How do I install CrowdStrike Falcon MCP Server?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does CrowdStrike Falcon MCP Server need an API key?

The publisher lists these environment variables: FALCON_CLIENT_ID, FALCON_CLIENT_SECRET, FALCON_BASE_URL, FALCON_MEMBER_CID, FALCON_MCP_MODULES, FALCON_MCP_TRANSPORT, FALCON_MCP_DEBUG, FALCON_MCP_HOST, FALCON_MCP_PORT, FALCON_MCP_USER_AGENT_COMMENT, FALCON_MCP_STATELESS_HTTP, FALCON_MCP_API_KEY.

What transport does CrowdStrike Falcon MCP Server use?

CrowdStrike Falcon MCP Server runs locally over stdio.

When was CrowdStrike Falcon MCP Server last checked?

Last checked 2026-11-09. Connects AI agents with CrowdStrike Falcon for security analysis and automation.

CrowdStrike Falcon MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

uvx falcon-mcp==0.20.2

Credentials from the publisher

FALCON_CLIENT_ID — CrowdStrike API client ID
FALCON_CLIENT_SECRET — CrowdStrike API client secret
FALCON_BASE_URL — CrowdStrike API region URL
FALCON_MEMBER_CID — Child CID for Flight Control (MSSP) support
FALCON_MCP_MODULES — Comma-separated list of modules to enable
FALCON_MCP_TRANSPORT — Transport protocol to use
FALCON_MCP_DEBUG — Enable debug logging
FALCON_MCP_HOST — Host to bind to for HTTP transports
FALCON_MCP_PORT — Port to listen on for HTTP transports
FALCON_MCP_USER_AGENT_COMMENT — Additional information to include in the User-Agent comment section
FALCON_MCP_STATELESS_HTTP — Enable stateless HTTP mode for scalable deployments
FALCON_MCP_API_KEY — API key for HTTP transport authentication (x-api-key header)

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1FALCON_CLIENT_ID=<secret> FALCON_CLIENT_SECRET=<secret> FALCON_BASE_URL=<value> FALCON_MEMBER_CID=<value> FALCON_MCP_MODULES=<value> FALCON_MCP_TRANSPORT=<value> FALCON_MCP_DEBUG=<value> FALCON_MCP_HOST=<value> FALCON_MCP_PORT=<value> FALCON_MCP_USER_AGENT_COMMENT=<value> FALCON_MCP_STATELESS_HTTP=<value> FALCON_MCP_API_KEY=<secret> claude mcp add io.github.crowdstrike-falcon-mcp -- uvx falcon-mcp==0.20.2

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.crowdstrike-falcon-mcp": {4      "command": "uvx",5      "args": [6        "falcon-mcp==0.20.2"7      ],8      "env": {9        "FALCON_CLIENT_ID": "<secret>",10        "FALCON_CLIENT_SECRET": "<secret>",11        "FALCON_BASE_URL": "<value>",12        "FALCON_MEMBER_CID": "<value>",13        "FALCON_MCP_MODULES": "<value>",14        "FALCON_MCP_TRANSPORT": "<value>",15        "FALCON_MCP_DEBUG": "<value>",16        "FALCON_MCP_HOST": "<value>",17        "FALCON_MCP_PORT": "<value>",18        "FALCON_MCP_USER_AGENT_COMMENT": "<value>",19        "FALCON_MCP_STATELESS_HTTP": "<value>",20        "FALCON_MCP_API_KEY": "<secret>"21      }22    }23  }24}

claude_desktop_config.json

Local · pypiPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

falcon-mcp

falcon-mcp is a Model Context Protocol (MCP) server that connects AI agents with the CrowdStrike Falcon platform, powering intelligent security analysis in your agentic workflows. It delivers programmatic access to essential security capabilities—including detections, threat intelligence, and host management—establishing the foundation for advanced security operations and automation.

[!IMPORTANT] Pre-1.0 release: falcon-mcp is under active development ahead of 1.0. Tool names, parameters, and response shapes can still change between minor releases, so pin a version and check the changelog before upgrading. The project is actively maintained by CrowdStrike and supported through GitHub Issues; CrowdStrike customers can also raise questions through their usual Technical Support channels. See SUPPORT.md for details.

Documentation

Full docs are available at developer.crowdstrike.com/falcon-mcp.

Modules

Module	Description
Core	Basic connectivity and system information
AgentWorks	Call, list, and observe Charlotte AI agents and their execution traces
Case Management	Case lifecycle management, evidence attachment, tagging, and templates
Cloud Security	Kubernetes containers, image vulnerabilities, CSPM asset inventory, IOM findings, suppression rules, cloud risks, cloud insights, and cloud groups
Correlation Rules	Search, create, update, and manage NG-SIEM correlation rules
Custom IOA	Create and manage Custom IOA behavioral detection rules and rule groups
Data Security	Search, create, and update Data Security classifications, policies, content patterns, applications, web locations, sensitivity labels, and file types
Detections	Find, aggregate, and analyze detections to understand malicious activity
Discover	Search application inventory and managed/unmanaged assets, including drive encryption and system-insights posture
Exclusions	Search, create, update, and delete IOA, machine learning, sensor visibility, and certificate-based exclusions
Firewall Management	Search and manage firewall rules and rule groups
Fusion SOAR

See the Module Overview for required API scopes, available tools, and FQL resources.

[!NOTE] The Guardian module reads the /aidr API, whose route and parameter surface is not yet uniform across Falcon deployments. Some tools return HTTP 400 or 404 where an older surface is live. See the Guardian module docs for the details.

Quick Start

Install

Using uv (recommended)

uv tool install falcon-mcp

Using pip

pip install falcon-mcp

Configure

Set the required environment variables (or use a .env file — see the Configuration Guide):

export FALCON_CLIENT_ID="your-client-id"
export FALCON_CLIENT_SECRET="your-client-secret"
export FALCON_BASE_URL="https://api.crowdstrike.com"

Run

falcon-mcp

See the Getting Started guide for full installation and configuration details.

Editor Integration

Using `uvx` (recommended)

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "--env-file",
        "/path/to/.env",
        "falcon-mcp"
      ]
    }
  }
}

With Module Selection

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "--env-file",
        "/path/to/.env",
        "falcon-mcp",
        "--modules",
        "detections,hosts,intel"
      ]
    }
  }
}

Docker

{
  "mcpServers": {
    "falcon-mcp-docker": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--env-file",
        "/full/path/to/.env",
        "quay.io/crowdstrike/falcon-mcp:latest"
      ]
    }
  }
}

See the Usage guide for all command line options, module configuration, and library usage.

Container Usage

# Pull the latest image
docker pull quay.io/crowdstrike/falcon-mcp:latest

# Run with .env file (stdio transport)
docker run -i --rm --env-file /path/to/.env quay.io/crowdstrike/falcon-mcp:latest

# Run with streamable-http transport (add --api-key when the port is reachable beyond localhost)
docker run --rm -p 8000:8000 --env-file /path/to/.env \
  quay.io/crowdstrike/falcon-mcp:latest \
  --transport streamable-http --host 0.0.0.0 --api-key your-secret-key

[!CAUTION] HTTP transports have no authentication by default. Binding to a non-loopback address (--host 0.0.0.0) exposes an unauthenticated server that anyone who can reach the port can drive with your CrowdStrike credentials. Keep the default loopback bind for local use and set --api-key whenever you bind wider. Managed runtimes such as AWS Bedrock AgentCore and Google Cloud Run sit behind their own network security layer, so this does not apply to them. See the Configuration guide.

See the Docker Deployment guide for building locally, custom ports, and advanced configurations.

Dynamic Mode

Running many modules at once inflates the context window every AI client must hold. Dynamic mode replaces the full tool surface with three tools — falcon_list_enabled_tools to see every tool the server has available, falcon_search_tools to find candidate tools by keyword and then fetch the parameter schema for the one you pick, and falcon_execute_tool to run it — so agents only load the schemas they actually need.

falcon-mcp --dynamic
# or: FALCON_MCP_DYNAMIC=true

See the Dynamic Mode guide for the full discover → execute workflow and trade-offs.

Restricting What a Server Can Do

--modules is all-or-nothing per module: enabling one to get its search tools also exposes every mutating tool it carries. Three tool-level options narrow that surface.

# Investigation-only server: no tool that mutates tenant state is registered
falcon-mcp --read-only

# Expose exactly two tools, nothing else
falcon-mcp --tools falcon_search_detections,falcon_search_hosts

# Keep the module, drop one tool
falcon-mcp --modules hostgroups --exclude-tools falcon_delete_host_groups

# All of detections, plus one tool from a module you did not enable
falcon-mcp --modules detections --tools falcon_search_applications

Flag	Environment Variable	Effect
`--read-only`	`FALCON_MCP_READ_ONLY`	Registers only read-only tools
`--tools`	`FALCON_MCP_TOOLS`	Allow-list of tool names, added to the enabled modules
`--exclude-tools`	`FALCON_MCP_EXCLUDE_TOOLS`	Deny-list of tool names

Tool names are the falcon_-prefixed names your client displays. An unrecognized name aborts startup rather than being ignored, so a typo in a deny-list cannot silently leave a tool exposed.

Composing the options

--tools is additive, not a narrowing filter. It grants individual tools on top of whatever --modules already enabled, reaching across the module boundary:

--tools X on its own registers only X — no modules are loaded by default.
--modules detections --tools X registers every detections tool plus X, even when X belongs to a module that is not enabled. That module contributes only X, not its whole surface, and falcon_list_enabled_modules does not list it. falcon_list_enabled_tools does list X — it reports the tools available on the server, so it is the reliable answer to "is this capability available here?"

To subtract, use --exclude-tools or --read-only. All four knobs compose, and they resolve in a fixed order:

--exclude-tools removes a tool unconditionally, even if --tools names it.
--read-only removes every mutating tool unconditionally, even if --tools names it.
--tools adds the tools it names, bypassing the module gate.
--modules decides which tools are candidates by default.

Because the first two rules always win, --read-only and --exclude-tools are safe to set as a deployment-wide floor: an additive --tools list cannot widen past them. Combining them is how you express "search everything, change nothing, and don't even offer that one tool":

falcon-mcp --read-only --exclude-tools falcon_execute_rtr_read_only_command

Filtering applies to dynamic mode too — a withheld tool is absent from falcon_search_tools results and rejected by falcon_execute_tool. Because dynamic mode dispatches by name rather than registering tools individually, that rejection spells out that the tool exists but the server's configuration withholds it, and names the one rule responsible, so an agent reports a disabled tool as disabled instead of telling the user the capability does not exist. falcon_list_enabled_tools carries a filters_active field in either mode whenever a rule is in effect. The startup log reports which rules are active and how many tools --read-only and --exclude-tools withheld, so you can confirm what you deployed. Run with --debug to see the withheld tools by name.

These options filter tools, not resources. A withheld tool's FQL guide resource stays available — guides are static field documentation carrying no tenant data.

Deployment Options

Contributing

# Clone and install
git clone https://github.com/CrowdStrike/falcon-mcp.git
cd falcon-mcp
uv sync --all-extras

# Run tests
uv run pytest

[!IMPORTANT] This project uses Conventional Commits for automated releases. Please follow the commit message format outlined in our Contributing Guide.

Developer Documentation

Documentation Guide: Architecture and maintenance guide for the documentation
Module Development Guide: Instructions for implementing new modules
Resource Development Guide: Instructions for implementing resources
Integration Testing Guide: Guide for running integration tests with real API calls

Registries

falcon-mcp is published to public MCP catalogs for discovery and one-click setup in compatible clients:

License

This project is licensed under the MIT License - see the LICENSE file for details.

Support

This is a community-driven, open source project. While it is not an official CrowdStrike product, it is actively maintained by CrowdStrike and supported in collaboration with the open source developer community.

For more information, please see our SUPPORT file.

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install CrowdStrike Falcon MCP Server?

Does CrowdStrike Falcon MCP Server need an API key?

What transport does CrowdStrike Falcon MCP Server use?

When was CrowdStrike Falcon MCP Server last checked?

Documentation

falcon-mcp

Documentation

Modules

Quick Start

Install

Using uv (recommended)

Using pip

Configure

Run

Editor Integration

Using uvx (recommended)

With Module Selection

Docker

Container Usage

Dynamic Mode

Restricting What a Server Can Do

Composing the options

Deployment Options

Contributing

Developer Documentation

Registries

License

Support

Using `uvx` (recommended)