cheatengine-mcp-bridge MCP — 使用场景, 安装 & 实时演示

为什么要用

核心特性

43 MCP tools for memory operations, code analysis, and debugging
Read/write integers, floats, strings, and follow pointer chains
Disassemble functions, identify C++ objects via RTTI, find cross-references
Hardware breakpoints and Ring -1 invisible tracing via DBVM
Auto-detect structures, field types, and generate AOB signatures

实时演示

实际使用效果

cheatengine-mcp-bridge.replay ▶ 就绪

0/0

安装

选择你的客户端

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "cheatengine-mcp-bridge": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/miscusi-peek/cheatengine-mcp-bridge"
      ]
    }
  }
}

打开 Claude Desktop → Settings → Developer → Edit Config。保存后重启应用。

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "cheatengine-mcp-bridge": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/miscusi-peek/cheatengine-mcp-bridge"
      ]
    }
  }
}

Cursor 使用与 Claude Desktop 相同的 mcpServers 格式。项目级配置优先于全局。

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "cheatengine-mcp-bridge": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/miscusi-peek/cheatengine-mcp-bridge"
      ]
    }
  }
}

点击 Cline 侧栏中的 MCP Servers 图标，然后选 "Edit Configuration"。

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "cheatengine-mcp-bridge": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/miscusi-peek/cheatengine-mcp-bridge"
      ]
    }
  }
}

格式与 Claude Desktop 相同。重启 Windsurf 生效。

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "cheatengine-mcp-bridge",
      "command": "TODO",
      "args": [
        "See README: https://github.com/miscusi-peek/cheatengine-mcp-bridge"
      ]
    }
  ]
}

Continue 使用服务器对象数组，而非映射。

~/.config/zed/settings.json

{
  "context_servers": {
    "cheatengine-mcp-bridge": {
      "command": {
        "path": "TODO",
        "args": [
          "See README: https://github.com/miscusi-peek/cheatengine-mcp-bridge"
        ]
      }
    }
  }
}

加入 context_servers。Zed 保存后热重载。

claude mcp add cheatengine-mcp-bridge -- TODO 'See README: https://github.com/miscusi-peek/cheatengine-mcp-bridge'

一行命令搞定。用 claude mcp list 验证，claude mcp remove 卸载。

使用场景

实战用法： cheatengine-mcp-bridge

How to solve a CTF memory analysis challenge with Cheat Engine MCP

👤 CTF participants working on binary exploitation or game hacking challenges ⏱ ~30 min intermediate

何时使用： You have a CTF challenge that requires finding and manipulating values in a running process.

前置条件

Windows with Cheat Engine installed — Download from cheatengine.org
MCP bridge running — pip install -r MCP_Server/requirements.txt

步骤

Scan for the target value

Attach to the CTF challenge process and scan for an integer value of 100 (my current score).✓ 已复制

→ List of memory addresses containing the value 100
Narrow down the address

I changed the score to 95. Rescan to find which address actually holds the score.✓ 已复制

→ Filtered list with likely candidate addresses
Trace the pointer chain

Find the pointer chain to this address so we can reliably locate it after restart.✓ 已复制

→ Stable pointer path from base module

结果： A reliable pointer chain to the target value for the CTF solution.

注意事项

Value stored as float instead of integer — Try scanning as float or double if integer scan returns no results

Reverse engineer game data structures with AI assistance

👤 Game modders and reverse engineers analyzing proprietary software they own ⏱ ~45 min advanced

何时使用： You want to understand the memory layout of a program's data structures for educational purposes.

前置条件

Cheat Engine + MCP bridge running — pip install mcp pywin32
Target process you own or have authorization to analyze — Launch the application

步骤

Dissect the structure

Attach to the process and dissect the data structure at address 0x1A3F0000. Identify field types and sizes.✓ 已复制

→ Structure layout with field offsets, types, and likely names
Find RTTI class info

Check if this address has RTTI information. What C++ class does it belong to?✓ 已复制

→ Class name and inheritance chain from RTTI

结果： A documented data structure layout with field types and class hierarchy.

注意事项

RTTI stripped from release builds — Fall back to manual structure dissection and pattern analysis

组合

与其他 MCP 搭配，撬动十倍杠杆

cheatengine-mcp-bridge + filesystem

Export discovered structures and pointer maps to files for documentation

Document the data structures we found and save them as a markdown file in my notes folder.✓ 已复制

工具

此 MCP 暴露的能力

工具	输入参数	何时调用
read_memory	address: str, size: int	Read raw bytes from a memory address
read_integer	address: str, size?: int	Read an integer value from memory
scan_all	value: str, type: str	Scan process memory for a specific value
aob_scan	pattern: str	Search for a byte pattern (array of bytes) in memory
disassemble	address: str, count?: int	Disassemble instructions at an address
dissect_structure	address: str, size?: int	Auto-detect structure layout at an address
get_rtti_classname	address: str	Get the C++ class name via RTTI for an object pointer
set_breakpoint	address: str, type?: str	Set a hardware breakpoint for debugging

成本与限制

运行它的成本

API 配额: N/A — all local
每次调用 Token 数: 200–1000 tokens per tool call
费用: Free — requires Cheat Engine (free) and Windows
提示: Use targeted scans (aob_scan, read_integer) instead of full memory dumps to reduce output size.

安全

权限、密钥、影响范围

凭据存储： N/A — local tool, no external credentials

数据出站： All operations are local via Named Pipes. No network calls.

⚠ This tool is designed for authorized security research, CTF competitions, and defensive analysis only. Do not use it against systems you don't own or have written authorization to test.
Windows only — requires Named Pipes support and Cheat Engine installed.
Memory manipulation can crash target processes. Save your work before attaching.

故障排查

常见错误与修复

Named Pipe connection failed

Ensure Cheat Engine is running and the Lua bridge script is loaded. Check that both CE and the MCP server run with matching privilege levels (both admin or both user).

验证： Check Cheat Engine's Lua console for pipe creation messages

Access denied reading memory

Run Cheat Engine as Administrator. Some processes require elevated privileges for memory access.

验证： Right-click Cheat Engine → Run as Administrator

Scan returns no results

Try different value types (float vs int, 4-byte vs 8-byte). The value might be stored in an unexpected format.

验证： Try a scan with 'All' value type

替代方案

cheatengine-mcp-bridge 对比其他方案

替代方案	何时用它替代	权衡
ida-pro-mcp	You need static binary analysis and disassembly rather than live memory manipulation	Static analysis only but much deeper code understanding
mcp-windbg	You need kernel-level debugging or crash dump analysis on Windows	More powerful debugging but steeper learning curve

cheatengine-mcp-bridge

为什么要用

核心特性

实时演示

实际使用效果

安装

选择你的客户端

使用场景

实战用法： cheatengine-mcp-bridge

How to solve a CTF memory analysis challenge with Cheat Engine MCP

前置条件

步骤

注意事项

Reverse engineer game data structures with AI assistance

前置条件

步骤

注意事项

组合

与其他 MCP 搭配，撬动十倍杠杆

工具

此 MCP 暴露的能力

成本与限制

运行它的成本

安全

权限、密钥、影响范围

故障排查

常见错误与修复

替代方案

cheatengine-mcp-bridge 对比其他方案

更多

资源