CrowdStrike Falcon MCP Server

Name: CrowdStrike Falcon MCP Server
Author: CrowdStrike

MCP

by CrowdStrike · v0.13.0

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

mcplocal

MCP configuration

stdio

Command

uvx falcon-mcp==0.13.0

Environment

FALCON_CLIENT_IDrequiredsecret
CrowdStrike API client ID
FALCON_CLIENT_SECRETrequiredsecret
CrowdStrike API client secret
FALCON_BASE_URL
CrowdStrike API region URL
FALCON_MEMBER_CID
Child CID for Flight Control (MSSP) support
FALCON_MCP_MODULES
Comma-separated list of modules to enable
FALCON_MCP_TRANSPORT
Transport protocol to use
FALCON_MCP_DEBUG
Enable debug logging
FALCON_MCP_HOST
Host to bind to for HTTP transports
FALCON_MCP_PORT
Port to listen on for HTTP transports
FALCON_MCP_USER_AGENT_COMMENT
Additional information to include in the User-Agent comment section
FALCON_MCP_STATELESS_HTTP
Enable stateless HTTP mode for scalable deployments
FALCON_MCP_API_KEYsecret
API key for HTTP transport authentication (x-api-key header)

Browse here, install from the native macOS app — pick targets, fill env vars, and write configs safely.