Skip to main content
Glama

AttachToProcess

Destructive

Attach x64dbg or x32dbg to an already-running process by PID or name, with optional debugger restart, stop-first, and timeout controls.

Instructions

Attach x64dbg/x32dbg to an already-running process.

Args: pid: Exact target PID. Preferred when known. exe_filter: Process name or image-path substring when pid is not provided. arch: Desired debugger architecture. Auto prefers the target process architecture. restart_debugger: When true, restart the debugger before attach. stop_first: When true, stop the current debug session before attaching. timeout_ms: Maximum time to wait for the attach to complete.

Input Schema

NameRequiredDescriptionDefault
pidNo
archNoauto
exe_filterNo
stop_firstNo
timeout_msNo
restart_debuggerNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.9

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true, openWorldHint=true and non-idempotent, so the safety profile is covered. The description adds some behavioral detail (stop_first stops the current session, restart_debugger restarts the debugger), but it does not mention elevation/permission requirements or the effect on any existing attach, which would be valuable for a destructive attach operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in a single sentence, followed by a compact per-parameter list with no filler. The Args block is standard and every line earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, open-world attach tool with no output schema and no annotations covering return behavior, the description covers inputs well but omits what happens on failure/timeout, whether it requires privileges, and what the caller gets back. Adequate but leaves notable operational gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description carries the full parameter burden and does so: all six parameters are annotated with real meaning, including that 'arch' auto prefers the target architecture and that 'pid' is exact. The explanations are terse but leave no parameter undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Attach) and a precise resource (an already-running process) and even names the concrete tools used (x64dbg/x32dbg). No sibling tool performs an attach, so the action is unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives selection logic between two parameters ('pid' preferred when known, 'exe_filter' when pid is not provided) which implies usage context, but it never states when to reach for this tool versus DebugRun/InitDebuggee or any preconditions. There is no explicit when/when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.