Winrdp MCP server

Read from the package source without running it. The installed server may list more.

• add_host

  Register a Windows box in the encrypted inventory.

• apply_baseline

  Apply a pleasant server baseline: high-performance power plan, no sleep/hibernate, long-path support, hide Server Manager at logon, and optionally set the timezone. Makes a fresh box comfortable to work on. Runs elevated.

• build_server
• cleanup_stagedwrite action

  Remove a staged tool by name, or wipe the whole tool cache if name is omitted.

• clear_event_log

  Clear a Windows event log. Runs elevated.

• clipboard_get

  Read the clipboard text of the interactive session on a box.

• clipboard_set

  Set the clipboard text of the interactive session on a box.

• deploy_ui_agentwrite action

  Deploy the interactive-desktop UI agent (winremote-mcp) onto a box for click/type/OCR-level control, and start it as an HTTP MCP endpoint.

• download_file

  Download a URL directly onto a box (server-side, TLS 1.2). Returns size + SHA-256.

• edit_file

  Find/replace inside a text file on a box (literal by default, or `regex`). Returns the number of replacements; set count_only to preview without writing.

• enable_ssh

  Install and start the Windows OpenSSH server on a box, open the firewall, and set PowerShell as the default SSH shell.

• enable_winrm

  (Re)run the WinRM enablement script on a box through the current transport.

• failed_logons

  Recent failed logon attempts (Security event 4625) — account, source IP, type.

• file_copy

  Copy a file or directory on a box (server-side, no round-trip through operator).

• file_deletewrite action

  Delete a file or directory on a box.

• file_download

  Download a file from a box to the operator machine.

• file_hash

  Compute a file hash on a box. algorithm: SHA256|SHA1|MD5|SHA384|SHA512.

• file_list

  List a directory on a box (files and folders with size and mtime).

• file_move

  Move or rename a file/directory on a box.

• file_read

  Read a text file from a box (UTF-8). Truncates at max_bytes.

• file_search

  Find files by name pattern under a directory.

• file_uploadwrite action

  Upload a file from the operator machine to a box.

• file_writewrite action

  Write (or append) content to a file on a box.

• find_and_click

  OCR the desktop, find on-screen `text`, and click its center — vision-lite clicking for UIs that UI Automation can't see. occurrence picks the Nth match.

• firewall_add

  Open (or block) a port in Windows Firewall.

• firewall_deletewrite action

  Delete firewall rule(s) by display name.

• firewall_rules

  List firewall rules for a direction.

• focus_window

  Bring a window to the foreground by (partial) title so keystrokes land in it.

• get_acl

  Read the owner and access rules (ACL) of a file/folder/registry path.

• grant_acl

  Grant a principal rights on a path via icacls. rights: F|M|RX|R|W or a word like FullControl->F. Runs elevated. Use take_own first if access is denied.

• group_add_member

  Add a user to a local group (e.g. 'Administrators', 'Remote Desktop Users').

• gui_scriptwrite action

  Run a PowerShell block in the interactive session with GUI helpers pre-loaded — the one-call way to do a multi-step GUI sequence without paying per-action latency.

• health_report

  One-call box health: OS/uptime, CPU/RAM, per-disk free, top processes, stopped auto-start services, recent System/Application errors, pending Windows Updates, and Defender status. The "how is this box doing" summary.

• kill_processwrite action

  Kill a process by pid or by name (all matching).

• list_hosts

  List all registered boxes (passwords redacted) and which one is active.

• list_open_ports

  Listening TCP ports with the owning process — the box's exposed attack surface.

• list_processes

  List running processes with pid, memory, and CPU seconds.

• list_services

  List Windows services (name, display name, status, start mode).

• list_staged_tools

  List tools/scripts staged on a box.

• list_tasks

  List scheduled tasks (name, path, state).

• list_users

  List local user accounts (enabled state, last logon, admin membership).

• list_windows

  List the top-level windows on the interactive desktop (title, pid, handle, bounds).

• make_dirwrite action

  Create a directory (and parents) on a box.

• mouse_click

  Click at screen coordinates (x, y). button: left | right | middle.

• mouse_drag

  Press at (x1,y1), drag to (x2,y2), release. button: left | right | middle.

• mouse_move

  Move the mouse cursor to screen coordinates (x, y).

• net_connections

  List TCP connections on a box. state: Listen|Established|* (all).

• net_info

  Network configuration of a box: adapters, IPv4, gateway, DNS servers, MAC.

• ocr_screen

  Read text off the live desktop via the built-in Windows OCR engine (Win10+). Returns the full text plus per-word screen coordinates (center x/y + bounding box). Pairs with mouse_click / find_and_click. (Claude can also just read a screenshot.)

• ping

  Ping a target from the box.

• port_check

  Test whether a TCP port on `target` is reachable *from the box*.

• port_proxy_add

  Add a netsh portproxy on a box (v4->v4). Great for tunneling RDP/other services through a reachable box to one behind NAT. Runs elevated.

• port_proxy_deletewrite action

  Delete a netsh portproxy rule by listen port. Runs elevated.

• port_proxy_list

  List active netsh portproxy rules on a box.

• provision_host

  Zero-config provision: make a box remotely manageable no matter its state.

• rdp_disable

  Disable incoming RDP connections.

• rdp_disconnect_session

  Disconnect an RDP session by id (keeps it running).

• rdp_enable

  Enable RDP: allow connections, open the firewall group, set NLA. Idempotent.

• rdp_logoff_session

  Log off an RDP session by id (ends it).

• rdp_sessions

  List RDP/console sessions (id, user, state) via ``qwinsta``.

• rdp_set_port

  Change the RDP listening port and (optionally) open it in the firewall. Takes effect after a reboot or a TermService restart.

• rdp_status

  Report RDP configuration: enabled, NLA, port, max connections, firewall.

• reboot_and_wait

  Reboot a box and block until it is reachable again (WinRM/SSH back up). Essential for automation that must continue after a restart.

• record_screen

  Record the desktop for a few seconds and return it as an animated GIF.

• reg_deletewrite action

  Delete a registry value (if name given) or an entire key.

• reg_read

  Read a registry key (all values) or a single value. path like 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion'.

• reg_writewrite action

  Write a registry value. type: String|DWord|QWord|Binary|ExpandString|MultiString. Creates the key if missing.

• remove_hostwrite action

  Remove a box from the inventory.

• run_elevatedwrite action

  Run PowerShell with a full elevated token via a one-shot Scheduled Task. run_as 'SYSTEM' (default) needs no password. This is the real UAC bypass path used when a normal WinRM/SSH logon would otherwise get a filtered token.

• run_on_hostswrite action

  Run one PowerShell script across many boxes in parallel and collect results.

• send_keyswrite action

  Send keystrokes to the active window using SendKeys syntax.

• service_control

  Control a service. action: start | stop | restart | enable | disable | manual | auto.

• service_createwrite action

  Create a Windows service. start: auto|demand|disabled. Optionally run under a specific account. Runs elevated.

• service_deletewrite action

  Delete a Windows service. Runs elevated.

• set_dns

  Set DNS servers on an interface. servers: comma-separated (e.g. '1.1.1.1,8.8.8.8'). Use net_info to get interface aliases. Runs elevated.

• stage_scriptwrite action

  Write a script (PowerShell/batch/py/text) into the box's tool cache and return its remote path, ready to run with run_powershell/run_cmd.

• stage_tool

  Pull a helper tool onto a box on demand.

• start_process

  Launch a program/command on a box. elevated=True for full token, as_user=True to launch in the interactive RDP desktop session.

• sync_folder

  Mirror a LOCAL operator folder to a box efficiently (zip → upload → expand). mirror=True wipes the destination first so it matches the source exactly.

• tail_file

  Return the last N lines of a text file on a box (snapshot).

• take_own

  Take ownership of a file/folder via takeown (needed before changing a locked ACL). Runs elevated.

• task_createwrite action

  Create a scheduled task. schedule: ONCE|DAILY|HOURLY|ONLOGON|ONSTART. run_as SYSTEM needs no password; highest=True runs with a full token.

• task_deletewrite action

  Delete a scheduled task by name.

• task_runwrite action

  Run a scheduled task now.

• test_host

  Scan reachable management ports and verify the live transport for a box.

• transfer_between_hostswrite action

  Copy a file from one registered box to another, straight through the controller.

• type_text

  Type literal text into the active window (SendKeys metacharacters auto-escaped). Use `window` to focus a window by title first.

• uac_get

  Read the box's UAC policy (EnableLUA, admin prompt behaviour, token filter).

• uac_set

  Adjust UAC policy. disable_token_filter=True lets non-builtin local admins get a full token over the network (LocalAccountTokenFilterPolicy=1). EnableLUA changes need a reboot.

• ui_find

  Find UI elements on the desktop via UI Automation.

• ui_invoke

  Find a control by (partial) name and activate it — Invoke (buttons), else Toggle, else click its center. The reliable way to press a button without pixel math.

• ui_set_text

  Set the text of an input control found by (partial) name (UIA ValuePattern).

• unzip_path

  Extract a .zip archive on a box.

• use_host

  Make a registered box the active target for subsequent tool calls.

• user_createwrite action

  Create a local user; optionally add to Administrators and Remote Desktop Users.

• user_deletewrite action

  Delete a local user account.

• wait_for_window

  Wait until a window whose title contains `title` appears on the desktop. Polls in-session in a single call (cheap despite the as_user path).

• whoami_priv

  Current session's user, groups, integrity level, and token privileges — the quick 'what can this session actually do' check.

• write_eventwrite action

  Write an entry to a Windows event log (creates the source if needed). Elevated.

• zip_path

  Compress a file/folder into a .zip on a box.

• Code scan37 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 1 days ago15/15
• Maintainer identityregistry namespace matches repository owner6/10

Safety score

80/100

higher than 60% of 48,255 servers

Tools

100

the typical server has 7

Tools that change things

26%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

3

more than 80% of 28,688 servers

Winrdp: common questions

Is Winrdp MCP server safe?

Mostly: it is graded B (80/100). Read the Winrdp safety report

How do I install Winrdp?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Winrdp need an API key?

Yes. The registry entry asks for WINRDP_VAULT_KEY.

Is Winrdp maintained?

The last commit was 42 days ago (2026-09-23). The latest release is v0.1.3.

What can I use instead of Winrdp?

Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.

How does Winrdp compare with other MCP servers?

safety score 80/100 (higher than 60% of 48,255 servers); tools 100 (the typical server has 7); tools that change things 26% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.