ThreatLocker for VS Code
io.github.wyre-ai/threatlocker-mcp
MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.
client:VS Code
transport:stdio
runtime:oci
Install ThreatLocker in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "threatlocker-api-key",
"description": "THREATLOCKER_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "threatlocker-organization-id",
"description": "THREATLOCKER_ORGANIZATION_ID",
"password": true
},
{
"type": "promptString",
"id": "mcp-transport",
"description": "MCP_TRANSPORT",
"password": true
},
{
"type": "promptString",
"id": "auth-mode",
"description": "AUTH_MODE",
"password": true
},
{
"type": "promptString",
"id": "log-level",
"description": "LOG_LEVEL",
"password": true
}
],
"servers": {
"threatlocker-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/threatlocker-mcp:v1.3.10"
],
"env": {
"THREATLOCKER_API_KEY": "${input:threatlocker-api-key}",
"THREATLOCKER_ORGANIZATION_ID": "${input:threatlocker-organization-id}",
"MCP_TRANSPORT": "${input:mcp-transport}",
"AUTH_MODE": "${input:auth-mode}",
"LOG_LEVEL": "${input:log-level}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs