SkillFoxx

MCP Server for WinDbg

MCP Server for WinDbg Crash Analysis

An MCP server that hands the agent the Windows debuggers: crash dump analysis, remote and kernel debugging in natural language

  • 1,672 ★ on the repository
  • Last commit
  • MIT
MCP server

Extended access

Why this level

  • Runs arbitrary debugger commands on the host and reads dump files
  • Attaches to live processes and to the kernel of a target machine
All reasons and checks

svnscha/mcp-windbgAuthor:Sven Scharmentke

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/mcp-server-for-windbg-crash-analysis

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Extended accessThe tool runs code or makes network calls and only reads external data.

  • Runs arbitrary debugger commands on the host and reads dump files
  • Attaches to live processes and to the kernel of a target machine

This is third-party code. Review the repository files before installing.

What it does

The server wraps the stock Windows debuggers cdb.exe and kd.exe and lets the agent run real WinDbg commands, then reason about the output. It opens .dmp, .mdmp and .hdmp crash dumps and runs an automated triage in one call: !analyze -v, stacks, modules, threads. Beyond dumps it attaches to a live user-mode process through cdb -server and to a kernel target through kd over KDNET, a named pipe or serial. In an open session the agent can run any debugger command such as kb, lm, !process and !heap, keep several sessions open at once addressed by id, and break into a slow live command with CTRL+BREAK. It also offers batch triage across a folder of dumps and a filter script that scrubs secrets and personal data from arguments and output before they leave the machine.

Who it is for. For C and C++ developers, reliability engineers and support staff who investigate Windows crashes and hangs.

Good fit when

  • You have a crash dump and need the cause of an exception and the faulting frame
  • You need to attach to a live process and inspect state during a hang
  • You need kernel debugging: drivers, bugchecks, boot-time issues
  • You have a folder of dumps and need the common signature

Not a fit when

  • You are not on Windows and cdb.exe and kd.exe are not available
  • You expect an automatic fix rather than analysis and root cause

Example request

Analyze the dump at C:\dumps\app.dmp, show the call stack and explain this access violation

MCP

Transport
stdio, http
Authentication
not required

Environment variables

_NT_SYMBOL_PATH
Symbol path, usually the Microsoft symbol server. Without symbols dump analysis is less informative.

Limitations

Runs on Windows only and needs the Debugging Tools for Windows or WinDbg installed, which supply cdb.exe and kd.exe. Symbols require an _NT_SYMBOL_PATH, usually pointing at the Microsoft symbol server. Plugin install needs uv; manual package install needs Python 3.10 or newer. In enterprise setups that define allowedMcpServers, plugin-bundled servers may be silently skipped, and the author recommends registering the server manually.

How to disable. If you installed the plugin, remove it via /plugin. If you registered the server manually, run claude mcp remove mcp-windbg or delete the server entry from your client configuration.

FAQ

Does it replace the debugger?

No. It wraps cdb.exe and kd.exe: the agent runs real WinDbg commands and explains the output, but the debuggers themselves must be installed separately.

Can I drive it from another machine?

Yes. The server runs locally over stdio or as an HTTP service you control from another computer.

Discussion

No questions or reviews yet.

MCP servers

A debugger MCP server: the agent sets breakpoints, steps through code and reads variables of a live program over DAP.

MCP serverBroad access107
Official

A command-line debugger for MCP servers from Giant Swarm: a REPL for tools, OAuth 2.1 and an MCP server mode for Cursor

CLIExtended access38

MCP server that turns a RAD Studio machine into a remote backend for agents: read, safe editing, MSBuild builds, git and deploy

MCP serverBroad access23

A debugger with no IDE: an agent sets breakpoints, steps through code and inspects variables in ten languages

MCP serverBroad access188

A transparent proxy between an AI client and an MCP server: shows every JSON-RPC frame in the terminal, checks a capture in CI and exports spans

CLIBroad access368
Official

A Java thread dump analyzer with an MCP server: an agent finds deadlocks and stuck threads without reading huge stack logs

MCP serverExtended access554

README in short

The README describes an MCP server that connects an agent to the Windows debuggers for crash dump analysis, user-mode remote debugging and kernel debugging. It lists the open_ and run_ tools for cdb and kd sessions, session ids, breaking into a live command and batch dump triage. Installing in Claude Code goes through plugins: the uvx server, plus separate plugins with skills and a crash-analyst agent. Other clients install the mcp-windbg package from PyPI and set _NT_SYMBOL_PATH. There is scenario documentation and a command reference. MIT licensed.

README badge

Report a problem