(Work in progress). Library for Amiga 68k that works in conjunction with a host based MCP server to facilitate AI assisted SW development.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"amiga-dev": {
"url": "http://localhost:3000/mcp",
"type": "streamable-http"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
A cross-development environment for Commodore Amiga (68k) that connects a modern host machine to an emulated (or real) Amiga via serial, providing live debugging, memory inspection, variable editing, remote execution, and full MCP integration
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx 'Pillow' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
Arbitrary Code Execution in Pillow
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).
PYSEC-2026-165
Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
### Impact Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. ### Patches Patched version: 12.2.0 Pillow 12.1.1 addressed CVE-2026-25990 by adding checks for tile extents in PSD image decoding/encoding to prevent an out-of-bounds write. However, the bounds checks computed tile extent sums using types susceptible to integer overflow, meaning a PSD image with carefully chosen tile dimensions could produce values that wra
Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
### Impact An attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. ### Patches Patched version: 12.2.0. PdfParser (introduced in Pillow 4.2.0) follows Prev pointers in PDF trailers to read cross-reference sections. If a trailer's Prev pointer references an offset that has already been processed — either pointing to itself or forming a longer cycle — the parser enters an infinite loop. Pillow now tracks pre
Pillow has a heap buffer overflow with nested list coordinates
Passing nested lists as coordinates to APIs that accept coordinates such as `ImagePath.Path`, `ImageDraw.ImageDraw.polygon` and `ImageDraw.ImageDraw.line` could cause a heap buffer overflow, as nested lists were recursively unpacked beyond the allocated buffer. Coordinate lists are now validated to contain exactly two numeric coordinates. This was introduced in Pillow 11.2.1.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.
MCP Security Weekly
Get CVE alerts and security updates for Amiga_mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
A cross-development environment for Commodore Amiga (68k) that connects a modern host machine to an emulated (or real) Amiga via serial, providing live debugging, memory inspection, variable editing, remote execution, and full MCP integration with Claude Code.

Brew-style installer — fetches the source, installs the Python host server, pulls the m68k Docker cross-compiler, builds the bridge daemon + examples, and launches the web UI on http://localhost:3000. Re-running pulls the latest commit and rebuilds in place.
macOS / Linux:
curl -fsSL https://raw.githubusercontent.com/geekychris/amiga_mcp/main/scripts/install.sh | bash
Windows (PowerShell):
iwr -useb https://raw.githubusercontent.com/geekychris/amiga_mcp/main/scripts/install.ps1 | iex
The installer requires git, python>=3.10, and Docker. On mac/Linux you can opt into auto-install of missing CLI tools with AMIGA_MCP_AUTO_INSTALL=1. Docker Desktop on macOS/Windows needs a GUI install regardless.
What it does NOT install: FS-UAE itself (you need a Kickstart ROM — see FS-UAE Emulator Setup). The optional patched fs-uae fork with the HTTP debugger is opt-in via AMIGA_MCP_BUILD_PATCHED=1 (Linux + macOS). DevBench works fine with stock fs-uae either way; the patched build unlocks the FS-UAE tab in the Web UI and the amiga_fsuae_* MCP tools.
Knobs (env vars before invoking):
| Variable | Default | Meaning |
|---|---|---|
AMIGA_MCP_SRC | $HOME/.amiga-devbench/src | Where to clone the repo |
AMIGA_MCP_REF | main | Git ref to check out |
AMIGA_MCP_REPO | https://github.com/geekychris/amiga_mcp.git | Remote |
AMIGA_MCP_BUILD | 1 | Build examples via Docker (0 to skip) |
AMIGA_MCP_START | 1 | Launch web UI in background (0 to install only) |
AMIGA_MCP_OPEN | 1 | Open browser when ready (0 to suppress) |
AMIGA_MCP_AUTO_INSTALL | 0 | (mac/Linux) 1 to brew/apt/dnf install missing deps |
AMIGA_MCP_BUILD_PATCHED | 0 | (mac/Linux) 1 to clone+build the patched fs-uae fork into ~/.amiga-devbench/fs-uae. Combine with AMIGA_MCP_AUTO_INSTALL=1 to also install the ~10 system libs it needs. Takes ~10 min. |
[emulator] binary in devbench.toml accepts the literal "auto" (default). When auto, devbench searches in order:
$AMIGA_MCP_FSUAE_BIN env var~/.amiga-devbench/fs-uae (installed by AMIGA_MCP_BUILD_PATCHED=1)/tmp/fsuae-src/fs-uae (default output path of the patched fork's build.sh)~/code/fsuae_remote_patch/fs-uae (common dev checkout)fs-uae on PATH (stock build from Homebrew / apt / etc.)It prefers the patched build when found (probed by scanning the binary for the fs-uae-rpc service string). Set binary to an explicit path to pin a specific build. Check /api/emulator/status (patched: true|false) or the devbench startup log to confirm which one was selected.
The web UI runs in the background under $HOME/.amiga-devbench/run/devbench.pid with logs in $HOME/.amiga-devbench/logs/. Stop with kill $(cat ~/.amiga-devbench/run/devbench.pid) (or Stop-Process on Windows).