MCP Server for WinDbg Crash Analysis

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/svnscha-mcp-windbg

About

Use cases: debugging

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

2 read · 5 write · 2 delete · 3 not yet classified

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Python package

Tools (12)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• close_cdb_session

  Close a user-mode (cdb) session and release its resources, addressed by session_id. For a remote session this closes only the MCP client, not the external debug server. Stop any server you started separately; leave pre-existing servers alone. The target is left as the client found it (resumed if it was running at attach, stopped otherwise) unless resume says otherwise.

• close_kd_session

  Close a kernel (kd) session and release its resources, addressed by session_id.

• list_dumps

  List Windows crash dump files in a directory. Helps discover dumps to analyze with open_cdb_dump (or open_kd_dump for kernel dumps).

• open_cdb_dump

  Open and triage a Windows crash dump with cdb.exe (user mode). Runs .lastevent and !analyze -v (optionally kb/lm/~) and returns a session_id. Use that session_id with run_cdb_command and close_cdb_session. For a kernel dump from a bugcheck (MEMORY.DMP, Minidump\*.dmp) use open_kd_dump.

• open_cdb_remote

  Attach to a user-mode remote debug server (-remote) with cdb.exe, e.g. one started with 'cdb -server tcp:port=5005 -noio <program>'. A target that is running when the client attaches is left running and the open returns without triage, unless break_in is true, which breaks in for the triage and leaves it stopped. Returns a session_id for run_cdb_command / send_ctrl_break / close_cdb_session. For kernel targets use open_kd_session instead. WARNING: CDB 10.0.29661.1004 in -server mode with NUL stdin (/dev/null, subprocess.D…

• open_kd_dump

  Open and triage a kernel-mode crash dump with kd.exe: a complete, kernel, or bitmap memory dump (MEMORY.DMP) or a small memory dump (Minidump\*.dmp) written by a bugcheck. Runs vertarget and !analyze -v (optionally kb/lm/~) and returns a session_id for run_kd_command and close_kd_session. For user-mode dumps use open_cdb_dump.

• open_kd_session

  Attach to a kernel target with kd.exe (-k). Waits for the target to connect, breaks in, and returns a session_id for run_kd_command / send_ctrl_break / close_kd_session. Connection strings: KDNET 'net:port=50000,key=1.2.3.4', named pipe 'com:pipe,port=\\.\pipe\com_1,baud=115200,reconnect,resets=0', or serial 'com:port=COM1,baud=115200'.

• read_debugger_log

  Read the newest lines a session's debugger printed, including output no tool call returned, such as kernel debug prints while the target ran. Optionally keep only lines containing grep. Needs the server started with --log-dir; works after the session is closed.

• run_cdb_command

  Run a WinDbg/CDB command on a user-mode session (from open_cdb_dump or open_cdb_remote), addressed by session_id. Optional timeout_seconds overrides the default.

• run_kd_command

  Run a command on a kernel session (from open_kd_session or open_kd_dump), addressed by session_id. Optional timeout_seconds overrides the default (kernel memory reads can be slow).

• send_ctrl_break

  Break into a running live session (cdb remote or kd), addressed by session_id. Useful to interrupt a running target so commands work again.

• wait_for_break

  Block until a resumed target stops, and return everything it printed when it did. Use this after letting the target run with 'g' - to catch the bugcheck, the breakpoint report, or the break-in banner. Returns immediately if the target is already stopped. If it is still running when the wait expires, the target is left running: wait again, or halt it with send_ctrl_break.

Signals

Stars

1,632

Forks

164

Open issues

0

Contributors

13

Weekly downloads

724

Last commit

Oct 23, 2026 (7 days ago)

Last release

Oct 23, 2026 (7 days ago)

Last package publish

Oct 23, 2026 (7 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.svnscha/mcp-windbg

Version

1.6.0

Auth

No auth

Packages

pypi mcp-windbgpypi mcp-windbg

License

MIT

Repository

github.com/svnscha/mcp-windbg

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql