System information is useful to an assistant, but access to that information should not silently imply permission to change the machine. winadm-mcp exposes Windows administration capabilities through MCP with a read-only default and explicit controls for actions that make changes.
Inspect before acting
Services, processes, event logs, and system information provide context for troubleshooting. Read-only access supports questions about what is running and what the system reports without requiring a service restart or process termination just to collect information.
Separate write capability
Service-control actions and process termination require write access to be enabled. Input validation and structured PowerShell execution help keep the interface bounded, but a permitted action can still interrupt real work. The person configuring the server should choose its privileges and available capabilities deliberately.
Keep the operator in the loop
MCP provides a tool interface, not a guarantee that a model's diagnosis is correct. Review the server's configuration and supported actions before connecting it to a client, especially on a shared or important computer. The repository documents installation, permissions, and the available administration tools.
Explore winadm-mcp → · Source and documentation ↗