MCP ExplorerExplorer

Winsecmcp

@GH05TCREWon 10 months ago
3 Apache-2.0
FreeCommunity
AI Systems
Windows Hardening MCP Server

Overview

What is Winsecmcp

winsecMCP is an AI-powered agent designed to automate Windows security hardening tasks, helping administrators configure security settings effectively.

Use cases

Use cases for winsecMCP include automating the configuration of security settings for new Windows installations, performing security audits, and ensuring compliance with organizational security policies.

How to use

To use winsecMCP, run the script with administrator privileges using the command: python winsecMCP.py.

Key features

Key features include information gathering on system status, security hardening options for RDP, firewall, UAC, and user account management, as well as the ability to configure password and account lockout policies.

Where to use

winsecMCP is applicable in environments where Windows security needs to be enhanced, such as corporate networks, data centers, and any organization utilizing Windows operating systems.

Content

Overview

winsecMCP is a Python-based MCP server with Claude for client that helps administrators automate Windows security configuration. It provides a set of tools to check and modify security settings including:

  • Firewall configuration
  • Remote Desktop Protocol (RDP) settings
  • User Account Control (UAC) settings
  • Account policies (password requirements, lockout policies)
  • Service management and hardening
  • User account management

Requirements

  • Windows OS
  • Python 3.10+
  • Administrator privileges (for most operations)
  • Required Python packages:
    • mcp

Usage

Run the script with administrator privileges and start Claude client:

python winsecMCP.py

Make sure to add this to your claude_desktop_config.json file:

{
  "mcpServers": {
    "windows_hardening_agent": {
      "command": "python",
      "args": [
        "C:\\Path\\to\\hardening_server.py"
      ]
    }
  }
}

Features

Information Gathering

  • Get system status and privilege level
  • Check RDP, firewall, UAC, and guest account status
  • Review password policies and account lockout settings
  • Scan for potentially insecure services

Security Hardening

  • Enable/disable RDP
  • Configure Windows Firewall
  • Manage UAC settings
  • Set password and account lockout policies
  • Disable unnecessary services
  • Manage user accounts and group memberships

License

This project is licensed under the Apache License 2.0 - see the LICENSE file for details.

Disclaimer

This tool modifies system settings that can impact system functionality. Always test in a controlled environment before using in production. The authors are not responsible for any damages or issues resulting from the use of this tool.

Tools

No tools

Comments

Recommend MCP Servers

View All MCP Servers