From the README

# Aragorn

Direct kernel debugger MCP server for Windows security research. Connects to Windows VM kernels via kdnet and exposes 63 tools over the [Model Context Protocol](https://modelcontextprotocol.io/).

This process **is** the debugger. It spawns `kd.exe` as a subprocess for kdnet transport, then connects via `DebugConnect()` for full DbgEng COM access. No WinDbg GUI required.

```
MCP Client ──stdio/http──► Aragorn ──DebugConnect(TCP)──► kd.exe ──kdnet──► VM kernel
```

## Quick Start

```bash
# 1. Install dependencies
pip install -r requirements.txt

# 2. Copy DbgEng DLLs from WinDbg Preview into dbgeng_bin/
#    (dbgeng.dll, dbghelp.dll, dbgmodel.dll, dbgcore.dll, symsrv.dll, srcsrv.dll)

# 3. Configure
cp .env.example .env
# Edit .env: set KD_CONNECTION, KD_EXE_PATH, etc.

# 4. Run (stdio mode — for MCP clients like Claude Code)
python server.py

# Or HTTP mode (for remote/shared access)
python server.py --http
```

### .mcp.json integration

```json
{
  "aragorn": {
    "type