MCP server for debugging C#/.NET code using netcoredbg
Project description
netcoredbg-mcp
netcoredbg-mcp gives AI coding agents a real debugger for .NET applications.
Through the Model Context Protocol, an agent can launch or attach to a process,
set breakpoints, step through code, inspect variables, evaluate expressions, read
debug output, and operate Windows UI Automation surfaces such as WPF, WinForms,
and Avalonia windows without opening an IDE.
103 MCP tools · 8 prompts · 4 resources · 870 collected tests · release v0.13.1
Quick Links
- Start: Quick Start · Installation · Client Setup
- Use: First Debug Session · GUI App Debugging · Visual Inspection
- Reference: Available Tools · Resources · Prompts · Architecture
- Project: Contributing · Changelog · License
What's New in v0.13.1
- Hardened WPF one-call smoke —
run_runtime_smokenow connects UI automation eagerly after launch and keeps bounded cleanup evidence for the 15-step WPF fixture workflow. - More reliable DataGrid evidence — WPF grid rows merge structured
GridPatterncells with descendant text fallback, and short grid retry timeouts no longer sleep longer than requested. - Stable window and cleanup behavior — primary-window selection uses a deterministic tie-breaker, and Windows file-attribute restoration fails fast instead of silently hiding WinAPI errors.
- Release playbook coverage — customer-mode verification now explicitly includes WPF one-call runtime smoke and Avalonia fixture compatibility.
Highlights
| Capability | What agents can do |
|---|---|
| Debug control | Launch, attach, restart, continue, pause, terminate, and step through .NET code |
| Breakpoints | File, function, conditional, hit-count, exception, and tracepoint workflows |
| Inspection | Threads, stack frames, scopes, variables, modules, expressions, source, disassembly, memory |
| GUI automation | Window trees, element search, clicks, keystrokes, screenshots, annotations, clipboard, window management, UI evidence |
| Build integration | Pre-launch dotnet build, progress notifications, build diagnostics, cleanup of locked debug processes |
| Runtime smoke | Hygiene preflight, instrumentation groups, output checkpoints, freshness checks, bounded scenario runner |
| Multi-agent safety | Session ownership through mcp-mux, read-only observers, inactivity release |
Quick Start
# 1. Install the MCP server
pipx install netcoredbg-mcp
# 2. Run first-time setup
netcoredbg-mcp --setup
# 3. Register it in Claude Code
claude mcp add netcoredbg -- netcoredbg-mcp --project-from-cwd
Then ask your agent:
Set a breakpoint in Program.cs, run the app, and inspect local variables when it stops.
Critical Notes
[!IMPORTANT] For .NET Core debugging, the
dbgshim.dllnext tonetcoredbg.exemust match the target runtime major version. The setup wizard scans installed runtimes and prepares compatible dbgshim copies.
[!IMPORTANT]
start_debugis a long-poll tool. If the debuggee is a GUI app, it may return only after the app stops at a breakpoint, exits, or times out. Use screenshots and UI tools while the app is running; use variable inspection only when stopped.
[!CAUTION] Do not commit
.mcp.json,.netcoredbg-mcp.launch.json, credentials, server inventory, or local downstream project paths. Launch profiles supportinheritso secrets can stay in the MCP server process environment.
Installation
Requirements
- Windows for GUI automation and FlaUI/pywinauto workflows.
- Python 3.10 or newer.
- .NET SDK/runtime for the target application.
netcoredbg; usenetcoredbg-mcp --setupunless you need a custom install.- An MCP client such as Claude Code, Cursor, Cline, Roo Code, Windsurf, Continue, or Claude Desktop.
Recommended Install
pipx install netcoredbg-mcp
netcoredbg-mcp --setup
netcoredbg-mcp --version
The setup wizard downloads or discovers netcoredbg, scans dbgshim versions,
builds the FlaUI bridge when needed, and prints a ready-to-use MCP configuration
snippet.
Manual Install
pip install netcoredbg-mcp
$env:NETCOREDBG_PATH = "C:\Tools\netcoredbg\netcoredbg.exe"
netcoredbg-mcp --project-from-cwd
Use a manual install when you pin a locally managed netcoredbg build or when a
corporate environment blocks automatic downloads.
Upgrading
pipx upgrade netcoredbg-mcp
netcoredbg-mcp --setup
Run setup after an upgrade when the target .NET runtime changed, when you need a new FlaUI bridge build, or when MCP client snippets should be regenerated.
Configuration
Project Launch Profiles
start_debug can read .netcoredbg-mcp.launch.json from the resolved project
root and apply profile environment variables to the debuggee process. The build
process environment is not changed.
{
"defaultProfile": "default",
"profiles": {
"default": {
"env": {
"DOTNET_ENVIRONMENT": "Development",
"APP_MODE": "Debug"
},
"inherit": ["PATH"]
}
}
}
Precedence is deterministic:
inheritcopies only explicitly named variables from the MCP server process.- Profile
envvalues override inherited values. - Direct
start_debug(env={...})values override the profile.
env values set to null are passed through to DAP as explicit nulls to
request variable removal or unset semantics where the adapter supports it. Tool
responses include only variable names, counts, profile name, source path, and
redacted metadata; they never echo environment values.
The repository .gitignore excludes .netcoredbg-mcp.launch.json by default.
Commit a profile only when it contains non-secret, shareable values.
Base Server Configuration
Use --project-from-cwd for CLI-based agents that start the server from the
workspace. Use --project when the MCP client starts from a stable global
location and you want to constrain all debug paths explicitly.
{
"mcpServers": {
"netcoredbg": {
"command": "netcoredbg-mcp",
"args": ["--project-from-cwd"]
}
}
}
If setup did not install a managed netcoredbg, add NETCOREDBG_PATH:
{
"mcpServers": {
"netcoredbg": {
"command": "netcoredbg-mcp",
"args": ["--project-from-cwd"],
"env": {
"NETCOREDBG_PATH": "C:\\Tools\\netcoredbg\\netcoredbg.exe"
}
}
}
}
Project-Scoped Config
Use a project-local MCP config when a client supports it. Keep machine-specific secrets and binary paths outside git.
{
"mcpServers": {
"netcoredbg": {
"command": "netcoredbg-mcp",
"args": ["--project", "C:\\Work\\MyDotNetApp"]
}
}
}
Client Setup
Claude Code
claude mcp add netcoredbg -- netcoredbg-mcp --project-from-cwd
Cursor, Cline, Roo Code, Windsurf, Continue, Claude Desktop
Add the same server shape to the client-specific MCP configuration file:
{
"mcpServers": {
"netcoredbg": {
"command": "netcoredbg-mcp",
"args": ["--project-from-cwd"]
}
}
}
Common configuration locations:
| Client | Typical config path |
|---|---|
| Cursor | %USERPROFILE%\.cursor\mcp.json |
| Cline | VS Code extension MCP settings |
| Roo Code | %USERPROFILE%\.roo\mcp.json or project .roo\mcp.json |
| Windsurf | %USERPROFILE%\.codeium\windsurf\mcp_config.json |
| Continue | %USERPROFILE%\.continue\config.json |
| Claude Desktop | %APPDATA%\Claude\claude_desktop_config.json |
First Debug Session
The Long-Poll Pattern
Execution tools wait for a meaningful debugger event. start_debug,
continue_execution, step_over, step_into, and step_out return when the
debuggee stops, exits, terminates, or times out.
Typical Workflow
1. Add a breakpoint in the code path you want to inspect.
2. Start debugging with pre_build=true.
3. Wait for state=stopped.
4. Read call stack, scopes, and variables.
5. Evaluate focused expressions or step to the next line.
6. Continue or terminate the session.
Pre-Build Launch Example
{
"program": "bin/Debug/net8.0/MyApp.dll",
"build_project": "MyApp.csproj",
"pre_build": true,
"stop_at_entry": false
}
For .NET 6+ applications, passing a built .exe is accepted when a matching
.dll and .runtimeconfig.json exist. The server resolves the DLL target to
avoid deps.json conflicts.
GUI App Debugging
The Rule
Do not use debugger inspection tools while a GUI app is running normally. First stop at a breakpoint or pause the process; otherwise stack, scopes, and variables are unavailable by design.
GUI Workflow
1. Launch the app.
2. Use ui_take_screenshot or ui_get_window_tree to observe the running UI.
3. Use UI tools to click, type, select, or wait for state changes.
4. Set a breakpoint before the code path you need to inspect.
5. Trigger the UI action.
6. When state=stopped, inspect variables and call stack.
Visual Inspection
Screenshots return MCP image content, so vision-capable agents can inspect
layout and state. Annotated screenshots add Set-of-Mark labels for elements that
can be clicked with ui_click_annotated.
ui_take_screenshot()
ui_take_annotated_screenshot()
ui_click_annotated(element_id=3)
Runtime Smoke Evidence
For repeatable agent-side verification, use the runtime smoke tools together:
debug_hygiene_preflight clears stale debugger state, output_checkpoint and
output_assert_since prove output changed after a known point,
verify_debug_freshness checks that the live process still matches the expected
workspace and artifacts, and run_runtime_smoke executes a bounded scenario
plan with cleanup.
The manual smoke fixtures now cover the baseline console/WinForms app,
tests/fixtures/WpfSmokeApp, and tests/fixtures/AvaloniaSmokeApp. Build all
three fixture projects before claiming full GUI smoke coverage; missing fixture
binaries intentionally skip their corresponding manual scenarios.
For WPF product-smoke workflows, start from
docs/examples/runtime-smoke-wpf-workflow-plan.json.
It shows the accepted netcoredbg.runtime_smoke.v1 schema, steps operations
for DataGrid snapshots/assertions, scoped ListBox item actions, output
checkpoints, focus assertions, and cleanup.restore_files with graceful debug
stop. The example launches the WPF fixture DLL through dotnet, so freshness
expects expected_process_name: "dotnet" and expected_modules: ["WpfSmokeApp.dll"]. The matching manual scenario is
WPF One-Call Runtime Smoke Workflow.
The WPF workflow now connects UI automation eagerly after launch, chooses a
stable usable top-level window, merges structured GridPattern cell evidence
with descendant text fallback, and restores fixture files even when Windows
briefly holds attributes or locks. Avalonia remains a first-class compatibility
target: its manual fixture is expected to produce bounded UNSUPPORTED or
BLOCKED evidence for UIA gaps instead of being omitted from release checks.
Available Tools
| Category | Count | Tools |
|---|---|---|
| Debug control | 12 | start_debug, attach_debug, stop_debug, restart_debug, continue_execution, pause_execution, step_over, get_step_in_targets, step_into, step_out, get_debug_state, terminate_debug |
| Breakpoints and exceptions | 6 | add_breakpoint, remove_breakpoint, list_breakpoints, clear_breakpoints, add_function_breakpoint, configure_exceptions |
| Inspection and DAP coverage | 15 | get_threads, get_call_stack, get_scopes, get_variables, evaluate_expression, set_variable, get_exception_info, get_modules, get_progress, get_loaded_sources, disassemble, get_locations, quick_evaluate, get_exception_context, get_stop_context |
| Tracepoints | 4 | add_tracepoint, remove_tracepoint, get_trace_log, clear_trace_log |
| Snapshots and object analysis | 5 | create_snapshot, diff_snapshots, list_snapshots, analyze_collection, summarize_object |
| Memory | 2 | read_memory, write_memory |
| Output and build diagnostics | 4 | get_output, search_output, get_output_tail, get_build_diagnostics |
| Runtime smoke orchestration | 8 | debug_hygiene_preflight, instrumentation_group_create, instrumentation_group_inspect, instrumentation_group_clear, output_checkpoint, output_assert_since, verify_debug_freshness, run_runtime_smoke |
| UI automation | 46 | Window tree, element search, focus, keyboard, mouse, screenshots, annotations, selection, clipboard, window management, expand/collapse, value setting, virtualization, grid evidence, UI snapshots, UI events |
| Process management | 1 | cleanup_processes |
MCP Resources
| URI | Contents |
|---|---|
debug://state |
Current debug session state |
debug://breakpoints |
Active breakpoints and verification state |
debug://output |
Buffered debuggee and build output |
debug://threads |
Current thread list |
MCP Prompts
| Prompt | Use it for |
|---|---|
debug |
General debugging workflow guidance |
debug-gui |
WPF, WinForms, Avalonia, and UI Automation debugging |
debug-exception |
Exception-first investigation |
debug-visual |
Screenshot and Set-of-Mark workflows |
debug-mistakes |
Common agent debugging mistakes and recovery |
investigate |
Parameterized symptom investigation |
debug-scenario |
Scenario-specific debugging plans |
dap-escape-hatch |
Advanced DAP commands without first-class MCP wrappers |
Multi-Agent Safety
When served through mcp-mux, mutating debug tools are session-owned. One agent
can control a live debug session while other agents keep read-only observability
through state, output, screenshot, and inspection tools. Ownership auto-releases
after the configured inactivity timeout.
Architecture Overview
graph TB
subgraph MCP["MCP Server"]
MAIN["__main__.py"]
SERVER["server.py"]
PROMPTS["prompts.py"]
TOOLS["tools/*"]
SESSION["session/*"]
BUILD["build/*"]
UI["ui/*"]
SETUP["setup/*"]
end
subgraph DAP["Debug Adapter Protocol"]
CLIENT["dap/client.py"]
PROTOCOL["dap/protocol.py"]
EVENTS["dap/events.py"]
end
MAIN --> SERVER
SERVER --> PROMPTS
SERVER --> TOOLS
TOOLS --> SESSION
TOOLS --> BUILD
TOOLS --> UI
SESSION --> CLIENT
CLIENT --> PROTOCOL
CLIENT --> EVENTS
CLIENT <-->|stdio JSON-RPC| NETCOREDBG["netcoredbg"]
NETCOREDBG --> APP[".NET debuggee"]
SETUP --> NETCOREDBG
How It Works
__main__.pyparses CLI flags, configures project-root policy, and starts the FastMCP stdio server.server.pyregisters tools, prompts, resources, progress notifications, and session ownership checks.- Tool modules keep debugger control, breakpoints, inspection, memory, output, process cleanup, and UI automation separate.
SessionManagerowns debugger state, path validation, event handling, snapshots, tracepoints, output buffers, and process cleanup.DAPClientspeaks JSON-RPC over stdio tonetcoredbg.- UI automation uses a FlaUI bridge on Windows, with pywinauto fallback where supported.
Command Line Options
netcoredbg-mcp --help
netcoredbg-mcp --version
netcoredbg-mcp --setup
netcoredbg-mcp --project C:\Work\MyApp
netcoredbg-mcp --project-from-cwd
| Option | Purpose |
|---|---|
--version |
Print the package version |
--setup |
Run first-time setup and exit |
--project PATH |
Constrain debug operations to a specific project root |
--project-from-cwd |
Detect the project root from the process working directory and MCP roots |
--project and --project-from-cwd are mutually exclusive.
Environment Variables
| Variable | Default | Purpose |
|---|---|---|
NETCOREDBG_PATH |
auto-discovered after setup | Explicit path to netcoredbg |
NETCOREDBG_PROJECT_ROOT |
unset | Project root fallback |
MCP_PROJECT_ROOT |
unset | Generic MCP project root fallback |
NETCOREDBG_ALLOWED_PATHS |
empty | Additional comma-separated allowed path prefixes |
NETCOREDBG_SCREENSHOT_MAX_WIDTH |
1568 |
Max inline screenshot width |
NETCOREDBG_SCREENSHOT_QUALITY |
80 |
Screenshot compression quality |
NETCOREDBG_MAX_TRACE_ENTRIES |
1000 |
Tracepoint log capacity |
NETCOREDBG_EVALUATE_TIMEOUT |
0.5 |
Tracepoint expression timeout in seconds |
NETCOREDBG_RATE_LIMIT_INTERVAL |
0.1 |
Tracepoint hit rate-limit interval |
NETCOREDBG_MAX_SNAPSHOTS |
20 |
Snapshot capacity |
NETCOREDBG_MAX_VARS_PER_SNAPSHOT |
200 |
Variables captured per snapshot |
NETCOREDBG_MAX_OUTPUT_BYTES |
10000000 |
Total output buffer cap |
NETCOREDBG_MAX_OUTPUT_ENTRY |
100000 |
Single output entry cap |
NETCOREDBG_SESSION_TIMEOUT |
60.0 |
Multi-agent ownership inactivity timeout |
NETCOREDBG_STACKTRACE_DELAY_MS |
0 |
Diagnostic delay before stackTrace requests |
FLAUI_BRIDGE_PATH |
auto-discovered | Explicit FlaUI bridge executable path |
LOG_LEVEL |
INFO |
Python logging level |
LOG_FILE |
unset | Optional diagnostic log file |
Troubleshooting
netcoredbg is not found
Symptom: startup or start_debug reports that netcoredbg cannot be found.
Cause: setup has not installed a managed debugger and NETCOREDBG_PATH is
not set.
Fix: run netcoredbg-mcp --setup, or set NETCOREDBG_PATH to the explicit
netcoredbg.exe path.
Verify: netcoredbg-mcp --version succeeds and your MCP client can list the
server tools.
Breakpoints do not bind
Symptom: a breakpoint stays unverified or the process never stops where expected.
Cause: stale build output, wrong target DLL, optimized Release binaries, or a line without executable IL.
Fix: run with pre_build=True, debug the Debug configuration, confirm the
source file matches the built assembly, and inspect list_breakpoints() for
DAP-adjusted lines.
Verify: the breakpoint response reports verified=true or includes the DAP
line adjustment.
GUI appears frozen
Symptom: a WPF, WinForms, or Avalonia window stops repainting after a debug command.
Cause: the debugger stopped the UI thread at a breakpoint or pause.
Fix: inspect variables while stopped, then call continue_execution() before
expecting the GUI to respond to clicks or keystrokes.
Verify: get_debug_state() reports running and screenshots update again.
Path is rejected in a worktree
Symptom: launch or build fails with a path validation error.
Cause: the project root was resolved to a different checkout, or the worktree path is outside the allowed root set.
Fix: use --project-from-cwd from the active worktree, or add the worktree
prefix to NETCOREDBG_ALLOWED_PATHS.
Verify: start_debug accepts build and program paths under the worktree.
Limitations
- GUI automation is Windows-focused.
netcoredbgand DAP capabilities vary by runtime and target application.- Memory reads and writes require debug adapter support and valid memory references.
- Native debugging, browser automation, and non-.NET runtimes are out of scope.
Contributing
See CONTRIBUTING.md for setup, tests, PR expectations, and sensitive-data rules.
License
MIT. See LICENSE.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file netcoredbg_mcp-0.13.1.tar.gz.
File metadata
- Download URL: netcoredbg_mcp-0.13.1.tar.gz
- Upload date:
- Size: 1.7 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
c01a0c7f744b3cfaf0ba2aff1873bebe7d6cc529b268f9853ecb2321095660f6
|
|
| MD5 |
b8b7a4693f64b66588f50215ebd6c723
|
|
| BLAKE2b-256 |
606ce5f66282e873df31890a3e15003d48eb94d49b93676a971818d5f05e83aa
|
Provenance
The following attestation bundles were made for netcoredbg_mcp-0.13.1.tar.gz:
Publisher:
publish.yml on thebtf/netcoredbg-mcp
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
netcoredbg_mcp-0.13.1.tar.gz -
Subject digest:
c01a0c7f744b3cfaf0ba2aff1873bebe7d6cc529b268f9853ecb2321095660f6 - Sigstore transparency entry: 1461998839
- Sigstore integration time:
-
Permalink:
thebtf/netcoredbg-mcp@1c10a671a93e4642fc0cbf73c011f2d8f14a122a -
Branch / Tag:
refs/tags/v0.13.1 - Owner: https://github.com/thebtf
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@1c10a671a93e4642fc0cbf73c011f2d8f14a122a -
Trigger Event:
push
-
Statement type:
File details
Details for the file netcoredbg_mcp-0.13.1-py3-none-any.whl.
File metadata
- Download URL: netcoredbg_mcp-0.13.1-py3-none-any.whl
- Upload date:
- Size: 269.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
402b4e7087cd8feb55a0bb15a3fb8b60bbf7d35bb4e9d64cd864677f54140fd7
|
|
| MD5 |
c9cea0c3487caeb1f9ee05a729297539
|
|
| BLAKE2b-256 |
206e3b5b8e3d37f34271a7e0311aeae360f0fe101a5f06f278efb88a3efc3211
|
Provenance
The following attestation bundles were made for netcoredbg_mcp-0.13.1-py3-none-any.whl:
Publisher:
publish.yml on thebtf/netcoredbg-mcp
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
netcoredbg_mcp-0.13.1-py3-none-any.whl -
Subject digest:
402b4e7087cd8feb55a0bb15a3fb8b60bbf7d35bb4e9d64cd864677f54140fd7 - Sigstore transparency entry: 1461998850
- Sigstore integration time:
-
Permalink:
thebtf/netcoredbg-mcp@1c10a671a93e4642fc0cbf73c011f2d8f14a122a -
Branch / Tag:
refs/tags/v0.13.1 - Owner: https://github.com/thebtf
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@1c10a671a93e4642fc0cbf73c011f2d8f14a122a -
Trigger Event:
push
-
Statement type: