Back to Browse

Winrdp MCP Server

by Emog33k
Developer ToolsUse Caution3.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Zero-config server to provision and administer any Windows RDP box over WinRM/SSH/SMB.

About

Zero-config server to provision and administer any Windows RDP box over WinRM/SSH/SMB.

Security Report

3.2
Use Caution3.2High Risk

winrdp-mcp is a sophisticated Windows administration server with reasonable security architecture but several concerning patterns. The server correctly handles credential encryption, uses properly scoped environment variables, and implements sensible transport-layer isolation. However, critical issues include: (1) unsafe subprocess execution patterns that could allow shell injection, (2) overly broad file I/O and code execution capabilities without input validation on critical paths, (3) permissive default credential validation (cert_validation='ignore') that enables MITM attacks, and (4) insufficient input sanitization on parameters passed to remote execution. These issues are partially mitigated by the server's intended use case (authorized admin tooling only) but remain significant security concerns. Supply chain analysis found 14 known vulnerabilities in dependencies (1 critical, 6 high severity). Package verification found 1 issue.

3 files analyzed · 25 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_ssh

Check that this permission is expected for this type of plugin.

network_smb

Check that this permission is expected for this type of plugin.

network_dcom

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

file_delete

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

registry_read

Check that this permission is expected for this type of plugin.

registry_write

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

clipboard

Check that this permission is expected for this type of plugin.

rdp_control

Check that this permission is expected for this type of plugin.

screenshot

Check that this permission is expected for this type of plugin.

gui_automation

Check that this permission is expected for this type of plugin.

code_execution_python

Check that this permission is expected for this type of plugin.

code_execution_powershell

Check that this permission is expected for this type of plugin.

code_execution_cmd

Check that this permission is expected for this type of plugin.

code_execution_node

Check that this permission is expected for this type of plugin.

service_control

Check that this permission is expected for this type of plugin.

firewall_control

Check that this permission is expected for this type of plugin.

user_management

Check that this permission is expected for this type of plugin.

scheduled_tasks

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Optional Fernet key to encrypt the host inventory at rest. Omit to use a machine-local key file.Required

Environment variable: WINRDP_VAULT_KEY

Tool profile to expose: full (default), admin, rdp, or core.Optional

Environment variable: WINRDP_PROFILE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-emog33k-winrdp-mcp": {
      "env": {
        "WINRDP_PROFILE": "your-winrdp-profile-here",
        "WINRDP_VAULT_KEY": "your-winrdp-vault-key-here"
      },
      "args": [
        "winrdp-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!