process_controlLABSCO SUMMARY
Ten broad tools instead of a hundred narrow ones.
Each tool takes an action argument covering a whole domain, which keeps the schema cost low while still reaching most of Windows. The security story is the more interesting design choice: no network code at all means there is no exfiltration path, and the six genuinely dangerous capabilities are off in .env until an administrator turns them on.
What it is
A Rust server that gives an assistant system-administrator reach over Windows 10 and 11 through direct Win32 API calls. It is a pure stdio process: no HTTP, no ports, no shell execution, and no cmd.exe or powershell.exe anywhere in the path.
What you get
- 10 tools, each covering a whole area:
process_control,file_system,registry_editor,service_manager,gui_automation,system_info,network_manager,user_management,security_audit,system_automation gui_automationcovers mouse, keyboard, windows, screenshots, clipboard, display and audio;system_automationcovers Event Log, Scheduled Tasks and WMI queriessecurity_auditreaches UAC, Defender, AppLocker, BitLocker, TPM, Secure Boot and exploit protection;network_managercovers adapters, DNS, firewall, proxy, routing, WiFi, VPN and Bluetooth- The dangerous operations are behind
.envfeature gates that ship off:AETHER_BCD_EDIT,AETHER_HAL_CONFIG,AETHER_OFFLINE_REGISTRY,AETHER_DLL_INJECT,AETHER_TOKEN_MANIPULATION,AETHER_LSA_SECRETS - Every dangerous operation additionally requires
force: truein its parameters, or the server refuses - WMI queries are restricted to SELECT, with a 30s timeout and a 1000 row limit
Requirements
Windows 10 or 11. The simplest install is npm install -g @foursecondfivefour/aether-mcp-server, whose postinstall downloads the Windows x64 binary and puts it on your PATH; there is also a PowerShell one-liner that registers the server in every AI environment it detects, editor deeplinks for Cursor and VS Code, and a source build with cargo build --release (Rust 1.85+). Configure your client to run the binary with RUST_LOG set. To enable a gated operation, set its variable in .env — they are all off by default.
Setup effort
One command — npm install -g @foursecondfivefour/aether-mcp-server
USE CASES
01
Finding out what is eating the machine
List processes with their threads and priorities, then act on the one at fault.
02
Fixing a service that won't start
Read its configuration and triggers, then restart it.
03
Auditing a machine's security posture
Check UAC, Defender, BitLocker, TPM and Secure Boot in one pass.
04
Chasing a connectivity problem
Walk adapters, DNS, firewall rules and routing without opening five control panels.
05
Querying Windows for something no tool exposes directly
Run a WMI SELECT and read the rows back.
10 tools
Listed in project docs. Your client may show a different list.
file_systemregistry_editorservice_managergui_automationsystem_infonetwork_manageruser_managementsecurity_auditsystem_automationBEFORE YOU INSTALL
What to know first
Tools you get
10 tools named in the project's documentation.
Requires
npm on PATH
INSTALLATION
Connect your client
Server setup
Configuration file
JSON
{
"mcpServers": {
"aether-01": {
"command": "<YOUR_PATH_TO_AETHER_MCP_SERVER>",
"env": {
"RUST_LOG": "info"
}
}
}
}<YOUR_PATH_TO_AETHER_MCP_SERVER> is the full path to aether-mcp-server.exe on your machine: the Windows binary the npm install downloads from GitHub Releases, or target\release\aether-mcp-server.exe if you built from source.
npm
TERMINAL
npm install -g @foursecondfivefour/aether-mcp-server
