illegal-instruction-co/processhacker-mcp

Exposes low-level process inspection and manipulation through an MCP server with plugin-based extensibility—tools query memory regions, read/write process memory, and suspend threads via stdin/stdout transport compatible with Claude, Cursor, and VSCode agents. Built in C++ with a DLL plugin architecture allowing custom extensions (including runtime compilation via embedded TCC), while incorporating guardrails like read-only mode, audit logging, and rate-limiting to prevent agent abuse. Targets AI-assisted debugging, reverse engineering, and dynamic analysis workflows where agents need direct system introspection capabilities.