Windows-MCP Server
Windows-MCP is a lightweight, open-source MCP server that bridges AI agents (LLMs) with the Windows operating system. Setup config for Claude, Cursor and VS Code.
Project links
How to use it
- Open the listing page and read the server's documentation.
- Copy the configuration or command into your MCP client.
- Restart the client and try one of the server's tools.
Copy setup details
Use these instructions in your own environment. Copying text here does not run it.
MCP configuration
Copy into a client that accepts mcpServers JSON. Other clients may use a different configuration format.
{
"mcpServers": {
"Windows-MCP": {
"command": "uvx",
"args": [
"windows-mcp",
"serve"
]
}
}
}Security checks
Automated checks, last run Nov 2, 2026. They can miss problems and do not guarantee a listing is safe. Read the source and what you are asked to run before you use it.
- NoteKnown vulnerabilities in the packageLayer 2
OSV.dev lists advisories for some versions of this package. Make sure you install a release that fixes them.
Evidence (2)
- windows-mcp (any version): GHSA-vrxg-gm77-7q5g
- Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS
- windows-mcp (any version): PYSEC-2026-3425
- Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS
Source: OSV.dev
- PassedSetup commands and descriptionLayer 1
No blocking patterns. Notes are listed in the evidence.
Evidence (1)
- note: unpinned-package
- Windows-MCP: uvx runs "windows-mcp" without a pinned version, so whoever owns that package name can change what runs
Source: AIWantsThis screening rules
- PassedSource repositoryLayer 2
The repository is public, not archived and has recent activity.
Evidence (3)
- Last push
- 2026-11-02
- Archived
- no
- License
- MIT
Source: GitHub