windbg-mcp
SolidMCP server exposing WinDbg/DbgEng (live user-mode, kernel, crash dumps, Time Travel Debugging) to AI agents over stdio
Install
Plugins install via a marketplace, in two steps.
This plugin isn't listed in a marketplace we've indexed. Install it directly from its GitHub repository — the README has the setup steps.
View on GitHubBundles
Everything this plugin ships — skills, agents, commands, hooks, and MCP servers it bundles.
Skills (7)
eval-bench
Run and read the local-model benchmark (`tools/local_model_eval.py`) against this server - the grid's fences, what the grader's matching rules are for, `--verify-key`, `--compare`/`--series`, and how a moved aggregate gets misread as a controlled result. Use when running the eval, adding or re-grading a task, or writing up a benchmark result.
handoff
Hand this repo's work over - which files a handoff touches (CLAUDE.md, `.claude/rules/`, FOLLOWUPS.md, DONE.md, docs/smoke-test.md), how closing an item is a move rather than an edit, and why every number and mechanism must be re-derived rather than recalled. Use when updating the handoff docs, closing a FOLLOWUPS item, or writing prose that states a rule about how this code behaves.
live-kernel
Reach and drive a live kernel target from this bench - KDNET and serial wiring and their traps, loading and walking a driver's IOCTL dispatch (HEVD), what `.reload` does to the module inventory, and where symbols must live. Use when attaching to a kernel target, debugging a driver over KD, or diagnosing an attach that parked or symbols that will not resolve.
review-round
Work a PR review round in this repo - reading bot findings with the head SHA, deciding what to act on and where the reason for a decline goes, spotting findings that accumulate on one seam, and mutation-verifying a new rule against the mutation it is for. Use when handling review comments on a windbg-mcp or dbgscope PR, or before calling a review done.
tiers
Run and interpret this repo's test tiers - what `cargo test` covers, which gates are off by default, and how to turn on the dump, bounded, live-kernel, TTD and 32-bit tiers. Use before claiming a change is covered by a green run, when a tier needs enabling, or when a pass count or SKIPPED line has to be read correctly.
msrc-patch-diff
Investigate a Windows CVE through MSRC, acquire verified current and previous stable component binaries for the same Windows product and architecture, and compare them with Binary Ninja Personal and external BinDiff. Use for CVE patch comparisons and similarity acceptance captures.
windbg-debugging
Drive WinDbg/DbgEng via the `windbg` MCP server to debug Windows crash dumps, live user-mode and kernel targets, and Time Travel Debugging (.run) traces. Use when analyzing a .dmp, attaching to a process or the kernel, or recording/navigating/analyzing a TTD trace.
Quality Score: 71/100
Details
- Author
- glslang
- Repository
- glslang/windbg-mcp
- Created
- 3 months ago
- Last Updated
- today
- Language
- Rust
- License
- MIT