Labsco
MCP SERVER

Ten tools covering Windows administration end to end — processes, registry, services, GUI, network, security — with no network access of its own.

Desktop & OS Automation
Summary
Ten broad tools instead of a hundred narrow ones.

Each tool takes an action argument covering a whole domain, which keeps the schema cost low while still reaching most of Windows. The security story is the more interesting design choice: no network code at all means there is no exfiltration path, and the six genuinely dangerous capabilities are off in `.env` until an administrator turns them on.

What it is

A Rust server that gives an assistant system-administrator reach over Windows 10 and 11 through direct Win32 API calls. It is a pure stdio process: no HTTP, no ports, no shell execution, and no `cmd.exe` or `powershell.exe` anywhere in the path.

What you get
  • 10 tools, each covering a whole area: `process_control`, `file_system`, `registry_editor`, `service_manager`, `gui_automation`, `system_info`, `network_manager`, `user_management`, `security_audit`, `system_automation`
  • `gui_automation` covers mouse, keyboard, windows, screenshots, clipboard, display and audio; `system_automation` covers Event Log, Scheduled Tasks and WMI queries
  • `security_audit` reaches UAC, Defender, AppLocker, BitLocker, TPM, Secure Boot and exploit protection; `network_manager` covers adapters, DNS, firewall, proxy, routing, WiFi, VPN and Bluetooth
  • The dangerous operations are behind `.env` feature gates that ship off: `AETHER_BCD_EDIT`, `AETHER_HAL_CONFIG`, `AETHER_OFFLINE_REGISTRY`, `AETHER_DLL_INJECT`, `AETHER_TOKEN_MANIPULATION`, `AETHER_LSA_SECRETS`
  • Every dangerous operation additionally requires `force: true` in its parameters, or the server refuses
  • WMI queries are restricted to SELECT, with a 30s timeout and a 1000 row limit
Requirements

Windows 10 or 11. The simplest install is `npm install -g @foursecondfivefour/aether-mcp-server`, whose postinstall downloads the Windows x64 binary and puts it on your PATH; there is also a PowerShell one-liner that registers the server in every AI environment it detects, editor deeplinks for Cursor and VS Code, and a source build with `cargo build --release` (Rust 1.85+). Configure your client to run the binary with `RUST_LOG` set. To enable a gated operation, set its variable in `.env` — they are all off by default.

Setup effort

One command — npm install -g @foursecondfivefour/aether-mcp-server