MCP Server for WinDbg Crash Analysis
A Model Context Protocol server for Windows crash dump analysis using WinDbg/CDB
Connector by svnscha · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/svnscha-mcp-windbg
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: debugging
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 2 read · 5 write · 2 delete · 3 not yet classified
- Secrets
- None asked for
- Install scripts
- Not scanned yet
- Runs as
- Python package
Tools by what they do 12
Read from the source code; the running server may list different tools.
Read 2 · Look things up without changing anything.
list_dumpsread_debugger_log
Write 5 · Create, change, send or run things.
close_cdb_sessionclose_kd_sessionopen_cdb_remoteopen_kd_sessionsend_ctrl_break
Delete 2 · Delete, drop, revoke or wipe things.
run_cdb_commandrun_kd_command
Not yet classified 3 · We could not tell from the name and description.
open_cdb_dumpopen_kd_dumpwait_for_break
Secrets and settings it asks for
Other settings (environment variables or headers).
CDB_PATH_NT_SYMBOL_PATH
Tools (12)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
close_cdb_sessionClose a user-mode (cdb) session and release its resources, addressed by session_id. For a remote session this closes only the MCP client, not the external debug server. Stop any server you started separately; leave pre-existing servers alone. The target is left as the client found it (resumed if it was running at attach, stopped otherwise) unless resume says otherwise.
close_kd_sessionClose a kernel (kd) session and release its resources, addressed by session_id.
list_dumpsList Windows crash dump files in a directory. Helps discover dumps to analyze with open_cdb_dump (or open_kd_dump for kernel dumps).
open_cdb_dumpOpen and triage a Windows crash dump with cdb.exe (user mode). Runs .lastevent and !analyze -v (optionally kb/lm/~) and returns a session_id. Use that session_id with run_cdb_command and close_cdb_session. For a kernel dump from a bugcheck (MEMORY.DMP, Minidump\*.dmp) use open_kd_dump.
open_cdb_remoteAttach to a user-mode remote debug server (-remote) with cdb.exe, e.g. one started with 'cdb -server tcp:port=5005 -noio <program>'. A target that is running when the client attaches is left running and the open returns without triage, unless break_in is true, which breaks in for the triage and leaves it stopped. Returns a session_id for run_cdb_command / send_ctrl_break / close_cdb_session. For kernel targets use open_kd_session instead. WARNING: CDB 10.0.29661.1004 in -server mode with NUL stdin (/dev/null, subprocess.D…
open_kd_dumpOpen and triage a kernel-mode crash dump with kd.exe: a complete, kernel, or bitmap memory dump (MEMORY.DMP) or a small memory dump (Minidump\*.dmp) written by a bugcheck. Runs vertarget and !analyze -v (optionally kb/lm/~) and returns a session_id for run_kd_command and close_kd_session. For user-mode dumps use open_cdb_dump.
open_kd_sessionAttach to a kernel target with kd.exe (-k). Waits for the target to connect, breaks in, and returns a session_id for run_kd_command / send_ctrl_break / close_kd_session. Connection strings: KDNET 'net:port=50000,key=1.2.3.4', named pipe 'com:pipe,port=\\.\pipe\com_1,baud=115200,reconnect,resets=0', or serial 'com:port=COM1,baud=115200'.
read_debugger_logRead the newest lines a session's debugger printed, including output no tool call returned, such as kernel debug prints while the target ran. Optionally keep only lines containing grep. Needs the server started with --log-dir; works after the session is closed.
run_cdb_commandRun a WinDbg/CDB command on a user-mode session (from open_cdb_dump or open_cdb_remote), addressed by session_id. Optional timeout_seconds overrides the default.
run_kd_commandRun a command on a kernel session (from open_kd_session or open_kd_dump), addressed by session_id. Optional timeout_seconds overrides the default (kernel memory reads can be slow).
send_ctrl_breakBreak into a running live session (cdb remote or kd), addressed by session_id. Useful to interrupt a running target so commands work again.
wait_for_breakBlock until a resumed target stops, and return everything it printed when it did. Use this after letting the target run with 'g' - to catch the bugcheck, the breakpoint report, or the break-in banner. Returns immediately if the target is already stopped. If it is still running when the wait expires, the target is left running: wait again, or halt it with send_ctrl_break.
Signals
- Stars
- 1,632
- Forks
- 164
- Open issues
- 0
- Contributors
- 13
- Weekly downloads
- 724
- Last commit
- Oct 23, 2026 (5 days ago)
- Last release
- Oct 23, 2026 (5 days ago)
- Last package publish
- Oct 23, 2026 (5 days ago)
From GitHub (fetched Oct 24, 2026) and the package registry.
Details
- Registry name
io.github.svnscha/mcp-windbg- Version
- 1.6.0
- Auth
- No auth
- Packages
- pypi mcp-windbgpypi mcp-windbg
- License
- MIT
- Repository
- github.com/svnscha/mcp-windbg
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from svnscha
Cite this page
MCP Server for WinDbg Crash Analysis. Agent Mart. https://agentmart.dev/connectors/svnscha-mcp-windbg (last updated 2026-10-24)