Support & Subscription Management
Direct help from our engineering team
Need help setting up the browser extension, connecting an MCP client, or managing team seats? Email us directly and include your browser or OS version so we can assist quickly.
Security & vulnerability reports: security@threadscanner.ai
Enterprise & volume licensing: admin@threadscanner.ai
Manage your subscription
Paste your TSL1.… license key below to open the Stripe Billing Portal,
where you can update your payment method, adjust seat counts, download tax invoices,
or cancel your subscription at the end of the current period.
Misplaced your license key? Email admin@threadscanner.ai from your billing email address and we will resend it.
Frequently asked questions
What does ThreadScanner include?
ThreadScanner combines two local-first security products under a single license: a browser extension for Gmail and Outlook on the web (inbound phishing detection, time-of-click link blocking, attachment hash verification, and Outbound Compose Guard) and an MCP server that protects AI agents against email prompt injection.
Which browsers and AI clients are supported?
The browser extension runs in Google Chrome, Microsoft Edge, Brave, and other
Chromium browsers on macOS, Windows, and Linux. The MCP server runs on Node.js 20+
and supports Claude Desktop, Claude Code, Cursor, Windsurf, Gemini CLI, and
OAuth-capable remote MCP clients (including Grok when configured with your allowed
public hostname via TS_MCP_HTTP_ALLOWED_HOSTS).
How do I connect ThreadScanner to Claude, Cursor, or Windsurf?
Run npx @threadscanner/mcp setup in your terminal. The setup wizard
detects your installed MCP hosts and writes owner-only (mode 0600 where
supported) configuration entries in each client’s profile directory, or reads
credentials from environment variables at runtime.
How do I activate my license key?
In the browser extension, open Settings → License and paste the
TSL1.… key from your welcome email. For the MCP server, pass
--license-key during setup or set TS_LICENSE_KEY in your
environment. The same key activates both surfaces. Ed25519 signature verification
runs locally offline, and active subscriptions refresh their period token
automatically before renewal.
Does my email content leave my computer?
No. Message headers, bodies, and attachments are inspected locally on your device and are never sent to ThreadScanner servers. If you opt into a cloud AI second opinion using your own API key, a redacted summary is sent directly from your device to your chosen AI provider. See our Privacy Policy for full details.
How do I report a security vulnerability?
Email security@threadscanner.ai with reproduction details. We acknowledge reports within two business days.
Do you offer enterprise invoicing, an MSA, or a DPA?
Yes. For 25+ seat deployments, purchase-order billing, a Master Services Agreement, or a signed Data Processing Agreement, contact admin@threadscanner.ai or use the enterprise inquiry form.
Back to ThreadScanner