threatlocker-mcp

computer_update_to_finish_maintenance_mode

End active maintenance mode on a computer immediately to re-enable security enforcement. Use when a computer needs to exit maintenance and resume protection.

Instructions

End Maintenance Mode Ends ACTIVE maintenance mode on a specific computer immediately. Distinct from maintenance_mode_end_by_id, which ends a SCHEDULED maintenance window (in progress or not) identified by maintenanceModeId. Use this when you have a computerId and want enforcement re-enabled now. WARNING: may break in-progress installs.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "body": "<body>"
    },
    "name": "computer_update_to_finish_maintenance_mode"
  }
}

Input Schema

Name	Required	Description
`body`	Yes	Request body.
`organization_id`	No	Override the default organization (ManagedOrganizationId header).
`override_organization_id`	No	Optional OverrideManagedOrganizationId header.

Schema Changelog

Changes observed during successful MCP inspections.

First observedv0.2.1Jun 14, 2026

TDQS

A4.5/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses that the tool ends active maintenance mode immediately and warns of breaking in-progress installs. While it could mention permissions or reversibility, the warning is a strong behavioral disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and focused, but the opening 'End Maintenance Mode Ends' is slightly redundant. It is front-loaded with the action and the warning is valuable. Overall efficient, but a minor wordiness prevents a perfect score.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple mutation tool with no output schema, the description covers the core purpose, usage context, and a warning. It does not explain every parameter, but the schema covers them. The warning about breaking installs adds completeness. A brief note on what happens after ending (e.g., enforcement re-enabled) is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description does not explicate the parameters but references `computerId` implicitly. Since the schema has 100% coverage (all parameters have descriptions per context), the description adds value by linking the key parameter to the use case, justifying a score above baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool ends active maintenance mode on a computer immediately, using the verb 'Ends' and specifying the resource. It also distinguishes itself from the sibling tool `maintenance_mode_end_by_id`, which ends a scheduled window, making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells when to use this tool ('when you have a `computerId` and want enforcement re-enabled now') and differentiates it from `maintenance_mode_end_by_id`. It also provides a warning about potential breakage of in-progress installs, offering clear usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server