LocalFree server, account needed

ThreatLocker MCP server

WYRE-AI/threatlocker-mcp

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

1 GitHub stars5 forks
Source code

Install ThreatLocker in Claude Code

Claude Code
claude mcp add threatlocker -e THREATLOCKER_API_KEY=... -e THREATLOCKER_ORGANIZATION_ID=... -- docker run -i --rm -e THREATLOCKER_API_KEY -e THREATLOCKER_ORGANIZATION_ID ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "threatlocker": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "THREATLOCKER_API_KEY",
        "-e",
        "THREATLOCKER_ORGANIZATION_ID",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "...",
        "THREATLOCKER_ORGANIZATION_ID": "..."
      }
    }
  }
}

Replace each ... with your own value.

Frequently asked questions

What does the ThreatLocker MCP server do?

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

Is the ThreatLocker MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does ThreatLocker run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add ThreatLocker to Claude Code?

Run: claude mcp add threatlocker -e THREATLOCKER_API_KEY=... -e THREATLOCKER_ORGANIZATION_ID=... -- docker run -i --rm -e THREATLOCKER_API_KEY -e THREATLOCKER_ORGANIZATION_ID ghcr.io/wyre-ai/threatlocker-mcp:v1.3.12

More security & identity MCP servers

View all

Tremelay

1

CharitonMedia/Tremelay

Local MCP broker: agents call credentials through a daemon without seeing secrets.

LocalFree

SynapseAudit

1

digidenone/SynapseAudit

AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

LocalFree

Universal Host Manager

1

Abktya/universal-host-manager-mcp

Cross-platform FastMCP server for authenticated remote Linux/macOS host administration

LocalAccount needed

Stackexchange

1

pipeworx-io/mcp-stackexchange

StackExchange MCP — wraps the StackExchange API v2.3 (free, no auth required for read)

Local + RemoteFree

Vaultshell

1

SoWhatI/vaultshell

Injects secrets into shell commands at exec time; plaintext never reaches the LLM context

LocalFree

Sophos Central

1

rijul170/sophos-central-mcp

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops

LocalFree