
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
windows-management-mcp-server
Advanced tools
Advanced Windows management, diagnostics, security, and optimization MCP server
Windows Management MCP Server is a Python-based Model Context Protocol server for local Windows diagnostics, task management, cleanup, hardware inspection, security checks, and administrative workflows.
It exposes 96 tools over stdio and is designed for local assistants such as Claude Desktop, Cursor, VS Code extension hosts, and other MCP-compatible clients.
Important: This server runs with the privileges of the user account that starts it. Several tools can change system state, delete files, edit the Registry, manage services, install updates, or execute PowerShell. Use the read-only and dry-run tools first, and only enable destructive actions after reviewing the target paths and commands.
nvidia-smi probes, display configuration, installed drivers, problem devices, driver update candidates.For the complete tool catalog, see docs/TOOLS.md.
nvidia-smi on PATH.From PyPI:
pip install windows-management-mcp-server
Create a virtual environment and install the package in editable mode:
python -m venv venv
.\venv\Scripts\Activate.ps1
pip install -e .
Both install paths register the windows-mcp-server command in the active environment.
For clients that can launch a stdio MCP server, use:
{
"mcpServers": {
"windows-management": {
"command": "windows-mcp-server",
"args": []
}
}
}
If the command is not on PATH, point directly at the local virtual environment:
{
"mcpServers": {
"windows-management": {
"command": "C:\\path\\to\\WindowsMCPServer\\venv\\Scripts\\python.exe",
"args": ["-m", "windows_mcp_server.server"],
"env": {
"PYTHONPATH": "C:\\path\\to\\WindowsMCPServer"
}
}
}
}
windows-mcp-server
Or:
python -m windows_mcp_server.server
The server uses stdio transport and is normally launched by an MCP client rather than run interactively.
The vscode-extension/ folder contains a small VS Code extension that launches this MCP server from the repo-local virtual environment first, then falls back to a global windows-mcp-server.
cd vscode-extension
npm install
npm run compile
Open vscode-extension/ in VS Code and press F5 to start an Extension Development Host.
Tools are intentionally mixed across read-only, safer mutation, and sharp mutation categories.
disk_cleanup_report, get_security_status, get_windows_update_status, list_scheduled_tasks, get_process_details.safe_delete_to_recycle_bin, safe_delete_many_to_recycle_bin, safe_delete_by_pattern with dry_run=true.execute_powershell, Registry writes/deletes, permanent file deletion, service changes, update installation, process termination, restore point creation.See docs/SECURITY_MODEL.md before exposing this server to an assistant you do not fully trust.
Compile-check the Python package:
.\venv\Scripts\python.exe -m compileall windows_mcp_server
Check the registered tool count:
.\venv\Scripts\python.exe -c "from windows_mcp_server.registry import register_all_tools, registered_tools; Dummy=type('Dummy',(),{'tool':lambda self: (lambda f:f)}); register_all_tools(Dummy()); print(len(registered_tools))"
Compile the VS Code extension:
cd vscode-extension
npm run compile
windows_mcp_server/ Python MCP server package
windows_mcp_server/tools/ Tool modules grouped by Windows domain
vscode-extension/ Optional VS Code extension wrapper
docs/ Tool catalog, security model, publishing guide
server.json MCP Registry metadata
pyproject.toml Python package metadata
This repository includes server.json for the MCP Registry and PyPI-compatible package metadata.
See docs/PUBLISHING.md for the full GitHub, PyPI, and MCP Registry release flow.
MIT. See LICENSE.
FAQs
Advanced Windows management, diagnostics, security, and optimization MCP server
We found that windows-management-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.