List AFL++ MCP tools and their short descriptions.

Get detailed help for a tool (schema + description).

Get AFL++ and server version information.

Create a workspace under workspaces/ with standard subdirectories: in,out,targets,build,logs,dicts,repros,reports.

Detect a likely build system for a project path (heuristic).

Run a constrained build command with AFL++ compiler wrappers and copy the resulting artifact into the workspace targets/ directory.

Build a CMPLOG-instrumented variant by setting AFL_LLVM_CMPLOG=1 during compilation (LLVM mode) and copy the artifact into the workspace targets/ directory.

Import a seed corpus into workspaces//in/ from a file or directory within the workspace root.

Summarize a corpus directory (file count and total size).

List AFL++ builtin dictionaries shipped in the AFLplusplus/dictionaries directory.

Attach a dictionary file to a job name (stored as a job config to be used by start_fuzz).

Run a short harness validation directly against the target (not afl-fuzz): checks input mode, stability, and basic performance signals.

Run afl-showmap for a single testcase and return a summary of the trace.

Measure corpus coverage using afl-showmap -C on an AFL++ output directory.

Run afl-analyze on a testcase to identify critical input regions.

Run afl-whatsup on an AFL++ output directory.

Run lightweight preflight checks before starting afl-fuzz (core_pattern, CPU scaling, corpus non-empty).

Start an afl-fuzz job in the workspace (non-blocking).

Start a multi-instance afl-fuzz campaign (master + secondary instances).

Suggest a multi-core campaign mix (instance_overrides) for aflpp.start_fuzz_cluster.

Stop a running afl-fuzz job by PID (SIGTERM then SIGKILL).

Get job status by parsing fuzzer_stats and queue/crashes/hangs counts (with deltas since last call).

Summarize a multi-instance campaign by parsing fuzzer_stats for each instance directory.

Generate an AFL++ progress plot for a job or campaign (wraps afl-plot).

List crash and hang findings with stable IDs and paths.

Reproduce a finding by running the target command directly with the testcase; captures stdout/stderr and writes a repro bundle under repros/.

Write a crash report for a finding (dedup signature + repro info + sanitizer frames if present).

Generate clustered crash reports using casr-afl (if installed).

Minimize a corpus using afl-cmin and store it as a new corpus directory in the workspace.

Minimize a single testcase using afl-tmin and store the minimized testcase under repros/.