McuBuddy
McuBuddy is an AI-powered MCP server for debugging MCU/embedded firmware, providing tools for environment checks, probe control, Keil project builds, memory/register inspection, source-level debugging, RTOS analysis, log capture, and flash operations.
Environment & Configuration: Run preflight checks (
doctor), retrieve runtime config, and list tool safety classifications and real-hardware validation records.Probe & Target Management: Discover and configure debug probes (ST-Link, J-Link, CMSIS-DAP), connect to targets, control execution (halt, resume, reset), resolve chip names, and safely perform first-contact flow. Disconnect all when done.
Keil MDK Build & Flash: Discover Keil projects, configure build settings, compile firmware, and flash using UV4 or raw binary images with verification. Compare ELF to flash memory.
Memory & Register Inspection: Read and write project memory, load ELF files for symbol resolution, read CPU registers and backtrace via DWARF, inspect peripheral registers using CMSIS-SVD files.
RTOS Analysis: List FreeRTOS tasks with states, priority, and stack usage; inspect task contexts; collect structured RTOS evidence.
Logs & Observability: Connect to UART logs, tail recent output, send and receive data (text/hex), and read Segger RTT logs directly from target RAM.
Evidence Collection: Gather structured evidence for crashes, startup failures, peripheral configurations, and RTOS state.
CMSIS-Pack Management: Diagnose and install CMSIS-Pack files for target support.
Provides debugging for ARM-based microcontrollers, including probe discovery, core control, register/memory access, flash operations, and source-level debugging via backends like pyOCD, J-Link, and probe-rs.
Provides debugging for RISC-V microcontrollers through probe-rs, including core control, register/memory access, flash operations, and RTT support.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@McuBuddy Diagnose the HardFault by reading the stacked registers"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
McuBuddy — AI-Powered MCU and Embedded Firmware Debugging MCP Server
Extend AI from firmware analysis to real MCUs, closing the loop across diagnosis, code changes, build, flashing, and validation in verified environments.
McuBuddy is a Model Context Protocol (MCP) server for
MCU board-level debugging. It exposes debug probes, Keil MDK projects, ELF/DWARF symbols,
CPU and memory state, SVD peripheral registers, UART/RTT logs, FreeRTOS state, Flash operations,
and GDB servers as structured tools that AI assistants can call.
It is designed for firmware development, board bring-up, fault isolation, debugging automation, and AI-assisted validation.
McuBuddy starts with 19 stable tools in the default toolset. Add only the domains a workflow
needs with MCUBUDDY_TOOLSETS=probe,diagnose (available domains: probe, diagnose,
build_flash, rtos, logs, and experimental). The core profile is the only profile;
startup toolset selection is explicit and immutable.
Automation does not replace engineering responsibility. Humans remain responsible for goals and acceptance criteria, wiring and power safety, high-risk operation approval, code review, and new environment validation. Motors, relays, and other safety-related devices also require recovery plans and independent protection.
Quick links: Quick Start · Project Guide · Tool Reference · Support Matrix
✨ Key Features
Real-hardware debugging: Discover and connect to ST-Link, J-Link, CMSIS-DAP, and other probes; control target execution; and inspect registers, memory, breakpoints, and watchpoints.
Keil project workflow: Discover
.uvprojx/.uvprojfiles, select a target, invoke Keil MDK throughUV4.exefor builds or downloads, and feed the generated AXF/ELF into debugging.Source-level fault diagnosis: Use ELF/DWARF data to resolve addresses to functions, source lines, local variables, and call stacks when investigating HardFaults, startup failures, stack overflows, and memory corruption.
Peripheral and RTOS inspection: Decode peripheral registers through CMSIS-SVD and inspect FreeRTOS tasks, task contexts, and stack usage.
Logs and runtime observability: Read UART, RTT, and selected J-Link SWO logs, and manage pyOCD/J-Link GDB server lifecycles.
Evidence-driven results: Return structured target, state, and validation evidence so AI can continue an investigation instead of guessing code changes from symptoms alone.
Actionable hardware boundaries: Distinguish MCU limitations, firmware-inapplicable tools, configuration problems, tool failures, and insufficient evidence, including impact and the next safe check so unsupported paths are not debugged as firmware defects.
Related MCP server: JLink MCP Server
🏗️ How It Works
flowchart LR
AI["AI Client<br/>Codex / Claude Code"] --> MCP["McuBuddy<br/>MCP Server"]
MCP --> EB["Execution Boundary<br/>Serialized Session"]
EB --> TOOLS["Debugging Tools<br/>Diagnostics / Symbols / SVD / RTOS / Logs"]
TOOLS --> KEIL["Keil MDK / UV4.exe<br/>Build / Optional Download"]
TOOLS --> PROBE["Probe Backends<br/>pyOCD / J-Link / probe-rs"]
KEIL --> IMAGE["AXF / ELF / HEX / BIN"]
IMAGE --> TOOLS
PROBE --> BOARD["Real MCU Board"]MCP is not a protocol for invoking Keil. The AI calls McuBuddy through MCP; McuBuddy then
uses Keil MDK through UV4.exe, pyOCD, J-Link, or another internal backend as required.
🚀 Quick Start
1. Prerequisites
Basic requirements:
Python 3.10 or later;
a powered MCU development board;
a correctly connected ST-Link, J-Link, or CMSIS-DAP probe;
the target chip name;
preferably, an ELF/AXF image containing debug information.
Keil build and download features require Windows with Keil MDK installed. McuBuddy invokes
µVision through UV4.exe, including in Keil MDK v5 installations.
2. Installation
pip install "McuBuddy @ git+https://github.com/cunjun/McuBuddy.git"This installs McuBuddy once for all local firmware projects. Do not clone or copy the McuBuddy
repository into each target project. McuBuddy is a local-only MCP backend: the client starts one
stdio process per connection, and McuBuddy does not expose HTTP, SSE, WebSocket, or another MCP
network listener.
The target project, Keil installation, ELF/SVD files, probe, and serial port must be directly
visible to the machine running McuBuddy. To update, reinstall from the official repository at
https://github.com/cunjun/McuBuddy; McuBuddy never checks for, downloads, or installs updates
automatically.
Install the optional dependency when using the J-Link Python backend:
pip install "McuBuddy[jlink]"For development from source:
git clone https://github.com/cunjun/McuBuddy.git
cd McuBuddy
pip install -e ".[dev]"3. Configure an MCP Client
{
"mcpServers": {
"McuBuddy": {
"command": "McuBuddy",
"args": []
}
}
}For a Windows source checkout, explicitly configure the virtual-environment Python executable and working directory. See Installation and First Connection, then restart the AI client.
4. Run a First Read-Only Check
After connecting the probe and powering the board, tell the AI:
Use McuBuddy to inspect the current debugging environment, discover connected probes,
and perform a first read-only check of the board without writing Flash.
Before starting, tell me what information is still missing.The recommended sequence is to check the environment and target first, then configure the probe and read the minimum target state:
doctor()
list_connected_probes()
match_chip_name("py32f030x8")
configure_probe(target="py32f030x8", backend="pyocd")
probe_connect(target="py32f030x8")
read_stopped_context()probe_connect and read_stopped_context are available in the default core profile. Reading a
stable stopped context may halt the target, so it is still execution-changing. If the device must
not be halted, instruct the AI to perform only non-intrusive probe and environment checks.
💬 Automated Debugging Example
Use McuBuddy to debug <project path>. The MCU is <exact model>, and the probe is
<ST-Link/J-Link/CMSIS-DAP>. First collect board-level evidence and locate the problem. After
authorization, modify the code, build and flash it, then validate the result on the real board.For the evidence-first decision order and common scenarios, see Common Debugging Workflows.
🧰 Backends and Hardware Validation
Path | Current Role | Main Capabilities |
pyOCD + ST-Link/CMSIS-DAP | Primary backend | Control, memory, Flash, source debugging, RTT, RTOS, and GDB server |
J-Link | Primary backend | Control, memory, Flash, source debugging, native RTT, DWT, and GDB server |
probe-rs sidecar | Extended preview | ARM/RISC-V/Xtensa discovery, configurable core control, registers, memory, hardware breakpoints, Flash, and RTT |
Keil MDK (Windows, via | Build/download backend | Project discovery, target configuration, build, logs, and optional download; supports MDK v5 installations |
Primary validation coverage includes:
STM32L496VETx + ST-Link / pyOCD;
STM32F103C8 + J-Link;
built-in target preflight profiles for STM32F103ZE and PY32F030X8.
“Implemented in code” does not mean “validated on every board.” Use the
Support Matrix and list_validation_records() as the source of truth.
🛡️ Safety Model
McuBuddy provides machine-readable safety classifications through list_tool_safety().
Category | Examples | Default Requirement |
Read-only | Target matching, register/memory reads, symbol resolution, logs, diagnostics | No confirmation required |
Execution-changing | halt, resume, reset, continue, stepping | Does not write Flash, but changes execution state |
Runtime-state write | Memory/register writes, breakpoints, watchpoints, SVD field writes | Explicit confirmation |
Persistent destructive operation | Flash erase/program, Keil firmware download | Explicit confirmation |
Host process | Keil build, GDB server start/stop | Starts or stops a local process |
Safety principles:
For an unknown target, match the chip and probe first; do not guess addresses.
Read evidence before halting, resetting, or writing.
Before a Flash operation, confirm the target, scope, image, and recovery method.
For motors, relays, power switches, and other actuators, prefer breakpoints and low-energy tests.
Send actuator commands with
uart_send_with_cleanup, then callfinish_debug_sessionbefore returning a final conclusion. Server shutdown repeats the same idempotent cleanup as a fallback.
🔒 Sessions and Concurrency
Operations that share probe, Keil, ELF/SVD, log, and runtime configuration are serialized within the same
Session.Different sessions can run concurrently when they control unrelated boards.
Stateless queries such as target matching and tool safety information can run alongside session operations.
Cancellation cannot forcibly terminate a call that has entered a synchronous SDK. The server waits for the worker thread to finish before releasing the session lock.
This prevents one request from switching backends, disconnecting the probe, or changing shared state while another probe operation is still running.
📦 mcubuddy Skill
The repository includes skills/mcubuddy, which guides Codex and Claude Code to use these tools in an
“evidence first, judgment second” sequence instead of treating MCP tools as an unordered command list.
The Skill is an optional workflow enhancement, not a prerequisite for hardware debugging. A correctly installed and configured local McuBuddy MCP server remains fully usable without it.
Installed releases bundle the Skill. Register the persistent Codex integration without cloning the repository:
uv tool install McuBuddy
McuBuddy setup codex --confirm --jsonInstall for Codex:
python .\skills\mcubuddy\scripts\install_skill.py --target codex --overwriteInstall for Claude Code:
python .\skills\mcubuddy\scripts\install_skill.py --target cc --overwriteRestart the client or open a new session after installation. For source-checkout recovery, installation registration, and usage boundaries, see Boundaries Between McuBuddy, MCP, and the Skill for details.
⚠️ Current Limitations
Keil build and download currently require Windows with Keil MDK and invoke µVision through
UV4.exe, including in MDK v5 installations.The probe-rs sidecar covers Flash and RTT but still requires target-specific real-board validation and does not yet have an official binary release.
RTOS inspection depends on FreeRTOS symbols and an ELF/AXF that match the target firmware.
SVD files are not bundled automatically for every chip and usually come from a CMSIS-Pack or the chip vendor.
SWO text capture depends on chip configuration, probe capabilities, pin multiplexing, and board wiring.
Device patches and connection strategies remain lightweight mechanisms rather than a complete board plugin system.
📚 Documentation
Complete project overview and workflows: Project Guide
Chinese project overview: 项目指南
Complete tool index: Tool Reference
Chinese tool usage: MCP 工具中文参考
Backend and hardware validation: Support Matrix
Project design: Architecture
Release history: Changelog
🧪 Local Development
pip install -e ".[dev]"
pytest
ruff check src testsSee the Project Guide for repository layout and documentation ownership.
🙏 Upstream and Acknowledgements
McuBuddy is based on SolarWang233/mcudbg and continues its MIT-licensed work with additional architecture, safety boundaries, evidence workflows, backend support, and documentation. The original copyright notice is preserved in LICENSE, with provenance details in NOTICE.
📄 License
This project is licensed under the MIT License. See LICENSE for details.
If McuBuddy helps with your MCU debugging workflow, consider giving the project a Star.
If you have suggestions, open an Issue or email
zhou229449@gmail.com.
Available Tools
19 toolsconfigure_elfB
Set the ELF/AXF file path for symbol resolution.
Inputs: elf_path (required).
configure_probeB
Set probe connection parameters. Run list_connected_probes first to find unique_id.
Inputs: target, backend, pack_path, unique_id, +8 more.
disconnect_allD
Inputs: no named parameters.
doctorB
Run a read-only environment, dependency, probe, target, and config preflight.
Inputs: no named parameters.
elf_loadD
Inputs: path (required).
finish_debug_sessionB
Stop registered actuators, reset and run the target, then disconnect.
Inputs: no named parameters.
first_contactC
Run the safest first board contact flow and suggest next debug tools.
Inputs: target (required), backend, elf_path, pack_path, +3 more.
get_runtime_configD
Inputs: no named parameters.
get_target_infoC
Return alias-match and device-patch info for a target on a given backend.
Inputs: target (required), backend.
inspect_project_memoryC
Read target-project memory or prepare a read-only onboarding proposal.
Inputs: target_root (required), max_depth, current_root.
list_connected_probesA
List all probes currently connected to this machine. Start here if unsure what probe to use.
Inputs: no named parameters.
list_tool_safetyC
List safety levels for public McuBuddy tools.
Inputs: include_hidden.
list_validation_recordsB
List machine-readable real-hardware validation records.
Inputs: no named parameters.
match_chip_nameB
Resolve a chip alias to a backend-specific target name.
Inputs: target (required), backend.
pack_diagnoseB
Find and checksum-verify the managed CMSIS-Pack for a target.
Inputs: target (required), search_roots.
probe_connectD
Inputs: target (required), unique_id.
read_stopped_contextD
Inputs: include_logs, log_tail_lines, resolve_symbols, include_fault_registers.
svd_loadA
Load a CMSIS-SVD file to enable peripheral register interpretation.
SVD files define the register map of a chip. You can find SVD files in your chip vendor's SDK, or at https://github.com/posborne/cmsis-svd-data Example: svd_load('/path/to/STM32L496.svd')
Inputs: svd_path (required).
write_project_memoryC
Write canonical memory inside a confirmed target project.
Inputs: content (required), target_root (required), confirm, update_existing, +1 more.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 19 tools
Several tools have unclear or overlapping boundaries: configure_probe, probe_connect, and first_contact all relate to probe/debug session startup, while disconnect_all and finish_debug_session both end sessions. match_chip_name and get_target_info also overlap in alias resolution, and some tools have no description at all, making selection risky.
Most tools follow a verb_noun pattern (list_, configure_, get_), but several break it: elf_load, svd_load, and pack_diagnose are noun_verb, and doctor and first_contact are one-off non-pattern names. Overall readable but noticeably inconsistent.
Nineteen tools is on the heavy side for an MCU debug server, and some tools could be consolidated, especially around probe connection and session teardown. Still, the count is not extreme and many tools serve distinct preflight, validation, and configuration purposes.
The tool surface covers setup, probe detection, configuration, ELF/SVD loading, and a few validation/read-only checks, but core MCU debugging operations are missing: no read/write memory, no register access, no step/continue, no breakpoints, and no flash programming. This is a significant gap for a debug-oriented server.
Maintenance
Related MCP Connectors
MCP server for building and testing AI agents with multi-model experimentation and insights.
MCP server for progressive tool usage at any scale (see https://klavis.ai)
MCP server for Sentry - error monitoring, issue tracking, and debugging for AI assistants
MCP server for AI access to SmartBear tools, including BugSnag, Reflect, Swagger, PactFlow, QTM4J.
Related MCP Servers
- AlicenseAqualityDmaintenanceStateful MCP server for driving debug probes (J-Link) to flash, debug, and inspect embedded targets. Enables AI agents to perform flash, memory, breakpoint, and ELF/SVD-aware operations conversationally.4187 PyPI11MIT
- AlicenseNot gradedqualityDmaintenanceAn MCP server that provides comprehensive debugging capabilities for J-Link debuggers, enabling memory, flash, register, and RTT operations through AI assistants.24 PyPI42MIT
- AlicenseNot gradedqualityCmaintenanceMCP server for simulating firmware on virtual microcontroller instances, allowing AI agents to upload, run, and read UART output from supported boards such as STM32 and Nordic.18MIT
- AlicenseAqualityBmaintenanceAgentic Hardware-in-the-Loop (Agentic HIL) lets coding agents develop firmware on real embedded boards: flash, reset, read UART and exchange CAN traffic, diagnose and fix. Local, policy-gated MCP tools support OpenOCD, pyOCD and STM32CubeProgrammer, with pytest for CI.44972 PyPI26Apache 2.0