- Reliability 11/20
- Evidence: server.json declares io.github.svnscha/mcp-windbg 1.3.0 with two transports (stdio, streamable-http), a PyPI package (mcp-windbg) run via uvx, and two optional non-secret env vars (CDB_PATH, _NT_SYMBOL_PATH). The README lists ten tools (list_dumps, open_cdb_dump, open_cdb_remote, open_kd_session, run_cdb_command, run_kd_command, close_cdb_session, close_kd_session, send_ctrl_break, wait_for_break), describes an opaque session_id model, per-call timeouts, and CTRL+BREAK resynchronization for slow live commands; declared tools and described behavior are consistent, with no visible contradictions. Deductions: this is a static, unexecuted review; the only execution-related artifacts are CI/docs badges pointing at ci.yml and GitHub Pages, and no committed test files or CI step contents are present in the supplied material, so the MCP init handshake, actual tool-list responses, error paths, and dependency control (e.g. cdb.exe/kd.exe auto-detection failure) cannot be verified. All reliability claims (timeouts, CTRL+BREAK, live-session resync) rest on README prose only. Static calibration caps this at 12; scored 11.
- Security and permissions 12/20
- Evidence: the server is essentially a local Windows debugger wrapper, running over stdio locally or streamable-http at http://localhost:{port}/mcp; its privilege surface is local cdb.exe/kd.exe processes and sessions, and the only env vars are two optional non-secret values (CDB_PATH, _NT_SYMBOL_PATH). No hardcoded tokens or secrets appear in the install examples. The README documents a --filter-script hook to redact PII/secrets from tool arguments and output before they leave the machine, plus a dedicated redaction scenario and a note that closing a kernel session resumes the target machine, so data boundaries and side effects get some disclosure. Deductions: the HTTP transport listens on a port and the README explicitly promotes driving it from another machine, yet the material shows no authentication, bind-address restriction, or TLS guidance, so default deployment can be exposed; attaching to kernel/remote targets and tools like send_ctrl_break, close_kd_session (resumes the target), and run_*_command are high-impact actions on real systems with no visible default confirmation or scoping (e.g. read-only command allowlist). This is 'main risks visible but permissions/confirmation/scoping incomplete' rather than a red line — no malware, credential theft, covert exfiltration, or irreversible destructive defaults — so it is not scored 0-4.
- Maintenance 13/20
- Evidence: server.json version 1.3.0 matches the PyPI identifier/version; the repo carries mcp-server topics; MIT license is consistent across the README and repository metadata; the README shows CI and docs-deployment badges, a dedicated documentation site, a plugin marketplace entry, a blog post and community discussion links, indicating ongoing maintenance with clear ownership (svnscha). Open issues 0 and 1564 stars are treated only as discovery signals, not points. Deductions: the supplied material contains no commit history, release cadence, dependency-update policy, or security-response channel (no SECURITY.md or vulnerability-reporting guidance), and versioning/governance is asserted but lacks verifiable update-path evidence. This reads as 'active but with governance/versioning gaps'; scored 13.
- Documentation 17/20
- Evidence: documentation is layered — the README provides overview, features, a use-case table, a tool table, three install routes (Claude Code plugin, self-registration, other clients), a VS Code/Copilot JSON config example, and natural-language debugging prompts, all linked to a standalone docs site covering getting-started, crash-dump, remote-debugging, kernel-debugging, triage, http-service, redaction, reference, troubleshooting, and development, plus a tools reference and CLI reference. Prerequisites are explicit (Windows with Debugging Tools for Windows or Store WinDbg supplying cdb.exe/kd.exe with auto-detection; Python 3.10+ or uv). Limitations are disclosed ('not a magical auto-fix', enterprise-policy caveat, Windows-only platform). Deductions: evidence here is limited to the README and manifest, so the docs site contents cannot be checked for consistency with tool parameters, timeouts, and prompts, and key limitations (HTTP auth, confirmation flow, port exposure) are not expanded in the README.
- Setup experience 14/20
- Evidence: the install path is clear and tiered — a two-line plugin install (/plugin marketplace add, /plugin install) needing uv/uvx, or pip install mcp-windbg followed by a single claude mcp add command, or pointing any other client at python -m mcp_windbg with a complete VS Code JSON example; server.json also declares a uvx runtimeHint and both stdio and streamable-http transports with a port argument, enabling one-command fetching. Deductions: it is hard-bound to Windows and an additional debugger toolchain (Debugging Tools for Windows / WinDbg), so it cannot run in mainstream Linux/macOS environments; the HTTP route leaves port choice, network reachability, and the missing authentication to the user; the plugin route adds a uv and marketplace dependency. Because the source files contain no verifiable execution evidence (real CI workflows plus committed tests covering the server's key paths), the static calibration caps this at 15; scored 14.