ThreatLocker MCP Server

Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a

Local serverstdio

What is the ThreatLocker MCP Server?

ThreatLocker MCP is an MCP integration. Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a.

Packages and local setup

The published mcpb package is https://github.com/Servosity/msp-skills/releases/download/threatlocker-v0.3.7/threatlocker-mcp.mcpb, version 0.3.7. Its declared MCP transport is stdio.

The package declares PRINTING_PRESS_CLIENT_PROFILE (required): Set the PRINTING_PRESS_CLIENT_PROFILE credential for the ThreatLocker MCP server.; THREATLOCKER_API_KEY (required): Portal API key (ThreatLocker portal: Settings > API Keys), sent as the Authorization header on every call.; THREATLOCKER_BASE_URL: Base URL for the ThreatLocker API. Leave the prefilled default unless your account uses a different regional or self-hosted host.; THREATLOCKER_ORG_ID: Tenant GUID sent as ManagedOrganizationId (the --org flag overrides it). Most Portal API data calls answer 401/403 without it, so set it unless you pass --org on every call.; THREATLOCKER_USER_AGENT: Overrides the User-Agent the CLI sends on ThreatLocker requests. Leave blank to use the CLI's own built-in User-Agent..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 0.3.7 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
PRINTING_PRESS_CLIENT_PROFILESet the PRINTING_PRESS_CLIENT_PROFILE credential for the ThreatLocker MCP server.Yes
THREATLOCKER_API_KEYPortal API key (ThreatLocker portal: Settings > API Keys), sent as the Authorization header on every call.Yes
THREATLOCKER_BASE_URLBase URL for the ThreatLocker API. Leave the prefilled default unless your account uses a different regional or self-hosted host.Optional
THREATLOCKER_ORG_IDTenant GUID sent as ManagedOrganizationId (the --org flag overrides it). Most Portal API data calls answer 401/403 without it, so set it unless you pass --org on every call.Optional
THREATLOCKER_USER_AGENTOverrides the User-Agent the CLI sends on ThreatLocker requests. Leave blank to use the CLI's own built-in User-Agent.Optional