CrowdStrike Falcon MCP Server

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

stdioofficialservice

Package Details

Transportstdio
Runtimeuvx

Environment Variables

FALCON_CLIENT_ID(str)
RequiredSecret

CrowdStrike API client ID

FALCON_CLIENT_SECRET(str)
RequiredSecret

CrowdStrike API client secret

FALCON_BASE_URL(str)
Default:https://api.crowdstrike.com

CrowdStrike API region URL

FALCON_MEMBER_CID(str)

Child CID for Flight Control (MSSP) support

FALCON_MCP_MODULES(str)

Comma-separated list of modules to enable

FALCON_MCP_TRANSPORT(str)
Default:stdio

Transport protocol to use

FALCON_MCP_DEBUG(bool)
Default:false

Enable debug logging

FALCON_MCP_HOST(str)
Default:127.0.0.1

Host to bind to for HTTP transports

FALCON_MCP_PORT(num)
Default:8000

Port to listen on for HTTP transports

FALCON_MCP_USER_AGENT_COMMENT(str)

Additional information to include in the User-Agent comment section

FALCON_MCP_STATELESS_HTTP(bool)
Default:false

Enable stateless HTTP mode for scalable deployments

FALCON_MCP_API_KEY(str)
Secret

API key for HTTP transport authentication (x-api-key header)