Windows MCP

MCP Security & Auth

A lightweight, open‑source MCP server that lets AI agents interact natively with the Windows UI for tasks like file navigation, app control and UI automation

Track releases GitHub

Python Latest v0.8.0 · 15d ago Security brief →

Features

Seamless native Windows UI integration (file navigation, app control, UI interaction)
Works with any LLM without requiring computer‑vision or fine‑tuned models
Rich toolset for keyboard/mouse simulation and window state capture
Lightweight, MIT‑licensed, easy to install via PyPI or source

Recent releases

View all 9 releases →

Review required

v0.8.0 Mixed 15d

Auth

--stateless-http + screenshot flash + Firefox fallback

Open

Upgrade now

v0.7.5 Security relevant 20d

Auth Breaking upgrade

CORS fix + Host validation

Open

v0.7.4 Bug fix 1mo

Fixed double caching of tree nodes, reducing COM calls per node from two to one and improving traversal speed.

Full changelog

Fixes

Detected double caching of tree nodes, making 2 COM calls per node, now 1 COM call per node, further improved the tree traversal speed.
Updated the MCP config for setting Windows-MCP in Claude Desktop from Windows Store.
Handling UIA Errors Cleanly in UIA
PowerShell Tool missing environment variables fix (Thanks to @JezaChen)

View release on GitHub

v0.7.1 Bug fix 2mo

Notable features

PowerShell execution logic extracted into `PowerShellExecutor` class
MSIX/App path resolutions added for native launching of Windows UWP applications
Dependabot configuration added for weekly grouped package updates

Full changelog

Added

Added PowerShell execution logic extraction into a clean, static PowerShellExecutor class for improved code organization and stability (#158)
Added MSIX App path resolutions to support natively launching MSIX / UWP Windows applications for AI agents (#126)
Added Dependabot configuration for weekly and grouped updates to streamline package management (#145, #125)
Added WINDOWS_MCP_SCREENSHOT_SCALE environment variable to documentation and explicitly handle coordinate mismatches across multiple displays (#116)
Added .idea/ to .gitignore to exclude JetBrains IDE configurations natively (#120)
Added dependency lock mapping for cryptography<=46.0.6 to guarantee win_arm64 ARM PyPI installation stability (#149)

Fixed

Fixed process attachment AttachThreadInput "Access Denied" errors when interacting with protected or elevated processes (#123)
Fixed graceful two-stage subprocess timeouts for Windows process trees to prevent orphaned tasks (#151)
Fixed mouse coordinate mismatches by replacing screenshot_size with screenshot_original_size for precise desktop plotting (#116)
Fixed Snapshot crashes caused by comtypes VARIANT marshaling on non-ASCII application UI layouts (#148)
Fixed UI rendering breakages by stripping out Unicode Private Use Area characters from tool readouts (#120)
Fixed Notification tool failing to display toast messages silently (#121)
Fixed missing scroll attributes in scrape tool (#119)
Prevented child process freezes by ensuring stdin=DEVNULL is passed to the shell loaders natively

View release on GitHub

v0.7.0 Bug fix 2mo

Notable features

Screenshot tool with DXCam backend reporting and UIAutomation hang fix

Full changelog

What's Changed

fix: keyboard focus not transferred when switching foreground window by @JezaChen in https://github.com/CursorTouch/Windows-MCP/pull/106
fix: import _INPUTUnion from enums to fix NameError by @JezaChen in https://github.com/CursorTouch/Windows-MCP/pull/108
fix: resolve Known Folder GUID paths before launching apps by @JezaChen in https://github.com/CursorTouch/Windows-MCP/pull/110
feat: Screenshot tool with DXCam backend reporting and UIAutomation hang fix by @yasuhirofujii-medley in https://github.com/CursorTouch/Windows-MCP/pull/104
refactor: extract tool definitions into tools/ subpackage by @yasuhirofujii-medley in https://github.com/CursorTouch/Windows-MCP/pull/111
fix: validate app ID via shell:AppsFolder instead of string check by @JezaChen in https://github.com/CursorTouch/Windows-MCP/pull/112

Full Changelog: https://github.com/CursorTouch/Windows-MCP/compare/v0.6.9...v0.7.0

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.