Windows CLI MCP 服务器

{
 "mcpServers": {
 "windows-cli": {
 "command": "npx",
 "args": ["-y", "@simonb97/server-win-cli"]
 }
 }
}

{
 "mcpServers": {
 "windows-cli": {
 "command": "npx",
 "args": [
 "-y",
 "@simonb97/server-win-cli",
 "--config",
 "path/to/your/config.json"
 ]
 }
 }
}

npx @simonb97/server-win-cli --init-config ./config.json

{
 "security": {
 "maxCommandLength": 2000,
 "blockedCommands": [
 "rm",
 "del",
 "rmdir",
 "format",
 "shutdown",
 "restart",
 "reg",
 "regedit",
 "net",
 "netsh",
 "takeown",
 "icacls"
 ],
 "blockedArguments": [
 "--exec",
 "-e",
 "/c",
 "-enc",
 "-encodedcommand",
 "-command",
 "--interactive",
 "-i",
 "--login",
 "--system"
 ],
 "allowedPaths": ["User's home directory", "Current working directory"],
 "restrictWorkingDirectory": true,
 "logCommands": true,
 "maxHistorySize": 1000,
 "commandTimeout": 30,
 "enableInjectionProtection": true
 },
 "shells": {
 "powershell": {
 "enabled": true,
 "command": "powershell.exe",
 "args": ["-NoProfile", "-NonInteractive", "-Command"],
 "blockedOperators": ["&", "|", ";", "`"]
 },
 "cmd": {
 "enabled": true,
 "command": "cmd.exe",
 "args": ["/c"],
 "blockedOperators": ["&", "|", ";", "`"]
 },
 "gitbash": {
 "enabled": true,
 "command": "C:\\Program Files\\Git\\bin\\bash.exe",
 "args": ["-c"],
 "blockedOperators": ["&", "|", ";", "`"]
 }
 },
 "ssh": {
 "enabled": false,
 "defaultTimeout": 30,
 "maxConcurrentSessions": 5,
 "keepaliveInterval": 10000,
 "keepaliveCountMax": 3,
 "readyTimeout": 20000,
 "connections": {}
 }
}

{
 "security": {
 // Maximum allowed length for any command
 "maxCommandLength": 1000,

 // Commands to block - blocks both direct use and full paths
 // Example: "rm" blocks both "rm" and "C:\\Windows\\System32\\rm.exe"
 // Case-insensitive: "del" blocks "DEL.EXE", "del.cmd", etc.
 "blockedCommands": [
 "rm", // Delete files
 "del", // Delete files
 "rmdir", // Delete directories
 "format", // Format disks
 "shutdown", // Shutdown system
 "restart", // Restart system
 "reg", // Registry editor
 "regedit", // Registry editor
 "net", // Network commands
 "netsh", // Network commands
 "takeown", // Take ownership of files
 "icacls" // Change file permissions
 ],

 // Arguments that will be blocked when used with any command
 // Note: Checks each argument independently - "cd warm_dir" won't be blocked just because "rm" is in blockedCommands
 "blockedArguments": [
 "--exec", // Execution flags
 "-e", // Short execution flags
 "/c", // Command execution in some shells
 "-enc", // PowerShell encoded commands
 "-encodedcommand", // PowerShell encoded commands
 "-command", // Direct PowerShell command execution
 "--interactive", // Interactive mode which might bypass restrictions
 "-i", // Short form of interactive
 "--login", // Login shells might have different permissions
 "--system" // System level operations
 ],

 // List of directories where commands can be executed
 "allowedPaths": ["C:\\Users\\YourUsername", "C:\\Projects"],

 // If true, commands can only run in allowedPaths
 "restrictWorkingDirectory": true,

 // If true, saves command history
 "logCommands": true,

 // Maximum number of commands to keep in history
 "maxHistorySize": 1000,

 // Timeout for command execution in seconds (default: 30)
 "commandTimeout": 30,

 // Enable or disable protection against command injection (covers ;, &, |, \`)
 "enableInjectionProtection": true
 }
}

{
 "shells": {
 "powershell": {
 // Enable/disable this shell
 "enabled": true,
 // Path to shell executable
 "command": "powershell.exe",
 // Default arguments for the shell
 "args": ["-NoProfile", "-NonInteractive", "-Command"],
 // Optional: Specify which command operators to block
 "blockedOperators": ["&", "|", ";", "`"] // Block all command chaining
 },
 "cmd": {
 "enabled": true,
 "command": "cmd.exe",
 "args": ["/c"],
 "blockedOperators": ["&", "|", ";", "`"] // Block all command chaining
 },
 "gitbash": {
 "enabled": true,
 "command": "C:\\Program Files\\Git\\bin\\bash.exe",
 "args": ["-c"],
 "blockedOperators": ["&", "|", ";", "`"] // Block all command chaining
 }
 }
}

{
 "ssh": {
 // Enable/disable SSH functionality
 "enabled": false,

 // Default timeout for SSH commands in seconds
 "defaultTimeout": 30,

 // Maximum number of concurrent SSH sessions
 "maxConcurrentSessions": 5,

 // Interval for sending keepalive packets (in milliseconds)
 "keepaliveInterval": 10000,

 // Maximum number of failed keepalive attempts before disconnecting
 "keepaliveCountMax": 3,

 // Timeout for establishing SSH connections (in milliseconds)
 "readyTimeout": 20000,

 // SSH connection profiles
 "connections": {
 // NOTE: these examples are not set in the default config!
 // Example: Local Raspberry Pi
 "raspberry-pi": {
 "host": "raspberrypi.local", // Hostname or IP address
 "port": 22, // SSH port
 "username": "pi", // SSH username
 "password": "raspberry", // Password authentication (if not using key)
 "keepaliveInterval": 10000, // Override global keepaliveInterval
 "keepaliveCountMax": 3, // Override global keepaliveCountMax
 "readyTimeout": 20000 // Override global readyTimeout
 },
 // Example: Remote server with key authentication
 "dev-server": {
 "host": "dev.example.com",
 "port": 22,
 "username": "admin",
 "privateKeyPath": "C:\\Users\\YourUsername\\.ssh\\id_rsa", // Path to private key
 "keepaliveInterval": 10000,
 "keepaliveCountMax": 3,
 "readyTimeout": 20000
 }
 }
 }
}