← Back to Plugins
MCP Server MCP

CrowdStrike Falcon MCP Server

github By github 👁 1 views ▲ 0 votes

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

Homepage Verified source GitHub

Install

uvx falcon-mcp

Configuration Example

{
  "remotes": [],
  "packages": [
    {
      "registryType": "pypi",
      "identifier": "falcon-mcp",
      "version": "0.17.0",
      "runtimeHint": "uvx",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "CrowdStrike API client ID",
          "isRequired": true,
          "format": "string",
          "isSecret": true,
          "name": "FALCON_CLIENT_ID"
        },
        {
          "description": "CrowdStrike API client secret",
          "isRequired": true,
          "format": "string",
          "isSecret": true,
          "name": "FALCON_CLIENT_SECRET"
        },
        {
          "description": "CrowdStrike API region URL",
          "format": "string",
          "default": "https://api.crowdstrike.com",
          "placeholder": "https://api.crowdstrike.com",
          "name": "FALCON_BASE_URL"
        },
        {
          "description": "Child CID for Flight Control (MSSP) support",
          "format": "string",
          "name": "FALCON_MEMBER_CID"
        },
        {
          "description": "Comma-separated list of modules to enable",
          "format": "string",
          "placeholder": "detections,incidents,hosts",
          "name": "FALCON_MCP_MODULES"
        },
        {
          "description": "Transport protocol to use",
          "format": "string",
          "default": "stdio",
          "choices": [
            "stdio",
            "sse",
            "streamable-http"
          ],
          "name": "FALCON_MCP_TRANSPORT"
        },
        {
          "description": "Enable debug logging",
          "format": "boolean",
          "default": "false",
          "name": "FALCON_MCP_DEBUG"
        },
        {
          "description": "Host to bind to for HTTP transports",
          "format": "string",
          "default": "127.0.0.1",
          "name": "FALCON_MCP_HOST"
        },
        {
          "description": "Port to listen on for HTTP transports",
          "format": "number",
          "default": "8000",
          "name": "FALCON_MCP_PORT"
        },
        {
          "description": "Additional information to include in the User-Agent comment section",
          "format": "string",
          "name": "FALCON_MCP_USER_AGENT_COMMENT"
        },
        {
          "description": "Enable stateless HTTP mode for scalable deployments",
          "format": "boolean",
          "default": "false",
          "name": "FALCON_MCP_STATELESS_HTTP"
        },
        {
          "description": "API key for HTTP transport authentication (x-api-key header)",
          "format": "string",
          "isSecret": true,
          "name": "FALCON_MCP_API_KEY"
        }
      ]
    }
  ]
}
mcp model-context-protocol pypi

Comments

Sign in to leave a comment

Loading comments...