ThreatLocker

Developer Tools Docker v1.3.6

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

View source ↗ Website ↗ Generate config for multiple servers More servers

Install

Pin version unavailable — the image reference already carries a tag

Docker
docker run -i --rm ghcr.io/wyre-technology/threatlocker-mcp:v1.3.6

Setup by client

Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.

claude_desktop_config.json

{
  "mcpServers": {
    "threatlocker-mcp-3": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/threatlocker-mcp:v1.3.6"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<YOUR_THREATLOCKER_API_KEY>",
        "THREATLOCKER_ORGANIZATION_ID": "<YOUR_THREATLOCKER_ORGANIZATION_ID>"
      }
    }
  }
}

Format verified against the official Claude Desktop docs ↗.

terminal

claude mcp add --env THREATLOCKER_API_KEY=<YOUR_THREATLOCKER_API_KEY> --env THREATLOCKER_ORGANIZATION_ID=<YOUR_THREATLOCKER_ORGANIZATION_ID> threatlocker-mcp-3 -- docker run -i --rm ghcr.io/wyre-technology/threatlocker-mcp:v1.3.6

Format verified against the official Claude Code docs ↗.

.cursor/mcp.json

{
  "mcpServers": {
    "threatlocker-mcp-3": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/threatlocker-mcp:v1.3.6"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<YOUR_THREATLOCKER_API_KEY>",
        "THREATLOCKER_ORGANIZATION_ID": "<YOUR_THREATLOCKER_ORGANIZATION_ID>"
      }
    }
  }
}

Format verified against the official Cursor docs ↗.

.vscode/mcp.json

{
  "servers": {
    "threatlocker-mcp-3": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/threatlocker-mcp:v1.3.6"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<YOUR_THREATLOCKER_API_KEY>",
        "THREATLOCKER_ORGANIZATION_ID": "<YOUR_THREATLOCKER_ORGANIZATION_ID>"
      }
    }
  }
}

Format verified against the official VS Code docs ↗.

mcp_config.json

{
  "mcpServers": {
    "threatlocker-mcp-3": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/threatlocker-mcp:v1.3.6"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<YOUR_THREATLOCKER_API_KEY>",
        "THREATLOCKER_ORGANIZATION_ID": "<YOUR_THREATLOCKER_ORGANIZATION_ID>"
      }
    }
  }
}

Format verified against the official Windsurf docs ↗.

Environment variables

Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.

THREATLOCKER_API_KEY required secret — ThreatLocker API key
THREATLOCKER_ORGANIZATION_ID required — ThreatLocker organization ID
MCP_TRANSPORT — Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODE — Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVEL — Log verbosity: debug, info, warn, error

GitHub

⭐ 1 stars · 最近更新于 30 天前

About this server

ThreatLocker MCP Server A Model Context Protocol (MCP) server that provides AI assistants with access to the ThreatLocker Portal API. Manage computers, approval requests, audit logs, and organizations through natural language interactions. Features Stateless Architecture : No session state required…

Summary from the project README — github.com/wyre-technology/threatlocker-mcp

Distributed as Docker, listed under Developer Tools. Review our MCP security guide before granting access to real data.

Frequently asked questions

What does the ThreatLocker MCP server do?

How do I install ThreatLocker?

Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.

Is ThreatLocker free to use?

The MCP server itself is free to install. The source is public on https://github.com/wyre-technology/threatlocker-mcp. Any third-party service it calls may require its own API key and account.

Which clients support ThreatLocker?

Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.

Add this badge

Publish this server? Link back with a badge on your README or site — copy either snippet.

Markdown

[![Listed on MCPNav](https://mcpnav.net/badge/threatlocker-mcp-3.svg)](https://mcpnav.net/server/threatlocker-mcp-3/)

HTML

<a href="https://mcpnav.net/server/threatlocker-mcp-3/"><img src="https://mcpnav.net/badge/threatlocker-mcp-3.svg" alt="Listed on MCPNav" height="20"></a>