# 安装 CrowdStrike Falcon MCP Server

- 类型: MCP 工具
- 说明: 连接 AI 代理与 CrowdStrike Falcon，支持安全分析与自动化处置。
- 仓库: https://github.com/CrowdStrike/falcon-mcp

## 方式一 · 一键代装（复制提示词让 AI 代劳）

### Claude Code
```
请帮我安装 askskill 上的 "CrowdStrike Falcon MCP Server" MCP 服务：
执行：claude mcp add io-github-crowdstrike-falcon-mcp -- uvx falcon-mcp
```

### Codex
```
请帮我安装 askskill 上的 "CrowdStrike Falcon MCP Server" MCP 服务：
在 ~/.codex/config.toml 中添加：
[mcp_servers.io-github-crowdstrike-falcon-mcp]
command = "uvx"
args = ["falcon-mcp"]
然后重启 Codex 生效
```

### Cursor
```
请帮我安装 askskill 上的 "CrowdStrike Falcon MCP Server" MCP 服务：
在 .cursor/mcp.json 的 "mcpServers" 中添加：
"io-github-crowdstrike-falcon-mcp": { "command": "uvx", "args": ["falcon-mcp"] }
然后在 Cursor 设置 > MCP 中启用
```

## 方式二 · 命令行安装（原生命令与配置）

### Claude Code
```bash
claude mcp add --env FALCON_CLIENT_ID=YOUR_VALUE --env FALCON_CLIENT_SECRET=YOUR_VALUE --env FALCON_BASE_URL=YOUR_VALUE --env FALCON_MEMBER_CID=YOUR_VALUE --env FALCON_MCP_MODULES=YOUR_VALUE --env FALCON_MCP_TRANSPORT=YOUR_VALUE --env FALCON_MCP_DEBUG=YOUR_VALUE --env FALCON_MCP_HOST=YOUR_VALUE --env FALCON_MCP_PORT=YOUR_VALUE --env FALCON_MCP_USER_AGENT_COMMENT=YOUR_VALUE --env FALCON_MCP_STATELESS_HTTP=YOUR_VALUE --env FALCON_MCP_API_KEY=YOUR_VALUE --transport stdio io-github-crowdstrike-falcon-mcp -- uvx falcon-mcp
```
需要环境变量：FALCON_CLIENT_ID, FALCON_CLIENT_SECRET, FALCON_BASE_URL, FALCON_MEMBER_CID, FALCON_MCP_MODULES, FALCON_MCP_TRANSPORT, FALCON_MCP_DEBUG, FALCON_MCP_HOST, FALCON_MCP_PORT, FALCON_MCP_USER_AGENT_COMMENT, FALCON_MCP_STATELESS_HTTP, FALCON_MCP_API_KEY

### Codex
```bash
codex mcp add --env FALCON_CLIENT_ID=YOUR_VALUE --env FALCON_CLIENT_SECRET=YOUR_VALUE --env FALCON_BASE_URL=YOUR_VALUE --env FALCON_MEMBER_CID=YOUR_VALUE --env FALCON_MCP_MODULES=YOUR_VALUE --env FALCON_MCP_TRANSPORT=YOUR_VALUE --env FALCON_MCP_DEBUG=YOUR_VALUE --env FALCON_MCP_HOST=YOUR_VALUE --env FALCON_MCP_PORT=YOUR_VALUE --env FALCON_MCP_USER_AGENT_COMMENT=YOUR_VALUE --env FALCON_MCP_STATELESS_HTTP=YOUR_VALUE --env FALCON_MCP_API_KEY=YOUR_VALUE io-github-crowdstrike-falcon-mcp -- uvx falcon-mcp
```
配置文件 ~/.codex/config.toml：
```toml
[mcp_servers.io-github-crowdstrike-falcon-mcp]
command = "uvx"
args = ["falcon-mcp"]

[mcp_servers.io-github-crowdstrike-falcon-mcp.env]
FALCON_CLIENT_ID = "YOUR_VALUE"
FALCON_CLIENT_SECRET = "YOUR_VALUE"
FALCON_BASE_URL = "YOUR_VALUE"
FALCON_MEMBER_CID = "YOUR_VALUE"
FALCON_MCP_MODULES = "YOUR_VALUE"
FALCON_MCP_TRANSPORT = "YOUR_VALUE"
FALCON_MCP_DEBUG = "YOUR_VALUE"
FALCON_MCP_HOST = "YOUR_VALUE"
FALCON_MCP_PORT = "YOUR_VALUE"
FALCON_MCP_USER_AGENT_COMMENT = "YOUR_VALUE"
FALCON_MCP_STATELESS_HTTP = "YOUR_VALUE"
FALCON_MCP_API_KEY = "YOUR_VALUE"
```
需要环境变量：FALCON_CLIENT_ID, FALCON_CLIENT_SECRET, FALCON_BASE_URL, FALCON_MEMBER_CID, FALCON_MCP_MODULES, FALCON_MCP_TRANSPORT, FALCON_MCP_DEBUG, FALCON_MCP_HOST, FALCON_MCP_PORT, FALCON_MCP_USER_AGENT_COMMENT, FALCON_MCP_STATELESS_HTTP, FALCON_MCP_API_KEY

### Cursor
配置文件 .cursor/mcp.json：
```json
{
  "mcpServers": {
    "io-github-crowdstrike-falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "YOUR_VALUE",
        "FALCON_CLIENT_SECRET": "YOUR_VALUE",
        "FALCON_BASE_URL": "YOUR_VALUE",
        "FALCON_MEMBER_CID": "YOUR_VALUE",
        "FALCON_MCP_MODULES": "YOUR_VALUE",
        "FALCON_MCP_TRANSPORT": "YOUR_VALUE",
        "FALCON_MCP_DEBUG": "YOUR_VALUE",
        "FALCON_MCP_HOST": "YOUR_VALUE",
        "FALCON_MCP_PORT": "YOUR_VALUE",
        "FALCON_MCP_USER_AGENT_COMMENT": "YOUR_VALUE",
        "FALCON_MCP_STATELESS_HTTP": "YOUR_VALUE",
        "FALCON_MCP_API_KEY": "YOUR_VALUE"
      }
    }
  }
}
```
一键安装：cursor://anysphere.cursor-deeplink/mcp/install?name=io-github-crowdstrike-falcon-mcp&config=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
需要环境变量：FALCON_CLIENT_ID, FALCON_CLIENT_SECRET, FALCON_BASE_URL, FALCON_MEMBER_CID, FALCON_MCP_MODULES, FALCON_MCP_TRANSPORT, FALCON_MCP_DEBUG, FALCON_MCP_HOST, FALCON_MCP_PORT, FALCON_MCP_USER_AGENT_COMMENT, FALCON_MCP_STATELESS_HTTP, FALCON_MCP_API_KEY