How do I install ThreatLocker?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does ThreatLocker need an API key?

The publisher lists these environment variables: THREATLOCKER_API_KEY, THREATLOCKER_ORGANIZATION_ID, MCP_TRANSPORT, AUTH_MODE, LOG_LEVEL.

What transport does ThreatLocker use?

ThreatLocker runs locally over stdio.

MCP serverOfficial registry

ThreatLocker

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

by io.github.WYRE-AIv1.3.12GitHub Website

Summary

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

Install in Cursor, Claude, and VS Code

Publisher config for ThreatLocker. Paste it into the client. This is not a PlugMCP endpoint.

Cursor

{
  "mcpServers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

Claude Desktop

{
  "mcpServers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

Claude Code

THREATLOCKER_API_KEY=<secret> THREATLOCKER_ORGANIZATION_ID=<value> MCP_TRANSPORT=<value> AUTH_MODE=<value> LOG_LEVEL=<value> claude mcp add io.github.wyre-ai-threatlocker-mcp -- docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

VS Code

{
  "servers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

Tools, access, and transport

Transport: stdio
API key: THREATLOCKER_API_KEY, THREATLOCKER_ORGANIZATION_ID, MCP_TRANSPORT, AUTH_MODE, LOG_LEVEL
Pricing: Not listed

No tool list on this record yet.

Alternatives

Firecrawl — 🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.
Notion — Token-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
Context7 — Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
RenCosta2025 Context7fork — Get up-to-date, version-specific documentation and code examples from official sources directly in…
Exa — Exa MCP for web search and web crawling!
Invisible Playwright — Playwright MCP server undetected by anti-bots and captchas: AI agent browses the web on anti-detect stealth Firefox, Python, undetected browser automation, scraping, computer use.

FAQ

How do I install ThreatLocker?: Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
Does ThreatLocker need an API key?: The publisher lists these environment variables: THREATLOCKER_API_KEY, THREATLOCKER_ORGANIZATION_ID, MCP_TRANSPORT, AUTH_MODE, LOG_LEVEL.
What transport does ThreatLocker use?: ThreatLocker runs locally over stdio.
When was ThreatLocker last checked?: Last checked 2026-10-16. MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

Last checked 2026-10-16. Publisher: io.github.WYRE-AI.

接入你的智能体

添加此服务器

The publisher's own command. Not a PlugMCP endpoint.

Local command

docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

Credentials from the publisher

THREATLOCKER_API_KEY — ThreatLocker API key
THREATLOCKER_ORGANIZATION_ID — ThreatLocker organization ID
MCP_TRANSPORT — Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODE — Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVEL — Log verbosity: debug, info, warn, error

Provider

Claude Code

THREATLOCKER_API_KEY=<secret> THREATLOCKER_ORGANIZATION_ID=<value> MCP_TRANSPORT=<value> AUTH_MODE=<value> LOG_LEVEL=<value> claude mcp add io.github.wyre-ai-threatlocker-mcp -- docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

在 PlugMCP 上运行

用我们的密钥与日志托管一份副本。

这是你新建的服务器，不是此条目的官方端点。若要用发布方的 URL 与凭证，请使用上方安装面板。

启动

Related MCP

More like this

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

MCP serverOfficial registry

ThreatLocker

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

by io.github.WYRE-AIv1.3.12GitHub Website

Summary

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

Install in Cursor, Claude, and VS Code

Publisher config for ThreatLocker. Paste it into the client. This is not a PlugMCP endpoint.

Cursor

{
  "mcpServers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

Claude Desktop

{
  "mcpServers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

Claude Code

THREATLOCKER_API_KEY=<secret> THREATLOCKER_ORGANIZATION_ID=<value> MCP_TRANSPORT=<value> AUTH_MODE=<value> LOG_LEVEL=<value> claude mcp add io.github.wyre-ai-threatlocker-mcp -- docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

VS Code

{
  "servers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

Tools, access, and transport

Transport: stdio
API key: THREATLOCKER_API_KEY, THREATLOCKER_ORGANIZATION_ID, MCP_TRANSPORT, AUTH_MODE, LOG_LEVEL
Pricing: Not listed

No tool list on this record yet.

Alternatives

Firecrawl — 🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.
Notion — Token-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
Context7 — Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
RenCosta2025 Context7fork — Get up-to-date, version-specific documentation and code examples from official sources directly in…
Exa — Exa MCP for web search and web crawling!
Invisible Playwright — Playwright MCP server undetected by anti-bots and captchas: AI agent browses the web on anti-detect stealth Firefox, Python, undetected browser automation, scraping, computer use.

FAQ

How do I install ThreatLocker?: Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
Does ThreatLocker need an API key?: The publisher lists these environment variables: THREATLOCKER_API_KEY, THREATLOCKER_ORGANIZATION_ID, MCP_TRANSPORT, AUTH_MODE, LOG_LEVEL.
What transport does ThreatLocker use?: ThreatLocker runs locally over stdio.
When was ThreatLocker last checked?: Last checked 2026-10-16. MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

Last checked 2026-10-16. Publisher: io.github.WYRE-AI.

接入你的智能体

添加此服务器

The publisher's own command. Not a PlugMCP endpoint.

Local command

docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

Credentials from the publisher

THREATLOCKER_API_KEY — ThreatLocker API key
THREATLOCKER_ORGANIZATION_ID — ThreatLocker organization ID
MCP_TRANSPORT — Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODE — Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVEL — Log verbosity: debug, info, warn, error

Provider

Claude Code

THREATLOCKER_API_KEY=<secret> THREATLOCKER_ORGANIZATION_ID=<value> MCP_TRANSPORT=<value> AUTH_MODE=<value> LOG_LEVEL=<value> claude mcp add io.github.wyre-ai-threatlocker-mcp -- docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.wyre-ai-threatlocker-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "<secret>",
        "THREATLOCKER_ORGANIZATION_ID": "<value>",
        "MCP_TRANSPORT": "<value>",
        "AUTH_MODE": "<value>",
        "LOG_LEVEL": "<value>"
      }
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

在 PlugMCP 上运行

用我们的密钥与日志托管一份副本。

这是你新建的服务器，不是此条目的官方端点。若要用发布方的 URL 与凭证，请使用上方安装面板。

启动

Related MCP

More like this

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.