ThreatDown MCP

stdio

Every ThreatDown OneView API, plus fleet-wide stale-endpoint, health and seat reports across all

Getting Started

npx @getmcp/cli add io.github.Servosity/threatdown-mcp

Requires Pre-built binary. Community-contributed server. Review source before installing.

Claude Desktopguide →Vscodeguide →Cursorguide →Windsurfguide →

Required Environment Variables

THREATDOWN_CLIENT_ID
Set the THREATDOWN_CLIENT_ID credential for the ThreatDown MCP server.
THREATDOWN_CLIENT_SECRET
Set the THREATDOWN_CLIENT_SECRET credential for the ThreatDown MCP server.

Configuration

Config file: ~/Library/Application Support/Claude/claude_desktop_config.json

JSON

{
  "mcpServers": {
    "io.github.Servosity/threatdown-mcp": {
      "command": "https://github.com/Servosity/msp-skills/releases/download/threatdown-v0.1.1/threatdown-mcp.mcpb",
      "env": {
        "THREATDOWN_CLIENT_ID": "",
        "THREATDOWN_CLIENT_SECRET": "",
        "THREATDOWN_OAUTH_SCOPE": "",
        "THREATDOWN_BASE_URL": "",
        "THREATDOWN_TOKEN_URL": "",
        "THREATDOWN_USER_AGENT": "",
        "THREATDOWN_MCP_READ_ONLY": "",
        "THREATDOWN_MCP_HTTP_TOKEN": "",
        "PRINTING_PRESS_CLIENT_PROFILE": ""
      }
    }
  }
}

Claude Desktop MCP documentation