Skip to content
VS Code

ThreatLocker for VS Code

io.github.wyre-ai/threatlocker-mcp

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

client:VS Code transport:stdio runtime:oci

Install ThreatLocker in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "threatlocker-api-key",
      "description": "THREATLOCKER_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "threatlocker-organization-id",
      "description": "THREATLOCKER_ORGANIZATION_ID",
      "password": true
    },
    {
      "type": "promptString",
      "id": "mcp-transport",
      "description": "MCP_TRANSPORT",
      "password": true
    },
    {
      "type": "promptString",
      "id": "auth-mode",
      "description": "AUTH_MODE",
      "password": true
    },
    {
      "type": "promptString",
      "id": "log-level",
      "description": "LOG_LEVEL",
      "password": true
    }
  ],
  "servers": {
    "threatlocker-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/threatlocker-mcp:v1.3.10"
      ],
      "env": {
        "THREATLOCKER_API_KEY": "${input:threatlocker-api-key}",
        "THREATLOCKER_ORGANIZATION_ID": "${input:threatlocker-organization-id}",
        "MCP_TRANSPORT": "${input:mcp-transport}",
        "AUTH_MODE": "${input:auth-mode}",
        "LOG_LEVEL": "${input:log-level}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

ThreatLocker in other clients