CrowdStrike Falcon MCP Server

Indexed by io.github.CrowdStrike

About

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)

Env varsFALCON_CLIENT_ID FALCON_CLIENT_SECRET FALCON_BASE_URL FALCON_MEMBER_CID FALCON_MCP_MODULES FALCON_MCP_TRANSPORT FALCON_MCP_DEBUG FALCON_MCP_HOST FALCON_MCP_PORT FALCON_MCP_USER_AGENT_COMMENT FALCON_MCP_STATELESS_HTTP FALCON_MCP_API_KEY

Claude Code

claude mcp add --env FALCON_CLIENT_ID= --env FALCON_CLIENT_SECRET= --env FALCON_BASE_URL= --env FALCON_MEMBER_CID= --env FALCON_MCP_MODULES= --env FALCON_MCP_TRANSPORT= --env FALCON_MCP_DEBUG= --env FALCON_MCP_HOST= --env FALCON_MCP_PORT= --env FALCON_MCP_USER_AGENT_COMMENT= --env FALCON_MCP_STATELESS_HTTP= --env FALCON_MCP_API_KEY= falcon-mcp -- uvx falcon-mcp

Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code

code --add-mcp '{"name":"falcon-mcp","command":"uvx","args":["falcon-mcp"],"env":{"FALCON_CLIENT_ID":"","FALCON_CLIENT_SECRET":"","FALCON_BASE_URL":"","FALCON_MEMBER_CID":"","FALCON_MCP_MODULES":"","FALCON_MCP_TRANSPORT":"","FALCON_MCP_DEBUG":"","FALCON_MCP_HOST":"","FALCON_MCP_PORT":"","FALCON_MCP_USER_AGENT_COMMENT":"","FALCON_MCP_STATELESS_HTTP":"","FALCON_MCP_API_KEY":""}}'

JSON

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "",
        "FALCON_CLIENT_SECRET": "",
        "FALCON_BASE_URL": "",
        "FALCON_MEMBER_CID": "",
        "FALCON_MCP_MODULES": "",
        "FALCON_MCP_TRANSPORT": "",
        "FALCON_MCP_DEBUG": "",
        "FALCON_MCP_HOST": "",
        "FALCON_MCP_PORT": "",
        "FALCON_MCP_USER_AGENT_COMMENT": "",
        "FALCON_MCP_STATELESS_HTTP": "",
        "FALCON_MCP_API_KEY": ""
      }
    }
  }
}

Environment variables are listed by name only — fill in your own values. Entries never carry secrets.