# MCP Server for WinDbg Crash Analysis

A Model Context Protocol server that lets an AI model drive WinDbg for crash-dump triage, live user-mode debugging and kernel debugging using natural-language requests.

MCP Server for WinDbg Crash Analysis bridges an AI model with the Windows debuggers, driving CDB for user-mode dumps and remote sessions and KD for kernel targets, so a request such as showing the call stack and explaining an access violation runs real debugger commands and reasons about their output. It is explicitly not an automatic fix; it is a Python wrapper around cdb.exe and kd.exe.

It can open a crash-dump file and run automated triage in a single call, attach to a live cdb or WinDbg debug server over TCP, a named pipe or COM, or attach to a kernel target over KDNET, a named pipe or serial and wait for it to break in. Several sessions, whether dumps, remote or kernel, can be open at once and addressed independently by session id, a slow live command that outruns its timeout is broken into safely rather than left hanging, and an optional filter script can redact secrets from tool output before it leaves the machine. It runs over stdio locally or as a streamable HTTP service driven from another machine, and is licensed under MIT.

Website: https://svnscha.de/mcp-windbg/