Skip to main content
Glama
McuBuddy
by cunjun

McuBuddy — AI-Powered MCU and Embedded Firmware Debugging MCP Server

Python MCP License

Languages: English | 中文

Extend AI from firmware analysis to real MCUs, closing the loop across diagnosis, code changes, build, flashing, and validation in verified environments.

McuBuddy is a Model Context Protocol (MCP) server for MCU board-level debugging. It exposes debug probes, Keil MDK projects, ELF/DWARF symbols, CPU and memory state, SVD peripheral registers, UART/RTT logs, FreeRTOS state, Flash operations, and GDB servers as structured tools that AI assistants can call.

It is designed for firmware development, board bring-up, fault isolation, debugging automation, and AI-assisted validation.

McuBuddy starts with 19 stable tools in the default toolset. Add only the domains a workflow needs with MCUBUDDY_TOOLSETS=probe,diagnose (available domains: probe, diagnose, build_flash, rtos, logs, and experimental). The core profile is the only profile; startup toolset selection is explicit and immutable.

IMPORTANT

Automation does not replace engineering responsibility. Humans remain responsible for goals and acceptance criteria, wiring and power safety, high-risk operation approval, code review, and new environment validation. Motors, relays, and other safety-related devices also require recovery plans and independent protection.

Quick links: Quick Start · Project Guide · Tool Reference · Support Matrix

✨ Key Features

  • Real-hardware debugging: Discover and connect to ST-Link, J-Link, CMSIS-DAP, and other probes; control target execution; and inspect registers, memory, breakpoints, and watchpoints.

  • Keil project workflow: Discover .uvprojx / .uvproj files, select a target, invoke Keil MDK through UV4.exe for builds or downloads, and feed the generated AXF/ELF into debugging.

  • Source-level fault diagnosis: Use ELF/DWARF data to resolve addresses to functions, source lines, local variables, and call stacks when investigating HardFaults, startup failures, stack overflows, and memory corruption.

  • Peripheral and RTOS inspection: Decode peripheral registers through CMSIS-SVD and inspect FreeRTOS tasks, task contexts, and stack usage.

  • Logs and runtime observability: Read UART, RTT, and selected J-Link SWO logs, and manage pyOCD/J-Link GDB server lifecycles.

  • Evidence-driven results: Return structured target, state, and validation evidence so AI can continue an investigation instead of guessing code changes from symptoms alone.

  • Actionable hardware boundaries: Distinguish MCU limitations, firmware-inapplicable tools, configuration problems, tool failures, and insufficient evidence, including impact and the next safe check so unsupported paths are not debugged as firmware defects.

Related MCP server: JLink MCP Server

🏗️ How It Works

flowchart LR
    AI["AI Client<br/>Codex / Claude Code"] --> MCP["McuBuddy<br/>MCP Server"]
    MCP --> EB["Execution Boundary<br/>Serialized Session"]
    EB --> TOOLS["Debugging Tools<br/>Diagnostics / Symbols / SVD / RTOS / Logs"]
    TOOLS --> KEIL["Keil MDK / UV4.exe<br/>Build / Optional Download"]
    TOOLS --> PROBE["Probe Backends<br/>pyOCD / J-Link / probe-rs"]
    KEIL --> IMAGE["AXF / ELF / HEX / BIN"]
    IMAGE --> TOOLS
    PROBE --> BOARD["Real MCU Board"]

MCP is not a protocol for invoking Keil. The AI calls McuBuddy through MCP; McuBuddy then uses Keil MDK through UV4.exe, pyOCD, J-Link, or another internal backend as required.

🚀 Quick Start

1. Prerequisites

Basic requirements:

  • Python 3.10 or later;

  • a powered MCU development board;

  • a correctly connected ST-Link, J-Link, or CMSIS-DAP probe;

  • the target chip name;

  • preferably, an ELF/AXF image containing debug information.

Keil build and download features require Windows with Keil MDK installed. McuBuddy invokes µVision through UV4.exe, including in Keil MDK v5 installations.

2. Installation

pip install "McuBuddy @ git+https://github.com/cunjun/McuBuddy.git"

This installs McuBuddy once for all local firmware projects. Do not clone or copy the McuBuddy repository into each target project. McuBuddy is a local-only MCP backend: the client starts one stdio process per connection, and McuBuddy does not expose HTTP, SSE, WebSocket, or another MCP network listener.

The target project, Keil installation, ELF/SVD files, probe, and serial port must be directly visible to the machine running McuBuddy. To update, reinstall from the official repository at https://github.com/cunjun/McuBuddy; McuBuddy never checks for, downloads, or installs updates automatically.

Install the optional dependency when using the J-Link Python backend:

pip install "McuBuddy[jlink]"

For development from source:

git clone https://github.com/cunjun/McuBuddy.git
cd McuBuddy
pip install -e ".[dev]"

3. Configure an MCP Client

{
  "mcpServers": {
    "McuBuddy": {
      "command": "McuBuddy",
      "args": []
    }
  }
}

For a Windows source checkout, explicitly configure the virtual-environment Python executable and working directory. See Installation and First Connection, then restart the AI client.

4. Run a First Read-Only Check

After connecting the probe and powering the board, tell the AI:

Use McuBuddy to inspect the current debugging environment, discover connected probes,
and perform a first read-only check of the board without writing Flash.
Before starting, tell me what information is still missing.

The recommended sequence is to check the environment and target first, then configure the probe and read the minimum target state:

doctor()
list_connected_probes()
match_chip_name("py32f030x8")
configure_probe(target="py32f030x8", backend="pyocd")
probe_connect(target="py32f030x8")
read_stopped_context()

probe_connect and read_stopped_context are available in the default core profile. Reading a stable stopped context may halt the target, so it is still execution-changing. If the device must not be halted, instruct the AI to perform only non-intrusive probe and environment checks.

💬 Automated Debugging Example

Use McuBuddy to debug <project path>. The MCU is <exact model>, and the probe is
<ST-Link/J-Link/CMSIS-DAP>. First collect board-level evidence and locate the problem. After
authorization, modify the code, build and flash it, then validate the result on the real board.

For the evidence-first decision order and common scenarios, see Common Debugging Workflows.

🧰 Backends and Hardware Validation

Path

Current Role

Main Capabilities

pyOCD + ST-Link/CMSIS-DAP

Primary backend

Control, memory, Flash, source debugging, RTT, RTOS, and GDB server

J-Link

Primary backend

Control, memory, Flash, source debugging, native RTT, DWT, and GDB server

probe-rs sidecar

Extended preview

ARM/RISC-V/Xtensa discovery, configurable core control, registers, memory, hardware breakpoints, Flash, and RTT

Keil MDK (Windows, via UV4.exe)

Build/download backend

Project discovery, target configuration, build, logs, and optional download; supports MDK v5 installations

Primary validation coverage includes:

  • STM32L496VETx + ST-Link / pyOCD;

  • STM32F103C8 + J-Link;

  • built-in target preflight profiles for STM32F103ZE and PY32F030X8.

“Implemented in code” does not mean “validated on every board.” Use the Support Matrix and list_validation_records() as the source of truth.

🛡️ Safety Model

McuBuddy provides machine-readable safety classifications through list_tool_safety().

Category

Examples

Default Requirement

Read-only

Target matching, register/memory reads, symbol resolution, logs, diagnostics

No confirmation required

Execution-changing

halt, resume, reset, continue, stepping

Does not write Flash, but changes execution state

Runtime-state write

Memory/register writes, breakpoints, watchpoints, SVD field writes

Explicit confirmation

Persistent destructive operation

Flash erase/program, Keil firmware download

Explicit confirmation

Host process

Keil build, GDB server start/stop

Starts or stops a local process

Safety principles:

  1. For an unknown target, match the chip and probe first; do not guess addresses.

  2. Read evidence before halting, resetting, or writing.

  3. Before a Flash operation, confirm the target, scope, image, and recovery method.

  4. For motors, relays, power switches, and other actuators, prefer breakpoints and low-energy tests.

  5. Send actuator commands with uart_send_with_cleanup, then call finish_debug_session before returning a final conclusion. Server shutdown repeats the same idempotent cleanup as a fallback.

🔒 Sessions and Concurrency

  • Operations that share probe, Keil, ELF/SVD, log, and runtime configuration are serialized within the same Session.

  • Different sessions can run concurrently when they control unrelated boards.

  • Stateless queries such as target matching and tool safety information can run alongside session operations.

  • Cancellation cannot forcibly terminate a call that has entered a synchronous SDK. The server waits for the worker thread to finish before releasing the session lock.

This prevents one request from switching backends, disconnecting the probe, or changing shared state while another probe operation is still running.

📦 mcubuddy Skill

The repository includes skills/mcubuddy, which guides Codex and Claude Code to use these tools in an “evidence first, judgment second” sequence instead of treating MCP tools as an unordered command list.

The Skill is an optional workflow enhancement, not a prerequisite for hardware debugging. A correctly installed and configured local McuBuddy MCP server remains fully usable without it.

Installed releases bundle the Skill. Register the persistent Codex integration without cloning the repository:

uv tool install McuBuddy
McuBuddy setup codex --confirm --json

Install for Codex:

python .\skills\mcubuddy\scripts\install_skill.py --target codex --overwrite

Install for Claude Code:

python .\skills\mcubuddy\scripts\install_skill.py --target cc --overwrite

Restart the client or open a new session after installation. For source-checkout recovery, installation registration, and usage boundaries, see Boundaries Between McuBuddy, MCP, and the Skill for details.

⚠️ Current Limitations

  • Keil build and download currently require Windows with Keil MDK and invoke µVision through UV4.exe, including in MDK v5 installations.

  • The probe-rs sidecar covers Flash and RTT but still requires target-specific real-board validation and does not yet have an official binary release.

  • RTOS inspection depends on FreeRTOS symbols and an ELF/AXF that match the target firmware.

  • SVD files are not bundled automatically for every chip and usually come from a CMSIS-Pack or the chip vendor.

  • SWO text capture depends on chip configuration, probe capabilities, pin multiplexing, and board wiring.

  • Device patches and connection strategies remain lightweight mechanisms rather than a complete board plugin system.

📚 Documentation

🧪 Local Development

pip install -e ".[dev]"
pytest
ruff check src tests

See the Project Guide for repository layout and documentation ownership.

🙏 Upstream and Acknowledgements

McuBuddy is based on SolarWang233/mcudbg and continues its MIT-licensed work with additional architecture, safety boundaries, evidence workflows, backend support, and documentation. The original copyright notice is preserved in LICENSE, with provenance details in NOTICE.

📄 License

This project is licensed under the MIT License. See LICENSE for details.


If McuBuddy helps with your MCU debugging workflow, consider giving the project a Star. If you have suggestions, open an Issue or email zhou229449@gmail.com.

Available Tools

19 tools
configure_elfB

Set the ELF/AXF file path for symbol resolution.

Inputs: elf_path (required).

configure_probeB

Set probe connection parameters. Run list_connected_probes first to find unique_id.

Inputs: target, backend, pack_path, unique_id, +8 more.

disconnect_allD

Inputs: no named parameters.

doctorB

Run a read-only environment, dependency, probe, target, and config preflight.

Inputs: no named parameters.

elf_loadD

Inputs: path (required).

finish_debug_sessionB

Stop registered actuators, reset and run the target, then disconnect.

Inputs: no named parameters.

first_contactC

Run the safest first board contact flow and suggest next debug tools.

Inputs: target (required), backend, elf_path, pack_path, +3 more.

get_runtime_configD

Inputs: no named parameters.

get_target_infoC

Return alias-match and device-patch info for a target on a given backend.

Inputs: target (required), backend.

inspect_project_memoryC

Read target-project memory or prepare a read-only onboarding proposal.

Inputs: target_root (required), max_depth, current_root.

list_connected_probesA

List all probes currently connected to this machine. Start here if unsure what probe to use.

Inputs: no named parameters.

list_tool_safetyC

List safety levels for public McuBuddy tools.

Inputs: include_hidden.

list_validation_recordsB

List machine-readable real-hardware validation records.

Inputs: no named parameters.

match_chip_nameB

Resolve a chip alias to a backend-specific target name.

Inputs: target (required), backend.

pack_diagnoseB

Find and checksum-verify the managed CMSIS-Pack for a target.

Inputs: target (required), search_roots.

probe_connectD

Inputs: target (required), unique_id.

read_stopped_contextD

Inputs: include_logs, log_tail_lines, resolve_symbols, include_fault_registers.

svd_loadA

Load a CMSIS-SVD file to enable peripheral register interpretation.

SVD files define the register map of a chip. You can find SVD files in your chip vendor's SDK, or at https://github.com/posborne/cmsis-svd-data Example: svd_load('/path/to/STM32L496.svd')

Inputs: svd_path (required).

write_project_memoryC

Write canonical memory inside a confirmed target project.

Inputs: content (required), target_root (required), confirm, update_existing, +1 more.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    C2.2/5.0

    Scored across 19 tools

    Disambiguation2/5

    Several tools have unclear or overlapping boundaries: configure_probe, probe_connect, and first_contact all relate to probe/debug session startup, while disconnect_all and finish_debug_session both end sessions. match_chip_name and get_target_info also overlap in alias resolution, and some tools have no description at all, making selection risky.

    Naming Consistency3/5

    Most tools follow a verb_noun pattern (list_, configure_, get_), but several break it: elf_load, svd_load, and pack_diagnose are noun_verb, and doctor and first_contact are one-off non-pattern names. Overall readable but noticeably inconsistent.

    Tool Count3/5

    Nineteen tools is on the heavy side for an MCU debug server, and some tools could be consolidated, especially around probe connection and session teardown. Still, the count is not extreme and many tools serve distinct preflight, validation, and configuration purposes.

    Completeness2/5

    The tool surface covers setup, probe detection, configuration, ELF/SVD loading, and a few validation/read-only checks, but core MCU debugging operations are missing: no read/write memory, no register access, no step/continue, no breakpoints, and no flash programming. This is a significant gap for a debug-oriented server.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      A
      quality
      D
      maintenance
      Stateful MCP server for driving debug probes (J-Link) to flash, debug, and inspect embedded targets. Enables AI agents to perform flash, memory, breakpoint, and ELF/SVD-aware operations conversationally.
      41
      87 PyPI
      11
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      An MCP server that provides comprehensive debugging capabilities for J-Link debuggers, enabling memory, flash, register, and RTT operations through AI assistants.
      24 PyPI
      42
      MIT
    • A
      license
      Not graded
      quality
      C
      maintenance
      MCP server for simulating firmware on virtual microcontroller instances, allowing AI agents to upload, run, and read UART output from supported boards such as STM32 and Nordic.
      18
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Agentic Hardware-in-the-Loop (Agentic HIL) lets coding agents develop firmware on real embedded boards: flash, reset, read UART and exchange CAN traffic, diagnose and fix. Local, policy-gated MCP tools support OpenOCD, pyOCD and STM32CubeProgrammer, with pytest for CI.
      44
      972 PyPI
      26
      Apache 2.0