MCPInstall
GoSpy logo

GoSpy

by monsterxx03 97 stars monsterxx03/gospy

Inspects and analyzes running Go processes by directly reading memory on Linux and macOS systems, providing deep visibility into goroutine states, memory statistics, and runtime behavior without modifying target applications.

READMEmaster

Go Process Inspector

Go Report Card License Install MCP Server

A tool for inspecting and analyzing running Go processes, including goroutine states, memory statistics, and binary information.

Features

  • View detailed goroutine information (status, scheduling info)
  • Analyze process memory statistics
  • Cross-platform support (Linux and macOS)
  • Terminal UI for interactive inspection
  • HTTP API for programmatic access
  • mcp server

Installation

go install github.com/monsterxx03/gospy@latest

Usage

CLI Interface

# Interactive terminal UI
sudo gospy top --pid <pid>

# HTTP API server
sudo gospy serve --port 8974

# Get process summary
sudo gospy summary --pid <pid>

# Get process summary in JSON format
sudo gospy summary --pid <pid> --json

Summary Command Options

  • --pid/-p - Target process ID (required)
  • --bin/-b - Path to binary file (optional)
  • --json/-j - Output results in JSON format

API Endpoints

  • GET /goroutines?pid=<pid> - List all goroutines
  • GET /memstats?pid=<pid> - Get memory statistics
  • GET /runtime?pid=<pid> - Get runtime version info

MCP Server

The MCP server provides an http (streamableHTTP) endpoint. To enable:

>>> sudo gospy serve --enable-mcp --port 8974

Starting API server on port 8974
Endpoints:
  GET /runtime?pid=<PID>     - Get runtime info
  GET /goroutines?pid=<PID> - Get goroutines list
  GET /memstats?pid=<PID>   - Get memory stats
  GET /mcp   - MCP http endpoint

Available MCP tools:

  • goroutines - Dump goroutines for a go process
  • gomemstats - Dump memory stats for a go process
  • goruntime - Dump runtime info for a go process
  • pgrep - Find pid from process name

Config in cursor

Terminal UI Controls

  • q - Quit
  • r - Refresh data
  • s - Suspend/Resume top view
  • / - Search/filter goroutines

Terminal UI Screenshot

Terminal UI Screenshot

Building from Source

git clone https://github.com/monsterxx03/gospy.git
cd gospy
make

Requirements

  • Go 1.20+
  • Linux or macOS (Apple Silicon only)
  • Root privileges (required for memory access)

Root Privileges

gospy requires root privileges to:

  • Read process memory (/proc//mem on Linux)
  • Access Mach APIs on macOS

Run with sudo:

sudo gospy top --pid <pid>

For development/debugging, you may want to:

  1. Build the binary first: make
  2. Run with sudo: sudo ./gospy [command]

Credits

Version 0.7.0 was completely rewritten from scratch with aider, which wrote >90% of the code. Additional assistance from:

  • DeepSeek (R1 + V3 models) - AI coding assistant

Total AI compute cost: ~$2 USD

License

MIT - See LICENSE file for details.

More Security & Testing MCP servers

Similar servers from the same category.

Enables deepfake detection in images through Proofly API integration, providing detailed analysis results including real/fake probability scores and individual model results for each detected face.

Security & Testing

CASB provides comprehensive visibility and control over your SaaS applications, so you can easily eliminate the risk of compromise, prevent data loss, and avoid compliance violations.

Security & Testing

Audit logs summarize the history of changes made within your Cloudflare account. Audit logs include account level actions like zone configuration changes.

Security & Testing

YaraFlux

threatflux

Provides YARA-based malware scanning capabilities with support for local and MinIO storage backends, enabling security professionals to manage rules, scan files/URLs, and analyze results for threat detection.

filesystemstorage