Cheat Engine MCP Bridge: Setup for Claude, Cursor and Other Apps

• Checks the bridge is connected

  Replies with the bridge version so you know the assistant can reach Cheat Engine.

  Try: “Ping Cheat Engine.”

  Read · ping

• Lists running processes

  Returns the processes on the machine with their IDs and names.

  Try: “Which processes are running?”

  Read · get_process_list

• Attaches Cheat Engine to a process

  Opens a process by ID or name so later reads and writes target it.

  Try: “Attach to notepad.exe.”

  Write · open_process

• Shows the attached process

  Returns its ID, name, module count and architecture.

  Try: “What process is attached?”

  Read · get_process_info

• Lists the process's loaded modules

  Lists DLLs and modules with base addresses and sizes, in pages.

  Try: “List the modules of the attached process.”

  Read · enum_modules

• Reads raw bytes from memory

  Returns the bytes at an address in the attached process.

  Try: “Read 16 bytes at the base address.”

  Read · read_memory

• Reads a number from memory

  Reads a byte, word, dword, qword, float or double at an address.

  Try: “Read the dword at the player address.”

  Read · read_integer

• Reads text from memory

  Reads a string, narrow or wide, up to a length you set.

  Try: “Read the string at that address.”

  Read · read_string

• Follows a pointer chain

  Follows a multi-level pointer chain and reports every step.

  Try: “Resolve [[base+0x10]+0x20]+0x8.”

  Read · read_pointer_chain

• Starts a memory value scan

  Runs a first scan for a value of a chosen type, or an unknown-value scan.

  Try: “Scan for the value 100.”

  Read · scan_all

• Narrows a scan

  Filters the earlier scan results, for example to values that increased.

  Try: “Now keep values that decreased.”

  Read · next_scan

• Searches memory for a byte pattern

  Finds an array-of-bytes pattern such as 48 89 5C 24.

  Try: “Find the pattern 48 89 5C 24.”

  Read · aob_scan

• Builds a unique byte signature for an address

  Generates a pattern that can find the same address again after the program updates.

  Try: “Make a stable signature for this address.”

  Read · generate_signature

• Shows the machine code at an address

  Disassembles a number of instructions starting at an address.

  Try: “Disassemble the entry point.”

  Read · disassemble

• Guesses a data structure at an address

  Uses Cheat Engine's auto-guess to read memory as a structure with fields.

  Try: “Dissect the structure at this address.”

  Read · dissect_structure

• Finds code that touches an address

  Lists instructions that access a given address.

  Try: “What reads this health address?”

  Read · find_references

• Sets a hardware execution breakpoint

  Sets a breakpoint that logs hits without stopping the program.

  Try: “Log every hit at this instruction.”

  Runs code · set_breakpoint

• Watches an address for reads or writes

  Sets a hardware watchpoint for read, write or both.

  Try: “Tell me what writes to this address.”

  Runs code · set_data_breakpoint

• Starts an invisible hypervisor watch

  Traces reads, writes or executes of an address through the DBVM hypervisor, which needs DBVM enabled in Cheat Engine.

  Try: “Watch writes to this address with DBVM.”

  Runs code · start_dbvm_watch

• Writes a number into the program's memory

  Changes a value in the attached process's memory, as a byte up to a double.

  Try: “Set the gold value to 9999.”

  Write · write_integer

• Writes raw bytes into memory

  Overwrites bytes at an address in the attached process.

  Try: “Patch these bytes at the jump.”

  Write · write_memory

• Writes memory using a page-table base

  Writes to virtual memory using an explicit CR3 through the DBK driver or DBVM, bypassing the usual translation path. It needs the kernel driver or hypervisor.

  Try: “Write these bytes using CR3 0x1234.”

  Runs code · write_process_memory_cr3

• Runs an AutoAssembler script

  Runs an AutoAssembler script such as a code injection or code cave in the attached program.

  Try: “Run this script to inject a hook.”

  Runs code · auto_assemble

• Runs any Lua code inside Cheat Engine

  Executes arbitrary Lua in Cheat Engine's process. It can do anything Cheat Engine's Lua can.

  Try: “Run this Lua snippet.”

  Runs code · evaluate_lua

• Injects a DLL into the program

  Loads a DLL file into the attached process, which runs the DLL's code there.

  Try: “Inject helper.dll.”

  Runs code · inject_dll

• Calls a function in the program

  Calls a function at an address in the target process with one argument.

  Try: “Call the function at this address.”

  Runs code · execute_code

• Runs a shell command on the PC

  Runs a command on the host OS. It is refused unless CE_MCP_ALLOW_SHELL=1 is set when the server starts.

  Try: “Run dir in the game folder.”

  Runs code · run_command

• Permanently deletes a file

  Deletes a file at a path on the Cheat Engine host. The description says the deletion is permanent.

  Try: “Delete that old dump file.”

  Delete · delete_file

• Presses a key

  Simulates holding down a keyboard key by Windows virtual-key code.

  Try: “Hold the W key.”

  Write · key_down

• Moves the mouse pointer

  Moves the cursor to screen coordinates.

  Try: “Move the mouse to 100,200.”

  Write · set_mouse_pos

• Loads a Cheat Engine table file

  Loads a .ct or .cetrainer file, optionally merging into the current table.

  Try: “Load my trainer.ct.”

  Write · load_table

• Saves the cheat table to a file

  Writes the current table to a .ct or .cetrainer file.

  Try: “Save the table as myfix.ct.”

  Write · save_table

• Freezes the attached program

  Pauses the attached process until you unpause it.

  Try: “Pause the game.”

  Runs code · pause_process

Watch out for

• It changes and runs code in other programs

  Tools such as write_memory, auto_assemble, inject_dll and execute_code alter or run code inside the attached program. Use it only on software you own or have permission to test. github.com

• evaluate_lua runs any Lua code

  evaluate_lua, create_thread and queue_to_main_thread execute arbitrary Lua inside Cheat Engine, with no read-only switch. Do not connect an assistant you do not trust. github.com

• It can permanently delete files

  delete_file removes a file on the Cheat Engine host for good. Keep approval on for each tool call. github.com

• Shell tools are off unless you switch them on

  run_command and shell_execute are refused unless CE_MCP_ALLOW_SHELL=1 is set at server start. Leave it unset unless you need them. github.com

• Kernel and hypervisor tools can crash Windows

  The README says some kernel-mode settings cause CLOCK_WATCHDOG_TIMEOUT blue screens when they conflict with DBVM or anti-cheat. Save your work before using DBVM or DBK tools. github.com

• The optional TCP relay gives control to anyone who reaches it

  The README warns that anyone who can reach the relay can control the bridge. It binds to 127.0.0.1 by default, so keep it there. github.com

• Windows only for the default setup

  The default pipe mode uses a Windows named pipe via pywin32. The TCP relay lets the MCP server run elsewhere while Cheat Engine stays on Windows. github.com

Security advisories