (RV32/64GC)
- SPARC (V8/V9)
- SystemZ
- M68K (68000-68060)
- M680X (6301/6309/6800/6805/6808/6809/6811/CPU12/HCS08)
- TriCore
- TMS320C64X
Tools
Development
git clone https://github.com/daedalus/mcp-capstone.git
cd mcp-capstone
pip install -e ".[test]"
# run tests
pytest
# format
ruff format src/ tests/
# lint
ruff check src/ tests/
# type check
mypy src/mcp-name: io.github.daedalus/mcp-capstone
Nothing above is checked by us. What we check is on the safety report.
Capstone: common questions
- Is Capstone MCP server safe?
- Mostly: it is graded B (82/100). Read the Capstone safety report
- How do I install Capstone?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Capstone need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Capstone maintained?
- The last commit was 195 days ago (2026-04-21). The latest release is v0.1.0.
- How does Capstone compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,273 servers); tools 14 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.