Windows CLI MCP Server

What is Windows CLI MCP Server?

Windows CLI MCP Server is an MCP server for secure command-line interactions on Windows systems, enabling controlled access to PowerShell, CMD, Git Bash shells, and remote systems via SSH. It allows MCP clients like Claude Desktop to perform operations on your system.

How to use Windows CLI MCP Server?

Add the server to your claude_desktop_config.json using npx -y @simonb97/server-win-cli. Optionally specify a config file with the --config flag. Create a default config by copying config.json.example or running npx @simonb97/server-win-cli --init-config ./config.json.

Key features of Windows CLI MCP Server

• Multi-Shell Support: PowerShell, CMD, and Git Bash
• SSH Support: Execute commands on remote systems
• Security Controls: command blocking, path validation, injection protection
• Configurable: custom security rules, shell settings, SSH profiles
• Command logging and history tracking
• Working directory restrictions and command length limits

Use cases of Windows CLI MCP Server

• Run scripts and commands on local Windows machines via AI assistants
• Manage remote Linux/Windows servers through SSH from an MCP client
• Automate system administration tasks with strict security constraints
• Execute shell commands in a controlled, audited environment

FAQ from Windows CLI MCP Server

What shells are supported?

PowerShell, Command Prompt (CMD), and Git Bash are supported. Each can be enabled or disabled in the configuration.

How do I restrict which commands can run?

Blocked commands and arguments are defined in the security section of the config file. Blocked commands apply to both direct use and full paths, case-insensitively.

Does this server allow remote SSH connections?

Yes, SSH is supported but disabled by default. You can enable it and configure connection profiles (password or key authentication) in the ssh config section.

Where is the configuration file stored?

The server looks for config in order: path specified by --config flag, ./config.json, or ~/.win-cli-mcp/config.json.

What are the default security settings?

Default settings include command length limit (2000 chars), blocked dangerous commands (rm, del, format, etc.), restricted working directory to user's home and current directory, command logging, and injection protection enabled.