ThreatLocker MCP

stdio

Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a

Getting Started

npx @getmcp/cli add io.github.Servosity/threatlocker-mcp

Requires Pre-built binary. Community-contributed server. Review source before installing.

Claude Desktopguide →Vscodeguide →Cursorguide →Windsurfguide →

Required Environment Variables

PRINTING_PRESS_CLIENT_PROFILE
Set the PRINTING_PRESS_CLIENT_PROFILE credential for the ThreatLocker MCP server.
THREATLOCKER_API_KEY
Portal API key (ThreatLocker portal: Settings > API Keys), sent as the Authorization header on every call.

Configuration

Config file: ~/Library/Application Support/Claude/claude_desktop_config.json

JSON

{
  "mcpServers": {
    "io.github.Servosity/threatlocker-mcp": {
      "command": "https://github.com/Servosity/msp-skills/releases/download/threatlocker-v0.3.3/threatlocker-mcp.mcpb",
      "env": {
        "PRINTING_PRESS_CLIENT_PROFILE": "",
        "THREATLOCKER_API_KEY": "",
        "THREATLOCKER_BASE_URL": "https://portalapi.g.threatlocker.com/portalapi",
        "THREATLOCKER_ORG_ID": "",
        "THREATLOCKER_USER_AGENT": ""
      }
    }
  }
}

Claude Desktop MCP documentation