Explore skills

Use this skill when working with the ThreatLocker MCP tools — raw-key authentication (NO Bearer prefix), multi-tenant routing via organizationId header, POST-heavy "GetByParameters" endpoints, pagination shape, and child-organization fan-out patterns.

Use this skill when triaging ThreatLocker application approval requests — the heart of day-to-day ThreatLocker operations. Covers pulling the pending queue, grouping requests by application/hash, applying signed-publisher heuristics, and recommending approve/deny decisions with audit-friendly reasoning.

Use this skill when investigating events in the ThreatLocker Action Log (the API name is "audit") — building incident timelines, tracing a file's history across endpoints, identifying repeated denials, and correlating policy bypasses or audit-only matches with user/computer context.

Use this skill when working with ThreatLocker computer groups — the policy-scoping boundary that determines which allow/deny rules apply to which endpoints. Covers listing groups, mapping computer to group, and the difference between the dropdown and full list endpoints.

Use this skill when working with ThreatLocker-protected endpoints for fleet inventory, identifying offline agents, drilling into a single computer's check-in history, and correlating computers across organizations and groups.

Use this skill when working with the ThreatLocker MSP multi-tenant model to enumerate child organizations, retrieve per-org auth keys, and identify valid move targets for relocating computers between tenants.

Use this skill to resolve the right bookable resource in TimeZest before creating a scheduling request — listing agents (individual technicians) and teams (round-robin / shared availability pools), fetching detail for a named resource, and deciding when to book an agent versus a team.

Use this skill when working with the TimeZest MCP tools — Bearer token authentication, the navigation pattern, scheduling-request payloads that carry PSA associated_entities (ConnectWise / Autotask / Halo ticket IDs), and the polling-only update model (no webhooks).

Use this skill to pick the correct TimeZest appointment type for a scheduling request — listing the appointment types configured for the tenant, reading each type's duration, and matching the type to the work described on a ConnectWise / Autotask / Halo ticket.

Use this skill to wire a TimeZest scheduling request into a PSA — building correct associatedEntities entries for ConnectWise, Autotask, or Halo tickets, choosing between the pod and generate_url trigger modes, and diagnosing bookings that completed but never updated the PSA ticket.

Use this skill to query TimeZest's combined resource pool — the unified list of agents and teams available for scheduling — when you want a survey of everything bookable before drilling into a specific agent or team, or when the dispatcher has not named a resource.

Use this skill to book a technician against a ConnectWise / Autotask / Halo PSA ticket via TimeZest — resolving the right agent and appointment type, creating a scheduling request, polling its status, and canceling when needed.