How do I use sysinternals-mcp?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@sysinternals-mcp list all processes with more than 100 threads" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

sysinternals-mcp

by sandraschi

Overview Schema Related Servers Score Discussions

Python

Local

Sysinternals MCP

FastMCP 3.4 wrapper for 12 Sysinternals CLI tools (+ DIY RAMMap equivalent via WMI) -- autorunsc, handle64, pslist, listdlls, tcpvcon, sigcheck, accesschk, psloggedon, psfile, coreinfo, du, psinfo, rammap.

Stack: Python 3.12+ -- FastMCP 3.4.2 -- uv -- ruff

All 12 tools are confirmed CLI-native. No GUI automation, no fake backends. First-run auto-downloads each binary from https://live.sysinternals.com/, verifies the Authenticode signature, and caches it.

Tools

Tool	Function	What it does
`autorunsc`	`run_autorunsc()`	Startup/persistence scan -- CSV output via `-c`
`handle64`	`list_handles()`	Open handles/file locks -- verbose via `-v`
`pslist`	`list_processes()`	Process list with CPU, thread, handle counts
`listdlls`	`list_all_dlls()`	Loaded DLLs per process with version info
`tcpvcon`	`list_connections()`	TCP/UDP connections + owning process
`sigcheck`	`run_sigcheck()`	Authenticode verification, version, VT lookup
`accesschk`	`check_permissions()`	Effective permissions on files/registry/services
`psloggedon`	`list_logged_on_users()`	Logged-on users, local + network
`psfile`	`list_remote_files()`	Remotely opened files on this machine
`coreinfo`	`get_cpu_info()`	CPU topology, NUMA, cache, feature flags
`du`	`disk_usage()`	Directory size breakdown (recursive)
`rammap`	`rammap_physical()` / `rammap_processes()` / `rammap_file_backed()` / `rammap_summary()`	Physical memory breakdown via WMI (DIY RAMMap, no binary)
`psinfo`	`system_info()`	System info: OS, uptime, hotfixes, services

Related MCP server: PortMaster MCP

Quick start

git clone https://github.com/sandraschi/sysinternals-mcp.git
cd sysinternals-mcp
uv sync --group dev
uv run sysinternals-mcp    # stdio MCP for IDE

First run auto-downloads binaries and stores them in %LOCALAPPDATA%\sysinternals-mcp\bin\.

Transport

Mode	Command
stdio	`uv run sysinternals-mcp`
HTTP	`MCP_PORT=11074 uv run sysinternals-mcp`

Binary handling

No EXEs committed to git. Binaries downloaded on first use from live.sysinternals.com.
Authenticode verification: rejects anything not signed by Microsoft / Sysinternals.
EULA: accepted once per machine (marker file in cache dir).

Excluded tools (GUI-only, no scriptable export)

RAMMap -- no CLI export flag exists.
Process Explorer -- GUI-only, no scriptable CLI output.

License

MIT

This server cannot be installed

license - not found

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Latest Blog Posts

Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly
Lightport: Open-Sourcing Glama's AI Gateway
By punkpeye on April 27, 2026.
OpenAI
open source

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/sandraschi/sysinternals-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server