Live survey286 models · 13 providers · 19,992 auditsAudited verification-before-completion · SAFE →What changedHow we verifyllms.txt

MCP server · Audited from source

mcp-windbg

by svnscha/mcp-windbgMIT licenceAudited 24 Oct 2026 · source 6c3c8fd69867

PyPI mcp-windbg 1.6.0stdiostreamable-http★ 1,632
✓SAFEGrade B · 89/100 · 24 Oct 2026 · 6c3c8fd
1,632GitHub stars
InstallView source on GitHub ↗

Is it safe? Yes — SAFE, grade B (89/100). It exposes 12 tools: 9 read, 3 write and 0 destructive. The audit recorded 8 findings (0 critical, 0 high, 0 medium, 6 low). Maintainer's description: Model Context Protocol for WinDbg.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “mcp-windbg (svnscha/mcp-windbg)”. Retrieved 24 Oct 2026. https://modelsatlas.com/mcp/svnscha/mcp-windbg

Trust audit

Audit 0.4.1 · full source read 24 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium6 low2 info

8 findings, listed below with the file and line each was found on. Grade A needs a sandboxed behavioural run too; this audit read the source only.

What the source does

  • FilesystemDeclared2 observations
  • NetworkDeclared2 observations
  • ShellNone observedNothing seen in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

“Declared” means the server says it does this and the source agrees. Browser, file and shell access are expected of some kinds of server.

Five audit layers

LayerWhat we checkResult
L0 ProvenanceRepo owner, licence, archive status, activityPASS 3 findings
L1 Static sourceSecrets, path traversal, supply chainPASS 5 findings
L2 InstructionsPrompt injection and authority framing in docs and tool descriptionsPASS
L3 InventoryDeclared tools match the sourcePASS
L4 SandboxRun in isolation and watch behaviourSKIPPED

Provenance & runtime

Who published it, and what the audit could and could not run

Provenance

  • Repository owner svnschaUser accountAccount type recorded when we read the repository.
  • PackagePublished on PyPImcp-windbg at version 1.6.0
  • LicenceMITFrom the repository, as read at the audited commit.
  • Last pushTodayActivity of the repository when we read it.
  • Source commit read6c3c8fd69867The audit covers exactly this commit, read on 24 Oct 2026.

Runtime

  • Sandbox runNot run yetThis audit read the source only; it did not execute the server.
  • Tool inventory12 declaredRead from the source and classed read, write or destructive.

Every value here is read from the record's own repository and audit.Suggest a correction

Findings (8)

Sorted by severity

LOWInventory / provenanceinv.hidden_file · .release-please-manifest.json
F-13 Inventory / provenanceCWE-1104Layer L0
.release-please-manifest.json
Why
hidden member outside the usual dotfiles
Fix
review its purpose
LOWNetwork egressnet.raw_ip · CLAUDE.md:285
F-04 Network egressCWE-200 · CWE-319Layer L1
python -m mkdocs serve                  # live preview at http://127.0.0.1:8000
Why
No further detail recorded for this rule.
Fix
—
LOWNetwork egressnet.raw_ip · docs/reference/cli.md:58
F-04 Network egressCWE-200 · CWE-319Layer L1
The endpoint is then `http://127.0.0.1:8000/mcp`. See
Why
No further detail recorded for this rule.
Fix
—
LOWNetwork egressnet.raw_ip · docs/scenarios/http-service.md:13
F-04 Network egressCWE-200 · CWE-319Layer L1
It serves MCP at `http://127.0.0.1:8000/mcp`. Pass the same server options as usual, for example
Why
No further detail recorded for this rule.
Fix
—
LOWNetwork egressnet.raw_ip · requirements-docs.txt:3
F-04 Network egressCWE-200 · CWE-319Layer L1
#   python -m mkdocs serve      # live preview at http://127.0.0.1:8000
Why
No further detail recorded for this rule.
Fix
—
LOWNetwork egressnet.raw_ip · scripts/test_signing_http.py:55
F-04 Network egressCWE-200 · CWE-319Layer L1
SIGNING_URL=f"http://127.0.0.1:{server.server_port}/sign")
Why
No further detail recorded for this rule.
Fix
—
INFOInventory / provenanceinv.oversize · src/mcp_windbg/tests/dumps/DemoCrash1.exe.7088.dmp
F-13 Inventory / provenanceCWE-1104Layer L0
src/mcp_windbg/tests/dumps/DemoCrash1.exe.7088.dmp
Why
8190443 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · src/mcp_windbg/tests/dumps/KernelMiniDump.0xE2.dmp
F-13 Inventory / provenanceCWE-1104Layer L0
src/mcp_windbg/tests/dumps/KernelMiniDump.0xE2.dmp
Why
1562596 bytes not read
Fix
—

Tools it exposes

12 declared in source · 0 destructive

9 read3 write0 destructive
ToolRiskWhat it does
run_cdb_commandwriteNo description in the source
run_kd_commandwriteNo description in the source
send_ctrl_breakwriteNo description in the source
close_cdb_sessionreadNo description in the source
close_kd_sessionreadNo description in the source
list_dumpsreadNo description in the source
open_cdb_dumpreadNo description in the source
open_cdb_remotereadNo description in the source
open_kd_dumpreadNo description in the source
open_kd_sessionreadNo description in the source
read_debugger_logreadNo description in the source
wait_for_breakreadNo description in the source

Install

Package version 1.6.0 · audited commit 6c3c8fd

claude mcp add mcp-windbg -- uvx mcp-windbg==1.6.0

The command pins the package version recorded in the source (1.6.0); the audit covers commit 6c3c8fd69867. Transport: stdio · streamable-http. No environment variables required.

Audit history

  1. ✓SAFE B 89 / 100

    First audit · 6c3c8fd69867

README badge

For maintainers · updates on every re-audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B 
[![ModelsAtlas: SAFE B](https://modelsatlas.com/mcp/svnscha/mcp-windbg/badge.svg)](https://modelsatlas.com/mcp/svnscha/mcp-windbg/)

The badge always shows the latest audit; a maintainer cannot pin an old verdict.

Other ratings

Cited, never blended into our score

No third-party security ratings are recorded for this server yet. When they exist they appear here with their source and date, beside, not inside, our grade.

Questions about mcp-windbg

What is the mcp-windbg MCP server?
Model Context Protocol for WinDbg.
What tools does mcp-windbg expose?
12 in total: 9 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is mcp-windbg safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does mcp-windbg need?
No credential environment variables were found in its source, so it appears to need none.
How does mcp-windbg run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as mcp-windbg.
How current is this page?
The grade is for one exact copy of the source (6c3c8fd69867), read on 2026-10-24. The repository is watched and re-audited when it changes.

Sources

  • svnscha/mcp-windbg on GitHub — the source we read, its licence, stars and activityObserved · 24 Oct 2026
  • ModelsAtlas trust audit — SAFE verdict for commit 6c3c8fd69867Observed · 24 Oct 2026

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.