MCP (모델 Context Protocol) 서버는 Windows 커널 디버깅을 위해 kd.exe를 감싸는 서버입니다. Spawns kd.exe는 하위 처리로 제공하며 22 MCP 도구로 기능을 노출시킵니다. 손잡이 KDNET 연결, Breakpoints, 메모리 읽기, 등록 검사 및 기호 DbgEng COM 래퍼의 스레드 제한 없이 해결.

hyperv-mcp와 쌍에 디자인해, Hyper-V VM을 관리하고 PowerShell을 통해 KDNET 내부의 구성 직접. hyperv-mcp를 사용하여 VM을 스냅하고 KDNET을 설정 한 다음 통과 결과 kernel_attach_string kd-mcp] kernel_attach] 커널 디버그 세션.

---

요구 사항

• Windows 10/11 Windows Debugging 도구 설치
• 파이썬 3.10+
• KDNET에 연결된 대상 커널

---

설치

GitHub에서 직접 설치:

이것은 kd-mcp] 콘솔 스크립트를 설치하고 mcp] 자동적으로 풀합니다.

특정 개정 (tag 또는 커밋)을 설치하려면:

kd.exe 위치

서버 기본값은:

KD_EXE] 환경변수를 설치한 경우:

---

MCP 클라이언트에 연결

클로드 코드 (CLI)

.mcp.json에 관하여

핀이 필요한 경우 KD_EXE per-config:

kd-mcp

An MCP (Model Context Protocol) server wrapping kd.exe for Windows kernel debugging. Spawns kd.exe as a subprocess and exposes its functionality as 22 MCP tools. Handles KDNET connections, breakpoints, memory reads, register inspection, and symbol resolution without the threading limitations of DbgEng COM wrappers.

Designed to pair with hyperv-mcp, which manages Hyper-V VMs and configures KDNET inside guests via PowerShell Direct. Use hyperv-mcp to snapshot a VM and set up KDNET, then pass the resulting kernel_attach_string to kd-mcp’s kernel_attach to drop into a kernel debug session.

---

Requirements

• Windows 10/11 with Windows Debugging Tools installed
• Python 3.10+
• A target kernel connected over KDNET

---

Installation

Install directly from GitHub:

pip install git+https://github.com/originsec/kd-mcp.git

This installs the kd-mcp console script and pulls in the mcp dependency automatically.

To install a specific revision (tag or commit):

pip install git+https://github.com/originsec/[email protected]

kd.exe location

The server defaults to:

C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\kd.exe

Override with the KD_EXE environment variable if installed elsewhere:

$env:KD_EXE = "C:\path\to\kd.exe"

---

Connecting to MCP clients

Claude Code (CLI)

claude mcp add kd -- kd-mcp

.mcp.json

{
  "mcpServers": {
    "kd": {
      "command": "kd-mcp"
    }
  }
}

If you need to pin KD_EXE per-config:

{
  "mcpServers": {
    "kd": {
      "command": "kd-mcp",
      "env": { "KD_EXE": "C:\\path\\to\\kd.exe" }
    }
  }
}

You can also invoke the module directly without the console script:

python -m kd_mcp

---

Development install

git clone https://github.com/originsec/kd-mcp.git
cd kd-mcp
pip install -e .

---

Available Tools (21 total)

Session

kernel_attach — Launches kd.exe and connects via KDNET. Auto-respawns kd.exe on connection failures until timeout expires, so it can catch the KDNET hello packet whenever the target becomes ready (e.g. after a VM reboot). Pass reset_vm with a Hyper-V VM name to hard-reset the VM 2 seconds after kd.exe starts.

connect_string format: "net:port=50000,key=a1b2.c3d4.e5f6.a7b8.c9d0"

Execution Control