qwen-dap-mcp
Give coding agents a real native debugger.
qwen-dap-mcp is a local Debug Adapter Protocol (DAP) → Model Context Protocol (MCP) bridge for native crash debugging, hang/deadlock triage, crash dumps, differential runtime analysis, remote targets, and bounded fix/verify workflows.
Built for Qwen Code, usable from any stdio MCP client, and designed to expose debugger evidence without turning MCP into a general-purpose shell.
Quick start · Capabilities · Debugger support · Safety · Docs · Contributing
Why this exists
Coding agents can read source and propose patches, but native failures often cannot be diagnosed reliably from source alone. The useful evidence lives at runtime: thread stacks, registers, locals, disassembly, exception state, modules, memory, wait states, symbols, and crash dumps.
qwen-dap-mcp makes that evidence available through MCP and adds agent-oriented workflows on top of raw debugger primitives:
- Evidence first — inspect the actual failing process instead of guessing from source.
- High-level workflows — crash, hang, differential, writer-tracing, dump, and verification tools are designed for agents rather than humans driving a debugger console.
- Bounded automation — autonomous fix/verify state is explicit, serializable, iteration-limited, and re-checks the original reproduction.
- Small default surface — the normal agent toolset stays compact while advanced low-level DAP tools remain opt-in.
- Local by default — the MCP server communicates over stdio and debugger adapters run locally unless you explicitly configure a validated remote target.
Quick start
Qwen Code
Install directly from GitHub:
qwen extensions install SLP-DEV1/qwen-dap-mcp
Or install the published npm package:
qwen extensions install @slp-dev1/qwen-dap-mcp
Then verify the extension:
/mcp
/skills
You should see the qwen-dap-mcp server and the bundled native-runtime-debug skill.
Any stdio MCP client
npx -y @slp-dev1/qwen-dap-mcp
Typical configuration:
{
"mcpServers": {
"qwen-dap-mcp": {
"command": "npx",
"args": ["-y", "@slp-dev1/qwen-dap-mcp"]
}
}
}
CLI discovery is available without starting the stdio server:
qwen-dap-mcp --help
qwen-dap-mcp --version
30-second example
You: Debug why app.exe crashes with --repro
Coding agent
↓
qwen-dap-mcp starts a DAP debugger
↓
captures the native failure + project-controlled frame
↓
correlates stack + registers + locals + disassembly
↓
backtracks runtime evidence toward the likely producer
↓
agent applies a minimal source fix
↓
builds and repeats the original reproduction
↓
verifies whether the original crash fingerprint is gone
The MCP server supplies debugger evidence and bounded workflow state. Source editing, builds, tests, and source-control operations stay with the coding agent's normal authorized tools.
What it does
| Problem | Agent-oriented capability |
|---|---|
| Native crash | Diagnose a stopped process, identify project frames, collect runtime evidence, and drive bounded fix/verify loops |
| Hang or deadlock | Observe, pause when needed, capture all-thread stacks, classify waits, and surface conservative deadlock candidates |
| Good run vs bad run | Compare stopped sessions semantically while suppressing raw ASLR/address noise |
| Suspicious value | Trace real writers with data breakpoints/watchpoints and bounded temporal tracing |
| Crash dump | Inspect Windows minidumps and supported LLDB/GDB postmortem targets without launching the failed program |
| Remote native target | Attach through validated gdbserver / lldb-server gdbserver endpoints with loopback-first policy |
| Multiple targets | Keep isolated DAP sessions and route requests by sessionId |
| Agent safety | Keep the default surface compact and optionally gate executable/mutating DAP actions with HOL Guard |
Default agent tool surface
The default toolset intentionally exposes 14 high-signal tools:
| Tool | Purpose |
|---|---|
debug_this_crash | High-level native crash diagnosis and bounded autonomous verification |
debug_this_hang | High-level hang/deadlock triage |
debug_compare_runs | Semantic comparison of baseline and failing stopped sessions |
debug_trace_value | Bounded temporal tracing of a suspicious value |
debug_diagnose_stop | Diagnose the current debugger stop |
debug_source_disassembly | Correlate source with nearby native instructions |
debug_find_writer | Stop at the code that writes a watched value |
debug_run_to_stop | Continue/launch toward a bounded meaningful stop |
debug_open_dump | Open supported postmortem dump/core targets |
debug_snapshot | Capture structured runtime evidence |
debug_status | Inspect debugger/session state |
debug_continue | Continue the active target |
debug_disconnect | Cleanly end a debugger session |
debug_sessions | Create, inspect, and remove isolated sessions |
Need raw stacks, scopes, variables, memory, modules, breakpoints, evaluation, stepping, or adapter-specific controls? See the opt-in full toolset in docs/toolsets.md.
Debugger support
| Adapter / target | Supported use |
|---|---|
| CodeLLDB | Local native launch/attach and Windows minidump workflows |
LLVM lldb-dap | Native launch/attach, core-file inspection, and lldb-server gdbserver remote attach |
| GNU GDB 14+ DAP | Native launch/attach, core-file workflows, and hardened gdbserver remote attach |
Adapter discovery, prerequisites, and platform-specific setup are documented in docs/README.md.
More than raw DAP
Raw DAP is intentionally low level. qwen-dap-mcp keeps raw debugger access available in the full toolset, but its default surface focuses on workflows an agent can reason about directly.
| Source only | Raw DAP | qwen-dap-mcp agent tools | |
|---|---|---|---|
| Runtime debugger evidence | — | ✓ | ✓ |
| High-level crash diagnosis | — | — | ✓ |
| All-thread hang triage | — | manual | ✓ |
| Good-vs-bad semantic diff | — | manual | ✓ |
| Explicit bounded fix/verify state | — | — | ✓ |
| Verification fingerprinting | — | — | ✓ |
Safety by design
A debugger can execute and mutate target state, so the bridge treats that power explicitly.
- No arbitrary shell tool is exposed by the MCP server.
- No source-writing primitive is exposed by the MCP server.
- No general memory-write primitive is part of the default agent surface.
- Remote endpoints are validated and non-loopback access requires explicit allowlisting.
- Autonomous workflow state is explicit rather than hidden inside a background loop.
- Optional HOL Guard 2.2+ integration can fail closed before protected adapter startup or executable/mutating DAP actions cross the debugger boundary.
Read the full policy and threat model in docs/hol-guard.md and SECURITY.md.
Repro labs and benchmark harness
The repository includes deterministic native fixtures so behavior can be tested instead of demonstrated only with screenshots:
npm run demo:build -- null-pointer
npm run demo:repro -- null-pointer
npm run demo:hang:build -- deadlock
npm run demo:hang:repro -- deadlock
benchmark/ also contains a reproducible comparison harness for source-only, dap-raw, and qwen-dap-mcp workflows. It deliberately ships without invented performance numbers; publishable results should record the exact model, settings, commit, reproduction, raw outcome, and verification status.
Documentation
Start with the documentation index.
| Topic | Guide |
|---|---|
| CodeLLDB on Windows | docs/CODELLDB_WINDOWS.md |
LLVM lldb-dap | docs/lldb-dap.md |
| GNU GDB DAP | docs/gdb-dap.md |
| Remote debugging | docs/remote-debugging.md |
| Hang/deadlock analysis | docs/hang-debugging.md |
| Differential debugging | docs/differential-debugging.md |
| Agent vs full toolsets | docs/toolsets.md |
| HOL Guard integration | docs/hol-guard.md |
| Publishing / releases | docs/publishing.md |
Development
Requirements: Node.js 20+.
git clone https://github.com/SLP-DEV1/qwen-dap-mcp.git
cd qwen-dap-mcp
npm ci
npm run check
npm run check builds TypeScript, runs the test suite, and validates the self-contained Qwen extension package. CI additionally exercises native crash/hang fixtures, adapter-specific real smoke tests, package output, HOL Guard compatibility, and the container build.
See CONTRIBUTING.md before opening a pull request.
Distribution
Published as:
- npm:
@slp-dev1/qwen-dap-mcp - MCP Registry:
io.github.SLP-DEV1/qwen-dap-mcp - Qwen Code extension:
qwen extensions install SLP-DEV1/qwen-dap-mcp - GitHub Releases: self-contained extension archives
Current release details are in CHANGELOG.md and GitHub Releases.
Contributing
Bug reports, reproducible native failure cases, adapter compatibility findings, documentation fixes, and focused feature proposals are welcome. Please keep additions evidence-driven and prefer high-level agent workflows over expanding the default surface with raw debugger commands.
If this project saves you a debugging session, consider starring the repository — it helps other MCP and coding-agent users discover it.