MCP serverOfficial registry

ThreatLocker

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

by io.github.WYRE-AIv1.3.12GitHub Website

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Local command

docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

Credentials from the publisher

THREATLOCKER_API_KEY — ThreatLocker API key
THREATLOCKER_ORGANIZATION_ID — ThreatLocker organization ID
MCP_TRANSPORT — Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODE — Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVEL — Log verbosity: debug, info, warn, error

Provider

Claude Code

THREATLOCKER_API_KEY=<secret> THREATLOCKER_ORGANIZATION_ID=<value> MCP_TRANSPORT=<value> AUTH_MODE=<value> LOG_LEVEL=<value> claude mcp add io.github.wyre-ai-threatlocker-mcp -- docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Related MCP

ThreatLocker

Add this server

Host a copy with our keys and logs.

More like this

Firecrawl

Notion

Context7