Windbg MCP

Unclaimed

by memoryforensics1

C# MCP server for kernel & user-mode Windows debugging — DbgEng COM, KDNET, Frida, dbgsrv, TTD, and integrated VM control. 29 tools for LLM agents.

Install

$pip install frida-tools

Unclaimed listing

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Tools (29)

get_system_state

Full state overview — VM power, KD, guest ops, UMD. Always allowed.

guest_kill_process

Kill a process by PID

guest_list_processes

List running processes with PIDs

guest_run_command

Execute command in guest OS, capture stdout/stderr

guest_transfer_from_vm

Copy file from guest to host

guest_transfer_to_vm

Copy file from host to guest

kd_break

Halt running target (Ctrl+Break)

kd_connect

Attach to kernel via KDNET. Target breaks on connect.

kd_continue

Resume target execution

kd_disconnect

Detach from kernel. Resumes target so VM keeps running.

kd_execute

Run any WinDbg command (k, r, lm, !process 0 0, !analyze -v, etc.)

kd_step

Step one instruction (into or over)

kd_wait_for_event

Wait for breakpoint/exception with timeout. Always returns.

umd_dbgsrv_connect

Connect to remote dbgsrv in guest

umd_dbgsrv_execute

Attach to PID, run WinDbg commands, detach

umd_dbgsrv_skill

dbgsrv best practices and WinDbg command reference for LLMs

umd_frida

Inject JS, eval expressions, list processes, detach

umd_frida_attach

Attach Frida to a guest process

umd_frida_skill

Frida best practices and API reference for LLMs

umd_ttd

Time Travel Debugging — record, stop, retrieve, list traces

umd_ttd_query

Query TTD traces (not yet implemented)

vm_pause

Freeze entire VM

vm_resume

Unpause a paused VM

vm_screenshot

Capture VM display as PNG

vm_set_target

Switch the active VM target at runtime (VMX path + credentials)

vm_snapshot_list

List available snapshots

vm_snapshot_restore

Restore a named snapshot (debug sessions are cleanly torn down and can reconnect after)

vm_start

Power on the VM

vm_stop

Shut down (graceful or hard)