Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/deploymenttheory/windows-mcp-server/claude-mdgit clone --depth 1 https://github.com/deploymenttheory/windows-mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/deploymenttheory/windows-mcp-server/claude-md)<a href="https://agentmods.dev/instructions/deploymenttheory/windows-mcp-server/claude-md"><img src="https://agentmods.dev/badge/instructions/deploymenttheory/windows-mcp-server/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.08704 | $0.08704 |
| Opus 5 | $0.04352 | $0.04352 |
| Sonnet 5 | $0.01741 | $0.01741 |
| Haiku 4.5 | $0.00870 | $0.00870 |
Grade E, and why
windows-mcp-server CLAUDE.md scanned grade E with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent never to refusehighAnti-refusal
Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.
- **The default must never refuse.** `policy_default.json` applies whenever no Cloud metadata endpointhighServer-side request forgery
One request to 169.254.169.254 can return temporary IAM credentials.
RFC1918 or `169.254.169.254` is the bypass the allowlist exists to prevent, and How it starts
The opening of the file, as written. The whole thing — 607 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
Guidance for AI coding agents working in this repository. These are the conventions that are load-bearing but not obvious from any single file — read this before adding a tool, touching the desktop engine, or changing the security subsystem.
What this is
An MCP server (stdio transport only) bridging AI agents to the Windows desktop.
A Go port of the Python Windows-MCP,
built on deploymenttheory/go-bindings-win32, go-bindings-wmi, and the official
modelcontextprotocol/go-sdk. Perception is the UI Automation accessibility tree
— there is no CV model.
| Package | Role |
|---|---|
cmd/windows-mcp-server |
cobra CLI (stdio/check/personas), viper WINDOWS_MCP_* env binding |
internal/winmcp |
RunStdio startup orchestration + the OS adapters (systemProbe, health probe, TPM attestation) |
internal/desktop |
the Win32/UIA/WMI engine — one COM STA thread |
pkg/windows |
tool definitions (one file per topic) + toolset/persona metadata |
pkg/inventory |
domain-agnostic toolset filter/registration engine (mirrors github-mcp-server) |
agentweave-harness/guardrails/* (imported module) |
the security stack, split by lifecycle layer (see below) |
policy/examples |
starting-point policy documents (validated by the test suite) |
internal/mcpspec |
vendored-schema loader + offline wire validation (platform-agnostic; no build tag) |
internal/mcpconf |
official conformance-suite results: ingest + reporting (no build tag) |
schema/ |
vendored MCP protocol schemas + versions.json |
conformance/ |
expected-failure baselines + committed suite results |
Build, test, lint
go build ./...
go vet ./...
go test ./... -count=1
$env:GOARCH='arm64'; go build ./... # the (amd64 || arm64) tag is asserted everywhere
golangci-lint run --config=./.golangci.yml
CI is Windows-only by design (.github/workflows/go-build-test.yml): nearly
every file is //go:build windows, so a Linux runner would compile almost
nothing. internal/desktop tests self-skip when the environment cannot host UIA,
so on a hosted runner CI guarantees compilation plus the pure-logic suites.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 607 lines · 8,704 tokens per session scan E 13ba47dddb50
windows-mcp-server CLAUDE.md is an instructions file published in the GitHub repository deploymenttheory/windows-mcp-server (2 stars, last pushed 4d ago), licensed MIT. It adds 8,704 tokens to every session, about $0.0435 per session on Opus 5. A static security scan graded it E with 2 findings (tells the agent never to refuse, cloud metadata endpoint). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
ida-pro-mcp CLAUDE.md
Instructions for mrexodia/ida-pro-mcp, covering claude.md, what this project is, core implementation rules, ida thread safety and api conventions.
tableau-mcp CLAUDE.md
Claude Code instructions for tableau/tableau-mcp, covering claude.md, build & development commands, building, running the server and testing.
anytype-mcp CLAUDE.md
Instructions for anyproto/anytype-mcp, covering claude.md, common commands, development, testing and code quality.
tableau-mcp AGENTS.md
AGENTS.md instructions for tableau/tableau-mcp, covering agents.md, project overview, architecture, package manager and commands.
RivalSearchMCP AGENTS.md
Instructions for damionrashford/RivalSearchMCP, covering agents.md, project overview, development commands, setup & running and install dependencies.
RivalSearchMCP CLAUDE.md
Instructions for damionrashford/RivalSearchMCP, covering claude.md, project overview, development commands, setup & running and set up pre-commit hooks.