Permissions and local data
Memscope uses the Windows permissions of the server process, so a successful server start does not grant access to every target operation. Its local data can contain process paths, diagnostics, scripts, captured buffers, and recordings.
Windows access checks
Section titled “Windows access checks”The selected process can deny query, VM-read, VM-write, thread, or debug-related operations.
Set a disposable data root
Section titled “Set a disposable data root”The default data root is ~/.memscope-mcp. Set MEMSCOPE_HOME before server startup to relocate it:
$env:MEMSCOPE_HOME = Join-Path $env:TEMP "memscope-mcp-session"New-Item -ItemType Directory -Force $env:MEMSCOPE_HOME | Out-Nullmemscope-mcp pathsThe server uses these subdirectories:
logs/sessions/<session-id>.jsonlfor bounded session events and plugin diagnostics;scripts/<process>/<name>.luafor saved Lua scripts; andplugins/<filename>.pyfor explicitly activated plugin files.
Netcap recordings use $MEMSCOPE_HOME/scripts/<process>/recordings/. The cwd-relative scripts/<process>/recordings/ path is a read-only legacy fallback.