ThreatLocker

Overview

ThreatLocker is an MCP server that connects your AI assistant to zero-trust endpoint protection, allowlisting, and policy management. Any MCP-compatible AI can call ThreatLocker's tools directly, letting the model decide when to invoke them during conversations or agent runs.

The server runs locally via Docker image ghcr.io/wyre-ai/threatlocker-mcp:v1.3.8 and communicates over stdio. You'll need to provide THREATLOCKER_API_KEY and THREATLOCKER_ORGANIZATION_ID as environment variables to authenticate. The latest release is v1.3.8, with source code available at WYRE-AI/threatlocker-mcp on GitHub.

ThreatLocker is categorized as Security on mcp.site and integrates with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, and others. If you maintain this project, claim your listing to verify ownership and keep information current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "threatlocker": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.8"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<threatlocker-api-key>",
        "THREATLOCKER_ORGANIZATION_ID": "<threatlocker-organization-id>"
      }
    }
  }
}

Requires THREATLOCKER_API_KEY, THREATLOCKER_ORGANIZATION_ID