# windbg-mcp

Brings WinDbg engine to AI agents: crash dumps, live user and kernel sessions, Time Travel Debugging, driver IOCTLs.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed · ★ 17
- Author: glslang
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/glslang/windbg-mcp
- Updated: 2026-10-22
- HTML: https://affpapa.org/en/nevibecode/mcp/windbg-mcp

## What it does

The server runs a DbgEng instance and exposes debugging commands over MCP. Agents get user-mode and kernel-mode sessions, can analyze dumps, record TTD traces and step through them. It serves over stdio or listens on HTTP with `--listen` to reach clients on other machines.

Inside: a supervisor and one engine worker per session. Supports Secure Kernel (VTL1) reads from Hyper-V checkpoints, driver IOCTL exploration, and Microsoft hypervisor attach via KDNET. Kernel attach and TTD recording need Administrator rights.

Runs on Windows x64 only. TTD covers user-mode; kernel debugging requires a stopped target for certain memory operations.

## Install

### Claude Code (native platform)

**Install**
- The MCP registry has no launch command for it: see the repository README

## When to use it
- analyze a crash dump and locate the faulting instruction
- record a Time Travel Debugging trace and replay a failure
- attach to the kernel over KDNET
- map a driver's IOCTL surface
- read VTL1 memory from a Hyper-V checkpoint

## Example prompts
- Attach to dump `service_crash.dmp` and show the call stack of the crashing thread
- Start a TTD recording of `app.exe` and find where it opens the registry key
- Connect to kernel debug profile `test-machine` and list loaded drivers

## Similar
- [Front-End Checklist](https://affpapa.org/en/nevibecode/mcp/front-end-checklist.md) — MCP server · ★ 74559
- [Keploy](https://affpapa.org/en/nevibecode/mcp/keploy.md) — MCP server · ★ 18727
- [SeleniumBase MCP](https://affpapa.org/en/nevibecode/mcp/seleniumbase-mcp.md) — MCP server · ★ 13169
- [mobile-mcp](https://affpapa.org/en/nevibecode/mcp/mobile-mcp.md) — MCP server · ★ 9946
- [e2e](https://affpapa.org/en/nevibecode/mcp/e2e.md) — MCP server · ★ 11912
- [mockserver](https://affpapa.org/en/nevibecode/mcp/mockserver.md) — MCP server · ★ 4996

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md