mcpindex.aiv0
← Index

CrowdStrike Falcon MCP Server

io.github.CrowdStrike/falcon-mcp·v0.10.0·Security
Quality Score
85
/100

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

Repository →
§00  Trust verdict · v1 advisory ·  method
UNVERIFIEDno verdict on file

Verdict not yet evaluated for this tool. The hybrid eval runs adversarial cases first; coverage rolls out as the corpus expands. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: hybrid eval, four-state verdict, honest limits.

§01  Install
Claude Desktop (uvx)
{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<your-falcon_client_id>",
        "FALCON_CLIENT_SECRET": "<your-falcon_client_secret>",
        "FALCON_BASE_URL": "https://api.crowdstrike.com",
        "FALCON_MEMBER_CID": "<falcon_member_cid>",
        "FALCON_MCP_MODULES": "<falcon_mcp_modules>",
        "FALCON_MCP_TRANSPORT": "stdio",
        "FALCON_MCP_DEBUG": "false",
        "FALCON_MCP_HOST": "127.0.0.1",
        "FALCON_MCP_PORT": "8000",
        "FALCON_MCP_USER_AGENT_COMMENT": "<falcon_mcp_user_agent_comment>",
        "FALCON_MCP_STATELESS_HTTP": "false",
        "FALCON_MCP_API_KEY": "<your-falcon_mcp_api_key>"
      }
    }
  }
}
§02  Environment variables
FALCON_CLIENT_ID
requiredsecret

CrowdStrike API client ID

FALCON_CLIENT_SECRET
requiredsecret

CrowdStrike API client secret

FALCON_BASE_URL

CrowdStrike API region URL

FALCON_MEMBER_CID

Child CID for Flight Control (MSSP) support

FALCON_MCP_MODULES

Comma-separated list of modules to enable

FALCON_MCP_TRANSPORT

Transport protocol to use

FALCON_MCP_DEBUG

Enable debug logging

FALCON_MCP_HOST

Host to bind to for HTTP transports

FALCON_MCP_PORT

Port to listen on for HTTP transports

FALCON_MCP_USER_AGENT_COMMENT

Additional information to include in the User-Agent comment section

FALCON_MCP_STATELESS_HTTP

Enable stateless HTTP mode for scalable deployments

FALCON_MCP_API_KEY
secret

API key for HTTP transport authentication (x-api-key header)

§03  MCP Quality Score  ·  methodology
freshness
25
completeness
15
installability
25
documentation
15
stability
5
§04  Alternatives in Security
Helixar Security
ai.helixar/mcp

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

ai.smithery/Nekzus-npm-sentinel-mcp
ai.smithery/Nekzus-npm-sentinel-mcp

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

app.zenable/zenable
app.zenable/zenable

Zenable cleans up sloppy AI code and prevents vulnerabilities with deterministic guardrails