mcpcost

io.github.WYRE-AI/threatlocker-mcp

ThreatLocker

Is the ThreatLocker MCP server down? No. It answered initialize and tools/list in the probe of 2026-11-14.

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

alive probed 2026-11-15 · unchanged since 2026-11-14

17tools
≈ 2.5ktokens, estimate
≈ 1.2 %of Claude's 200k window
1.7×the median server
5.6 sto initialize
7 msto list tools
Run it
docker run -i --rm ghcr.io/wyre-ai/threatlocker-mcp:v1.4.1 (stdio, probed in a container with the network off)
Host
ghcr.io
Reports itself as
threatlocker-mcp 0.1.0
Capabilities
logging, tools
Instructions
none
Of a 1M window
≈ 0.2 % of a 1M context window, estimate
Claude count
The count_tokens endpoint refused the tool schemas: tools.13.custom.input_schema: input_schema does not support oneOf, allOf, or anyOf at the top level. The estimate stands in.
Repository
https://github.com/WYRE-AI/threatlocker-mcp
Website
https://github.com/WYRE-AI/threatlocker-mcp
Registry
active, updated 2026-11-13 · registry entry
Changes
5 recorded, reachable in 5 of them. A row is added when the result, the tool count or the cost changes.

Most expensive tools

Estimates with the o200k_base tokenizer.

Toolo200k estimateShare of this server
threatlocker_audit_search76931 %
threatlocker_audit_get38416 %
threatlocker_audit_file_history31413 %
threatlocker_navigate1848 %
threatlocker_computers_list1084 %

Compare this server with others.

More servers

Other registry entries on ghcr.io, the ones next to this name; all of them.

Servers that mention threatlocker or allowlisting or protection.

History

We add a row when the result changes. A server with no change keeps its last row.

ProbedResultInitToolsClaudeo200k
2026-11-14 08:14alive982 ms172.5k
2026-11-13 08:56alive1.1 s172.4k
2026-11-11 08:40alive1.3 s171.8k
2026-11-10 09:00alive401 ms171.7k
2026-10-29 07:54alive5.6 s171.6k

Badge for the README

mcpcost: alive

The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.

Atom feed

A mail when this server changes

Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.

For the publisher