Skip to main content
Glama
kanren3

windbg-mcp

by kanren3
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

windbg-mcp

MCP server that drives cdb.exe (user mode) and kd.exe (kernel mode) as subprocesses, exposing WinDbg debugging to LLM agents over the Model Context Protocol: crash dump analysis, live process debugging, and kernel debugging.

Windows only. Requires Node.js ≥ 22 (uses koffi) or Bun (uses bun:ffi), plus the Windows Debugging Tools (cdb.exe / kd.exe, auto-detected from the standard Windows Kits paths or the Store-installed WinDbg for Windows).

Usage

Add to your MCP client configuration (Node):

{
  "mcpServers": {
    "windbg-mcp": {
      "command": "npx",
      "args": ["-y", "windbg-mcp@latest"]
    }
  }
}

Or with Bun:

{
  "mcpServers": {
    "windbg-mcp": {
      "command": "bun",
      "args": ["x", "windbg-mcp@latest"]
    }
  }
}

Related MCP server: dump-analyzer-mcp-server

Tools

Tool

Purpose

windbg_open_dump

Open a crash dump (.dmp/.mdmp/.hdmp) for analysis

windbg_open_executable

Launch a process under cdb

windbg_attach_process

Attach to a running process by pid or name

windbg_attach_kernel

Connect kd to a kernel target (KDNET / pipe / serial)

windbg_execute_command

Run any debugger command (kb, lm, !analyze -v, …)

windbg_sessions

List active sessions with their state

windbg_interrupt_target

Break into a running target (CTRL+BREAK)

windbg_search_commands

Search the WinDbg command catalog by keyword

windbg_close

End session with q — closes the user-mode target (a kernel target stays locked)

windbg_detach

End session with qd — detaches and leaves a live user-mode or kernel target running

References

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • MCP Debug Server

    nickzer0
    F
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for debugging Windows processes using WinDbg and CDB. It enables users to attach to processes, manage breakpoints, inspect memory, and control execution flow through natural language.
    2
    -

  • gdb-mcp

    datobena
    A
    license
    B
    quality
    C
    maintenance
    MCP server that wraps gdb to enable LLMs to drive live debugging sessions, including starting sessions on binaries, attaching to processes, and running commands.
    7
    2,302 PyPI
    3
    MIT