The Falcon MCP connects AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. It provides tools to query Falcon for security events, manage detections, and automate responses. The server integrates with CrowdStrike's API to fetch real-time threat data and perform actions. Security analysts and SOC teams use it to automate threat detection, investigation, and response workflows.
The Falcon MCP connects AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. It provides tools to query Falcon for security events, manage detections, and automate responses. The server integrates with CrowdStrike's API to fetch real-time threat data and perform actions. Security analysts and SOC teams use it to automate threat detection, investigation, and response workflows.
pip install falcon-mcpAdd this configuration to your claude_desktop_config.json:
{
"mcpServers": {
"crowdstrike-falcon-mcp-github": {
"command": "uvx",
"args": [
"pip install falcon-mcp"
]
}
}
}Restart Claude Desktop, then ask:
"What tools do you have available from falcon mcp?"
API Key Required
This server requires an API key from falcon mcp. Add it to your environment or config.
| Variable | Required | Description |
|---|---|---|
| FALCON_MCP_API_KEY | Yes | Your falcon mcp API key |
"What resources are available in falcon mcp?"
Claude will query available resources and return a list of what you can access.
"Show me details about [specific item] in falcon mcp"
Claude will fetch and display detailed information about the requested item.
"Create a new [item] in falcon mcp with [details]"
Claude will use the appropriate tool to create the resource and confirm success.
We build custom MCP integrations for B2B companies. From simple connections to complex multi-tool setups.