Connects AI agents with CrowdStrike Falcon for security analysis and automation.
Use this profile to copy client config, check auth requirements, review tools and resources, and compare related MCP servers before adding it to an AI client.
Get practical integration notes and launch examples for MCP servers like CrowdStrike Falcon MCP Server.
uvx falcon-mcp{
"FALCON_CLIENT_ID": "YOUR_SECRET_VALUE",
"FALCON_CLIENT_SECRET": "YOUR_SECRET_VALUE",
"FALCON_BASE_URL": "https://api.crowdstrike.com",
"FALCON_MEMBER_CID": "YOUR_VALUE_HERE",
"FALCON_MCP_MODULES": "YOUR_VALUE_HERE",
"FALCON_MCP_TRANSPORT": "stdio",
"FALCON_MCP_DEBUG": "false",
"FALCON_MCP_HOST": "127.0.0.1",
"FALCON_MCP_PORT": "8000",
"FALCON_MCP_USER_AGENT_COMMENT": "YOUR_VALUE_HERE",
"FALCON_MCP_STATELESS_HTTP": "false",
"FALCON_MCP_API_KEY": "YOUR_SECRET_VALUE"
}Add this server entry to the mcpServers object in your Claude Desktop config, then restart the app.
{
"mcpServers": {
"io-github-crowdstrike-falcon-mcp": {
"command": "uvx",
"args": [
"falcon-mcp"
],
"env": {
"FALCON_CLIENT_ID": "YOUR_SECRET_VALUE",
"FALCON_CLIENT_SECRET": "YOUR_SECRET_VALUE",
"FALCON_BASE_URL": "https://api.crowdstrike.com",
"FALCON_MEMBER_CID": "YOUR_VALUE_HERE",
"FALCON_MCP_MODULES": "YOUR_VALUE_HERE",
"FALCON_MCP_TRANSPORT": "stdio",
"FALCON_MCP_DEBUG": "false",
"FALCON_MCP_HOST": "127.0.0.1",
"FALCON_MCP_PORT": "8000",
"FALCON_MCP_USER_AGENT_COMMENT": "YOUR_VALUE_HERE",
"FALCON_MCP_STATELESS_HTTP": "false",
"FALCON_MCP_API_KEY": "YOUR_SECRET_VALUE"
}
}
}
}~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonNo remote HTTP endpoint is advertised. Use the package or stdio setup shown in Install.
CrowdStrike Falcon MCP Server is an MCP server for Connects AI agents with CrowdStrike Falcon for security analysis and automation.. It supports STDIO transport.
Use the generated config in Install. This server runs with uvx falcon-mcp; add any required environment variables before starting your client.
Choose the Claude Desktop tab in Install and copy the config for uvx falcon-mcp. Add required environment variables before starting Claude Desktop.
Choose the Claude Code tab in Install and copy the config for uvx falcon-mcp. Add required environment variables before starting Claude Code.
Choose the Codex tab in Install and copy the config for uvx falcon-mcp. Add required environment variables before starting Codex.
Choose the Cursor or VS Code tab in Install and copy the config for uvx falcon-mcp. Add required environment variables before starting Cursor or VS Code.
CrowdStrike Falcon MCP Server uses STDIO transport. Use the package or command config in Install.
CrowdStrike Falcon MCP Server inventory is listed when the MCP endpoint exposes tools, resources, or prompts. Some servers require auth first.
CrowdStrike Falcon MCP Server is marked with Auth required by registry metadata auth. You may need provider login, an API key, a bearer token, or a session header.
| Package | Registry | Version | Inputs |
|---|---|---|---|
falcon-mcpstdio | pypi | 0.15.0 | Env: FALCON_CLIENT_ID required secret Env: FALCON_CLIENT_SECRET required secret Env: FALCON_BASE_URL Env: FALCON_MEMBER_CID Env: FALCON_MCP_MODULES Env: FALCON_MCP_TRANSPORT Env: FALCON_MCP_DEBUG Env: FALCON_MCP_HOST Env: FALCON_MCP_PORT Env: FALCON_MCP_USER_AGENT_COMMENT Env: FALCON_MCP_STATELESS_HTTP Env: FALCON_MCP_API_KEY secret |