Windows

Overview

From the repository's own README, as read at the audited commit.

<div align="center">  <h1>🪟 Windows-MCP</h1>  <a href="https://github.com/CursorTouch/Windows-MCP/blob/main/LICENSE">    <img src="https://img.shields.io/badge/license-MIT-green" alt="License">  </a>  <img src="https://img.shields.io/badge/python-3.13%2B-blue" alt="Python">  <img src="https://img.shields.io/badge/platform-Windows%207–11-blue" alt="Platform: Windows 7 to 11">  <img src="https://img.shields.io/github/last-commit/CursorTouch/Windows-MCP" alt="Last Commit">  <a href="https://pepy.tech/projects/windows-mcp">    <img src="https://static.pepy.tech/personalized-badge/windows-mcp?period=total&amp;units=INTERNATIONAL_SYSTEM&amp;left_color=BLACK&amp;right_color=GREEN&amp;left_text=downloads" alt="PyPI Downloads">  </a>  <br>  <a href="https://x.com/CursorTouch">    <img src="https://img.shields.io/badge/follow-%40CursorTouch-1DA1F2?logo=twitter&style=flat" alt="Follow on Twitter">  </a>  <a href="https://discord.com/invite/Aue9Yj2VzS">    <img src="https://img.shields.io/badge/Join%20on-Discord-5865F2?logo=discord&logoColor=white&style=flat" alt="Join us on Discord">  </a>  <a href="https://trendshift.io/repositories/20935?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-20935" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/20935/daily?language=Python" alt="CursorTouch%2FWindows-MCP | Trendshift" width="250" height="55"/></a></div>**Windows-MCP** is a lightweight, open-source project that enables seamless integration between AI agents and the Windows operating system. Acting as an MCP server bridges the gap between LLMs and the Windows operating system, allowing agents to perform tasks such as **file navigation, application control, UI interaction, QA testing,** and more.mcp-name: io.github.CursorTouch/Windows-MCP## Updates- Windows-MCP reached `2M+ Users` in [Claude Desktop Extensiosn](https://claude.ai/directory). - Try out [🪟Windows-Use](https://pypi.org/project/w

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add windows-mcp -- uvx windows-mcp==0.8.5

Details

Source

cursortouch/windows-mcp

PyPI

windows-mcp

Transports

stdio · streamable-http

Credentials it reads

POSTHOG_API_KEY

Tools

Registered at runtime; the list could not be read from source.

License

MIT

Stars

6,986 · pushed 0d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

What the source does

Filesystem

declared (5 observation(s))

Network

declared (1 observation(s))

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (10)

return subprocess.run(["schtasks", *args], capture_output=True, text=True)

f"schtasks /Run failed:\n{run_result.stderr.strip() or run_result.stdout.strip()}"

system use found in code, not declared in the description

.mcpbignore

exec(code, namespace)

"comtypes-gen-%s.lock" % hashlib.md5(sys.prefix.encode("utf-8")).hexdigest(),

return subprocess.CompletedProcess(["schtasks", *args], returncode, "", "")

- Avoid running Windows-MCP with elevated privileges unless absolutely necessary

- UV (Package Manager) from Astra, install with `pip install uv` or `curl -LsSf https://astral.sh/uv/install.sh | sh`

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha c38da87c0a09 · full audit: observations/trust-audit/mcp-server/cursortouch__windows-2.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions