CrowdStrike Falcon MCP Server

Overview

CrowdStrike Falcon MCP Server is a Model Context Protocol (MCP) server: Connects AI agents with CrowdStrike Falcon for security analysis and automation. Because it speaks the Model Context Protocol, AI assistants can use CrowdStrike Falcon MCP Server as a set of callable tools instead of you copy-pasting between apps.

It runs locally: the Python package falcon-mcp (via uvx) speaks MCP over stdio on your machine. Configuration happens through environment variables — you'll need FALCON_CLIENT_ID, FALCON_CLIENT_SECRET. The current release is v0.18.0, published under the MIT license, with source at CrowdStrike/falcon-mcp on GitHub, where it has earned 241 stars.

On mcp.site, CrowdStrike Falcon MCP Server sits in the AI & Agents category. Any MCP client can use it — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed among them — via the install snippets below. If you maintain CrowdStrike Falcon MCP Server for CrowdStrike, claim this listing to verify ownership, earn the Verified badge, and keep the details current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "crowdstrike_falcon_mcp_server": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<falcon-client-id>",
        "FALCON_CLIENT_SECRET": "<falcon-client-secret>"
      }
    }
  }
}

Requires FALCON_CLIENT_ID, FALCON_CLIENT_SECRET