io.github.CrowdStrike
falcon-mcp
CrowdStrike Falcon MCP Server
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
stdioofficialservice
Package Details
falcon-mcp
Transportstdio
Runtimeuvx
Environment Variables
FALCON_CLIENT_ID(str)
RequiredSecret
CrowdStrike API client ID
FALCON_CLIENT_SECRET(str)
RequiredSecret
CrowdStrike API client secret
FALCON_BASE_URL(str)
Default:
https://api.crowdstrike.comCrowdStrike API region URL
FALCON_MEMBER_CID(str)
Child CID for Flight Control (MSSP) support
FALCON_MCP_MODULES(str)
Comma-separated list of modules to enable
FALCON_MCP_TRANSPORT(str)
Default:
stdioTransport protocol to use
FALCON_MCP_DEBUG(bool)
Default:
falseEnable debug logging
FALCON_MCP_HOST(str)
Default:
127.0.0.1Host to bind to for HTTP transports
FALCON_MCP_PORT(num)
Default:
8000Port to listen on for HTTP transports
FALCON_MCP_USER_AGENT_COMMENT(str)
Additional information to include in the User-Agent comment section
FALCON_MCP_STATELESS_HTTP(bool)
Default:
falseEnable stateless HTTP mode for scalable deployments
FALCON_MCP_API_KEY(str)
Secret
API key for HTTP transport authentication (x-api-key header)