winrm_exec

2 registry entries were observed exposing a tool named winrm_exec — 2 of them as a privileged capability (a name matching exec / write / delete keywords).

Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 8,635 of 26,808 scannable entries (32%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.

1. @imrrd/powershell-mcpprivilegedverified
   trust 85/100 · AMCP serverobserved 2026-08-29 · static extraction
   A Model Context Protocol (MCP) server for Windows PowerShell - runs commands in a hidden process (no popup windows), with structured output,
2. io.github.IMRRD/powershell-mcpprivileged
   trust 60/100 · BMCP serverobserved 2026-06-13 · static extraction
   Headless Windows ops over MCP: hidden PowerShell + in-process SSH, WinRM & SFTP.

All indexed toolsSearch the registry for winrm_exec