Win Server

Python 3.10+ License: MIT Pylint Safety Security Scan Dependency Security Check

A Model Context Protocol (MCP) server that provides AI agents with the ability to interact with Windows servers using Windows Remote Management (WinRM). This server enables secure remote PowerShell execution and system management tasks on Windows hosts.

Features

• Secure Authentication: Uses domain credentials stored in macOS Keychain with TouchID authentication
• PowerShell Execution: Execute arbitrary PowerShell commands on remote Windows hosts
• System Information: Get basic system information, running services, and disk space
• Error Handling: Comprehensive error handling with helpful error messages
• Memory Safety: Credentials are cleared from memory immediately after use

Installation

From PyPI (Recommended)

pip install win-mcp-server

From Source

git clone https://github.com/rorymcmahon/win-mcp-server.git
cd win-mcp-server
pip install -e .

Configuration

Prerequisites

1. WinRM Configuration: Ensure target Windows hosts have WinRM enabled and configured.

2. Credential Setup: The server will prompt for credentials on first use and cache them securely in macOS Keychain with 4-hour expiration.

MCP Configuration

Add to your MCP settings file (e.g., ~/.config/mcp/settings.json):

{
  "mcpServers": {
    "winrm": {
      "command": "winrm-mcp-server"
    }
  }
}

Available Tools

setup_credentials(hostname: str)

Setup credentials for a Windows host (interactive mode).

Parameters:

• hostname: The target Windows hostname (FQDN)

Returns:

• status: Success or error status
• message: Confirmation message

execute_powershell(hostname: str, command: str)

Execute arbitrary PowerShell commands on a remote Windows host.

Parameters:

• hostname: The target Windows hostname (FQDN)
• command: PowerShell command to execute

Returns:

• status: Exit code of the command
• stdout: Standard output from the command
• stderr: Standard error from the command

get_system_info(hostname: str)

Get basic system information from a Windows host.

Returns: JSON with Windows product name, total physical memory, and processor information.

get_running_services(hostname: str)

Get list of running services from a Windows host.

Returns: JSON array of running services with name, status, and start type.

get_disk_space(hostname: str)

Get disk space information from a Windows host.

Returns: JSON array of logical disks with device ID, total size, and free space in GB.

Usage Examples

Initial Setup

"Setup credentials for server01.domain.local"

Basic System Check

"Get system info and disk space for server01.domain.local"

Service Management

"Check if IIS is running on webserver.domain.local"
"Get running services on server01.domain.local"

Custom PowerShell Commands

"Run 'Get-EventLog -LogName System -Newest 10' on server01.domain.local"
"Execute 'Get-Process | Sort-Object CPU -Descending | Select-Object -First 10' on server01.domain.local"

Security

• Credential Storage: Domain credentials are securely stored in macOS Keychain
• TouchID Authentication: Credentials require TouchID authentication for access
• Memory Safety: Passwords are immediately cleared from memory after use
• Transport Security: Uses NTLM authentication over HTTP (configurable for HTTPS)
• Automatic Expiration: Cached credentials expire after 4 hours
• Secure Prompting: Password input is hidden and never logged

Development

Setup Development Environment

git clone https://github.com/rorymcmahon/winrm-mcp-server.git
cd winrm-mcp-server
pip install -e ".[dev]"

Running Tests

pytest

Code Formatting

black src/
isort src/

Requirements

• Python 3.10+
• macOS (for Keychain integration)
• Target Windows hosts with WinRM enabled

License

MIT License - see LICENSE file for details.

Contributing

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Add tests if applicable
5. Submit a pull request

Support

For issues and questions:

• GitHub Issues
• Documentation
• Changelog