CrowdStrike Falcon MCP Server

Connects AI agents to CrowdStrike Falcon for security analysis and automation.

Source

Official Registry

Updated

2026-09-01

// securityCaution

Requires keys· FALCON_CLIENT_ID, FALCON_CLIENT_SECRET, FALCON_BASE_URL, FALCON_MEMBER_CID, FALCON_MCP_MODULES, FALCON_MCP_TRANSPORT, FALCON_MCP_DEBUG, FALCON_MCP_HOST, FALCON_MCP_PORT, FALCON_MCP_USER_AGENT_COMMENT, FALCON_MCP_STATELESS_HTTP, FALCON_MCP_API_KEY
Runs locally
Official / curated
Open source
Community-trusted

Running security audit…

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "CrowdStrike Falcon MCP Server" MCP server from askskill:
Run: claude mcp add 'io-github-crowdstrike-falcon-mcp' -- uvx falcon-mcp

// docs

No documentation provided

Check the source repo for usage and examples.

Connect AI agents to CrowdStrike Falcon for security analysis and automated response.

Use natural language to triage, investigate, and respond in CrowdStrike Falcon.

Run validated CrowdStrike NGSIEM event searches with schema discovery in MCP apps.

Safely lets AI agents use threat analysis and security operations tools.

Build AI agent workflows and automate tasks using MCP-connected services.

Connect to Cisco Secure Firewall FMC to discover profiles and search access rules.

$ loading_