CrowdStrike Falcon MCP Server

io.github.CrowdStrike/falcon-mcp

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

View repository →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<your FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<your FALCON_CLIENT_SECRET>",
        "FALCON_BASE_URL": "https://api.crowdstrike.com",
        "FALCON_MCP_TRANSPORT": "stdio",
        "FALCON_MCP_DEBUG": "false",
        "FALCON_MCP_HOST": "127.0.0.1",
        "FALCON_MCP_PORT": "8000",
        "FALCON_MCP_STATELESS_HTTP": "false",
        "FALCON_MCP_API_KEY": "<your FALCON_MCP_API_KEY>"
      }
    }
  }
}
Environment variables
  • FALCON_CLIENT_IDrequiredsecretCrowdStrike API client ID
  • FALCON_CLIENT_SECRETrequiredsecretCrowdStrike API client secret
  • FALCON_BASE_URLCrowdStrike API region URL
  • FALCON_MCP_TRANSPORTTransport protocol to use
  • FALCON_MCP_DEBUGEnable debug logging
  • FALCON_MCP_HOSTHost to bind to for HTTP transports
  • FALCON_MCP_PORTPort to listen on for HTTP transports
  • FALCON_MCP_STATELESS_HTTPEnable stateless HTTP mode for scalable deployments
  • FALCON_MCP_API_KEYsecretAPI key for HTTP transport authentication (x-api-key header)

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.20.2
Registry
active
Published
11/3/2026

More Developer Tools servers

Browse all Developer Tools →

pmq (Polymarket CLOB V2)

crp4222

Production-proven Polymarket CLOB V2 trading and data. Fail-closed fills; keys stay local.

Developer ToolsAdded 3 months ago

ZuckerBot — Meta Ads MCP Server

DatalisHQ

60+ Meta Ads tools for AI agents: audits, campaign management, audiences and CAPI tracking.

Developer ToolsAdded 3 months ago

io.github.CrumbtrailDev/crumbtrail

CrumbtrailDev

Recorded browser sessions, backend spans, and database row diffs as one ranked fix bundle.

Developer ToolsAdded 3 months ago

MCP Cloudflare

crunchtools

Secure MCP server for Cloudflare DNS, Transform Rules, and Page Rules

Developer ToolsAdded 8 months ago

MCP Gemini

crunchtools

MCP server for Google Gemini AI - text, image, video, research, and more

Developer ToolsAdded 8 months ago

MCP Gitlab

crunchtools

Secure MCP server for GitLab projects, merge requests, issues, and pipelines

Developer ToolsAdded 8 months ago

Add the badge to your site

Show visitors that CrowdStrike Falcon MCP Server is listed here — it’s also the link we check for a free listing.

CrowdStrike Falcon MCP Server — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-crowdstrike-falcon-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="CrowdStrike Falcon MCP Server — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![CrowdStrike Falcon MCP Server — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-crowdstrike-falcon-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.