# Win Mcp Server

> Gives your AI Agent the ability to interact with windows servers, execute powershell, read system info, etc.

- **Type:** MCP server
- **Install:** `agentstack add mcp-inframcp-win-mcp-server`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [InfraMCP](https://agentstack.voostack.com/s/inframcp)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [InfraMCP](https://github.com/InfraMCP)
- **Source:** https://github.com/InfraMCP/win-mcp-server

## Install

```sh
agentstack add mcp-inframcp-win-mcp-server
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Win MCP Server

[](https://www.python.org/downloads/)
[](https://opensource.org/licenses/MIT)
[](https://github.com/rorymcmahon/win-mcp-server/actions/workflows/pylint.yml)
[](https://github.com/rorymcmahon/win-mcp-server/actions/workflows/safety-scan.yml)
[](https://github.com/rorymcmahon/win-mcp-server/actions/workflows/dependency-security.yml)

A Model Context Protocol (MCP) server that provides AI agents with the ability to interact with Windows servers using Windows Remote Management (WinRM). This server enables secure remote PowerShell execution and system management tasks on Windows hosts.

## Features

- **Secure Authentication**: Uses domain credentials stored in macOS Keychain with TouchID authentication
- **PowerShell Execution**: Execute arbitrary PowerShell commands on remote Windows hosts
- **System Information**: Get basic system information, running services, and disk space
- **Error Handling**: Comprehensive error handling with helpful error messages
- **Memory Safety**: Credentials are cleared from memory immediately after use

## Installation

### From PyPI (Recommended)

```bash
pip install win-mcp-server
```

### From Source

```bash
git clone https://github.com/rorymcmahon/win-mcp-server.git
cd win-mcp-server
pip install -e .
```

## Configuration

### Prerequisites

1. **WinRM Configuration**: Ensure target Windows hosts have WinRM enabled and configured.

2. **Credential Setup**: The server will prompt for credentials on first use and cache them securely in macOS Keychain with 4-hour expiration.

### MCP Configuration

Add to your MCP settings file (e.g., `~/.config/mcp/settings.json`):

```json
{
  "mcpServers": {
    "winrm": {
      "command": "winrm-mcp-server"
    }
  }
}
```

## Available Tools

### `setup_credentials(hostname: str)`
Setup credentials for a Windows host (interactive mode).

**Parameters:**
- `hostname`: The target Windows hostname (FQDN)

**Returns:**
- `status`: Success or error status
- `message`: Confirmation message

### `execute_powershell(hostname: str, command: str)`
Execute arbitrary PowerShell commands on a remote Windows host.

**Parameters:**
- `hostname`: The target Windows hostname (FQDN)
- `command`: PowerShell command to execute

**Returns:**
- `status`: Exit code of the command
- `stdout`: Standard output from the command
- `stderr`: Standard error from the command

### `get_system_info(hostname: str)`
Get basic system information from a Windows host.

**Returns:** JSON with Windows product name, total physical memory, and processor information.

### `get_running_services(hostname: str)`
Get list of running services from a Windows host.

**Returns:** JSON array of running services with name, status, and start type.

### `get_disk_space(hostname: str)`
Get disk space information from a Windows host.

**Returns:** JSON array of logical disks with device ID, total size, and free space in GB.

## Usage Examples

### Initial Setup
```bash
"Setup credentials for server01.domain.local"
```

### Basic System Check
```bash
"Get system info and disk space for server01.domain.local"
```

### Service Management
```bash
"Check if IIS is running on webserver.domain.local"
"Get running services on server01.domain.local"
```

### Custom PowerShell Commands
```bash
"Run 'Get-EventLog -LogName System -Newest 10' on server01.domain.local"
"Execute 'Get-Process | Sort-Object CPU -Descending | Select-Object -First 10' on server01.domain.local"
```

## Security

- **Credential Storage**: Domain credentials are securely stored in macOS Keychain
- **TouchID Authentication**: Credentials require TouchID authentication for access
- **Memory Safety**: Passwords are immediately cleared from memory after use
- **Transport Security**: Uses NTLM authentication over HTTP (configurable for HTTPS)
- **Automatic Expiration**: Cached credentials expire after 4 hours
- **Secure Prompting**: Password input is hidden and never logged

## Development

### Setup Development Environment

```bash
git clone https://github.com/rorymcmahon/winrm-mcp-server.git
cd winrm-mcp-server
pip install -e ".[dev]"
```

### Running Tests

```bash
pytest
```

### Code Formatting

```bash
black src/
isort src/
```

## Requirements

- Python 3.10+
- macOS (for Keychain integration)
- Target Windows hosts with WinRM enabled

## License

MIT License - see [LICENSE](LICENSE) file for details.

## Contributing

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Add tests if applicable
5. Submit a pull request

## Support

For issues and questions:
- [GitHub Issues](https://github.com/rorymcmahon/win-mcp-server/issues)
- [Documentation](https://github.com/rorymcmahon/win-mcp-server#readme)
- [Changelog](CHANGELOG.md)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [InfraMCP](https://github.com/InfraMCP)
- **Source:** [InfraMCP/win-mcp-server](https://github.com/InfraMCP/win-mcp-server)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-inframcp-win-mcp-server
- Seller: https://agentstack.voostack.com/s/inframcp
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.