ThreatLocker MCP

threatlocker-mcpis aModel Context Protocolserver that connects AI assistants such as Claude Desktop and Claude Code with theThreatLocker Portal API. 44 tools — generated directly from the official OpenAPI 3.0 spec — give your AI assistant programmatic access to computers, approvals, action logs, tags, maintenance mode, reports, and more, across single-org and parent/child tenant setups.

[!IMPORTANT]Unofficial project.This is an independent, community-built MCP server developed against ThreatLocker's published API documentation. It isnotan official ThreatLocker product and is not affiliated with, endorsed by, or supported by ThreatLocker, Inc. "ThreatLocker" is a trademark of ThreatLocker, Inc. For official support of the ThreatLocker platform itself, contact ThreatLocker directly.

[!WARNING]Beta software — not yet recommended for production environments.This project is under active development. The tool surface and individual tool body shapes may still change between minor versions, and not every endpoint has been exhaustively exercised against every tenant configuration. Use against a lab or non-production tenant until you're confident in the behavior for your use case.

This server can also perform destructive actions against your ThreatLocker environment.Tools can enable/disable endpoint protection, approve security requests, modify tag membership, end active maintenance windows, approve storage devices, and move computers between organizations. A hallucinated tool argument from your AI assistant could alter your ThreatLocker configuration in ways that affect endpoint security.

- Try the server against a non-production or lab tenant first.
- Use a ThreatLocker API key scoped to theminimum permissionsyour use case requires.
- Review every destructive tool call before allowing execution. Claude Desktop requires tool-call approval by default — keep that enabled.
- Treat the API key with the same care as portal admin credentials, because functionally it is one.
- The HTTP transport binds to127.0.0.1by default. Do not expose it to the public internet without adding authentication.

All request bodies are typed Pydantic models (63 generated from the spec), so the AI assistant receives full schema validation and autocomplete. The wire format preserves the original camelCase field names expected by the API.

Set the required environment variables (or place them in a.envfile in the directory where you launch the server):

export THREATLOCKER_API_KEY="your-api-key" export THREATLOCKER_ORG_ID="your-default-org-guid" export THREATLOCKER_BASE_URL="https://portalapi.h.threatlocker.com"

By default the server runs instdiomode (the transport MCP clients like Claude Desktop expect). For HTTP transport:

threatlocker-mcp --transport http --port 8765

Add the following block to your Claude Desktop configuration file:

- Windows:%APPDATA%\Claude\claude_desktop_config.json
- macOS:~/Library/Application Support/Claude/claude_desktop_config.json

{ "mcpServers": { "threatlocker": { "command": "uvx", "args": [ "threatlocker-mcp" ], "env": { "THREATLOCKER_API_KEY": "your-api-key", "THREATLOCKER_ORG_ID": "your-default-org-guid", "THREATLOCKER_BASE_URL": "https://portalapi.h.threatlocker.com" } } } }

Fully quit Claude Desktop (tray icon →Quiton Windows;⌘Qon macOS), then reopen it.uvxresolves and caches the package on first launch; subsequent launches are nearly instant.

"args": ["threatlocker-mcp@0.2.1"]

"args": ["--refresh", "threatlocker-mcp"]

Every tool accepts two optional parameters for targeting specific organizations in a parent/child tenant hierarchy:

- organization_id— overrides theManagedOrganizationIdrequest header. When omitted,THREATLOCKER_ORG_IDis used.
- override_organization_id— sets theOverrideManagedOrganizationIdheader for scenarios that require both headers simultaneously.

Finding child org GUIDs:Calllist_organizationsfirst — optionally withsearch_textto filter by display name — to enumerate every org this API key can target. Org GUIDs can also be read from the portal URL while switched into each child org.

"Search the action log for any denied executions on hostname SRV-DB-01 in the last 24 hours."

→ Callsaction_log_get_by_parameters_v2with anActionLogParamsDto.

"Show me all pending approval requests for the Cloud Services org."

→ Callsapproval_request_get_by_parameterswithorganization_id=<cloud-svc-guid>.

"Approve request abc-123 at computer scope with the note 'verified vendor'."

→ Callsapproval_request_permit_applicationwith aPermitApplicationDto.

"Put workstation WS-FINANCE-04 into maintenance mode for the next two hours."

→ Callsmaintenance_mode_insertwith aMaintenanceModeInsertDto.

"Addcorporate-vpn.example.comto the existing 'Corporate VPN' network tag."

→ Callstag_get_dropdown_options_by_organization_idandtag_update.

Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows

Manage web application security through the Fastly NGWAF API using natural language.

MCP server for the xAI Management API — API keys, ACLs, audit logs, and billing

Securely manage secrets and policies in HashiCorp Vault through an MCP interface.

Interact with LicenseSpring's License API and Management API.

Securely access secrets from Doppler's secret management platform using a Doppler API token.

A RESTful API to programmatically interact with the Opal Security platform.

An MCP server for interacting with Tenable tenants connected to a Tenable MSSP Portal

A secure MCP gateway that acts as a proxy, providing authentication, tool discovery, caching, and guardrail enforcement.

A local stdio MCP server that proxies to a remote, OAuth2-protected HTTP MCP server.