Configuration

Optional configuration for mcp-windows -- blocked commands, allowed directories, and output limits.

Overview

mcp-windows works out of the box with no configuration. Optionally create ~/.mcp_windows.json to restrict behavior.

Config File

Create ~/.mcp_windows.json:

{
  "blockedCommands": ["Format-Volume", "Clear-Disk", "Remove-Partition"],
  "allowedDirectories": [],
  "outputLineLimit": 5000,
  "commandTimeout": 30000
}

Options

Key	Type	Default	Description
`blockedCommands`	string[]	`["Format-Volume", "Clear-Disk", "Remove-Partition"]`	PowerShell commands that will be rejected
`allowedDirectories`	string[]	`[]` (unrestricted)	If set, file operations are restricted to these paths
`outputLineLimit`	number	`5000`	Max lines kept in terminal session ring buffer
`commandTimeout`	number	`30000`	Default command timeout in milliseconds

Runtime Configuration

Use the windows_mcp_config tool to get or set configuration without editing the file:

windows_mcp_config action=get
windows_mcp_config action=set key=commandTimeout value=60000
windows_mcp_config action=set key=blockedCommands value=["Format-Volume","Remove-Item"]

Changes take effect immediately and persist to ~/.mcp_windows.json.

Security Notes

Registry writes to HKLM require the hklm_override flag -- HKCU is unrestricted
Power actions (shutdown, restart) execute immediately -- use delay parameter for safety
Service control may require elevation for system services
Blocked commands are checked by name only -- determined users can bypass via aliases

Installation -- Setup and registration
API -- Tool reference

Repo: mcp-windows · MokoStandards

Field	Value
Minimum Version	05.00.00
Platform	mcp-server
Applies To	mcp-windows

Revision	Date	Author	Description
1.0	2026-05-25	Moko Consulting	Initial version

Pages