AI SRE Agent Investigates Windows Services, Disks, and CPU: AURA

Mezmo

Aug 22, 2026

The same agent that reads a Kubernetes cluster reads a Windows machine. One MCP server, one config entry, and the questions are the ones you already ask.

Learn more about AURA → https://www.mezmo.com/aura
Get started today → https://github.com/mezmo/aura
Get deployment help → https://www.mezmo.com/contact

AURA runs in WSL and reaches the Windows host through a Windows Server MCP server cloned from GitHub, with its host changed to 0.0.0.0 so it is bound against all IPs and reachable from the Linux side. The server is added from the AURA CLI as a custom entry over streamable HTTP, on the host IP at port 8080 and the path /mcp, with no auth header, then written to config.toml. The tool is allowed for all three workers: incident responder, log analyst, and metrics analyst.

Four questions follow, typed one at a time. Is the Minecraft server healthy, registered as an NSSM service in Windows Services. What are the drives, and the capacity and usage of each. What processes are running. What do CPU and memory look like. The services search finds the entry by name, the drive list includes volumes that are not currently mapped, and the machine comes back at 1.6 percent CPU and 18 percent memory.

AURA is built for Windows and hybrid infrastructure operators who need a running server's state without opening a console session on it. The demo is one machine, and the operator's own point is that the pattern is meant to repeat: each host becomes an entry, and the same questions reach every one of them.

Alongside the health answer, AURA returns a warning nobody asked for. The way the setup is running could be exposing highly privileged access to the system, and it says so unprompted while reporting that everything else is green. The operator says he will take that into account and correct it.

AURA reads and reports in this video. Every question is typed by the operator in a live session, there is no schedule and no alerting, and nothing on the host is changed. The privileged-access warning is surfaced, not fixed.

0:00 Why AURA is not Linux only

0:23 Cloning the Windows Server MCP and binding it to all IPs

1:07 Finding the WSL host IP

1:27 Adding the server over streamable HTTP

2:13 Allowing the tool for all three workers

2:45 Asking whether the Minecraft service is healthy

3:48 The service is found and the system is green

4:18 A warning about privileged access

4:43 Drive capacity and usage

5:31 Scaling the same setup to a server farm

5:47 Running processes

6:11 CPU and memory health