Windbg MCP
未认领C# MCP server for kernel & user-mode Windows debugging — DbgEng COM, KDNET, Frida, dbgsrv, TTD, and integrated VM control. 29 tools for LLM agents.
01 / 选择客户端
03 / 添加配置
claude mcp add --transport stdio 'windbg-mcp' -- 'uvx' 'frida-tools'04 / 在客户端中确认
打开客户端的 MCP 设置，确认服务器已连接并列出工具。复制配置不代表连接成功。
更多AI & ML服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
29 个工具中显示 29 个
文档中列出的工具 (29)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
get_system_state
Full state overview — VM power, KD, guest ops, UMD. Always allowed.
guest_kill_process
Kill a process by PID
guest_list_processes
List running processes with PIDs
guest_run_command
Execute command in guest OS, capture stdout/stderr
guest_transfer_from_vm
Copy file from guest to host
guest_transfer_to_vm
Copy file from host to guest
kd_break
Halt running target (Ctrl+Break)
kd_connect
Attach to kernel via KDNET. Target breaks on connect.
kd_continue
Resume target execution
kd_disconnect
Detach from kernel. Resumes target so VM keeps running.
kd_execute
Run any WinDbg command (k, r, lm, !process 0 0, !analyze -v, etc.)
kd_step
Step one instruction (into or over)
kd_wait_for_event
Wait for breakpoint/exception with timeout. Always returns.
umd_dbgsrv_connect
Connect to remote dbgsrv in guest
umd_dbgsrv_execute
Attach to PID, run WinDbg commands, detach
umd_dbgsrv_skill
dbgsrv best practices and WinDbg command reference for LLMs
umd_frida
Inject JS, eval expressions, list processes, detach
umd_frida_attach
Attach Frida to a guest process
umd_frida_skill
Frida best practices and API reference for LLMs
umd_ttd
Time Travel Debugging — record, stop, retrieve, list traces
umd_ttd_query
Query TTD traces (not yet implemented)
vm_pause
Freeze entire VM
vm_resume
Unpause a paused VM
vm_screenshot
Capture VM display as PNG
vm_set_target
Switch the active VM target at runtime (VMX path + credentials)
vm_snapshot_list
List available snapshots
vm_snapshot_restore
Restore a named snapshot (debug sessions are cleanly torn down and can reconnect after)
vm_start
Power on the VM
vm_stop
Shut down (graceful or hard)