{"name":"io.github.Servosity/threatlocker-mcp","slug":"servosity-threatlocker-mcp","title":"ThreatLocker MCP","description":"Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a","url":"https://mcp.market/server/servosity-threatlocker-mcp","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":31,"stars":46,"forks":11,"downloads_week":null,"last_push_at":"2026-09-28T20:52:09.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"mcpb","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/servosity/msp-skills","website":null,"version":"0.3.13","remotes":[],"packages":[{"registryType":"mcpb","identifier":"https://github.com/Servosity/msp-skills/releases/download/threatlocker-v0.3.13/threatlocker-mcp.mcpb","version":"0.3.13","fileSha256":"00943f07e6404e10a0e990f4a75defb28dec416f713a91dfdd9fbd242c76e8c5","transport":{"type":"stdio"},"environmentVariables":[{"description":"Set the PRINTING_PRESS_CLIENT_PROFILE credential for the ThreatLocker MCP server.","isRequired":true,"isSecret":true,"name":"PRINTING_PRESS_CLIENT_PROFILE"},{"description":"Portal API key (ThreatLocker portal: Settings > API Keys), sent as the Authorization header on every call.","isRequired":true,"isSecret":true,"name":"THREATLOCKER_API_KEY"},{"description":"Base URL for the ThreatLocker API. Leave the prefilled default unless your account uses a different regional or self-hosted host.","default":"https://portalapi.g.threatlocker.com/portalapi","name":"THREATLOCKER_BASE_URL"},{"description":"Tenant GUID sent as ManagedOrganizationId (the --org flag overrides it). Most Portal API data calls answer 401/403 without it, so set it unless you pass --org on every call.","name":"THREATLOCKER_ORG_ID"},{"description":"Overrides the User-Agent the CLI sends on ThreatLocker requests. Leave blank to use the CLI's own built-in User-Agent.","name":"THREATLOCKER_USER_AGENT"},{"description":"Optional. Set to exactly 1 to expose only read-only tools and refuse any state-changing execute call.","name":"THREATLOCKER_MCP_READ_ONLY"},{"description":"Optional. Set to 1 to save no API data locally: sync and audit pull are refused, the response cache is off, and reads go to the API.","name":"THREATLOCKER_NO_LOCAL_DATA"},{"description":"Required only when running the MCP server with --transport http. Not needed for the default local stdio transport.","isSecret":true,"name":"THREATLOCKER_MCP_HTTP_TOKEN"}]}],"tools":[],"scan":null,"grade_history":[],"reviews":[]}