falcon mcp
pipStandardThe Falcon MCP connects AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. It provides tools to query Falcon for security events, manage detections, and automate responses. The server integrates with CrowdStrike's API to fetch real-time threat data and perform actions. Security analysts and SOC teams use it to automate threat detection, investigation, and response workflows.
89250Updated 1 month ago
Overview
The Falcon MCP connects AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. It provides tools to query Falcon for security events, manage detections, and automate responses. The server integrates with CrowdStrike's API to fetch real-time threat data and perform actions. Security analysts and SOC teams use it to automate threat detection, investigation, and response workflows.
Installation
1Install the package
pip
pip install falcon-mcp2Add to Claude
Add this configuration to your claude_desktop_config.json:
claude_desktop_config.json
{
"mcpServers": {
"crowdstrike-falcon-mcp-github": {
"command": "uvx",
"args": [
"pip install falcon-mcp"
]
}
}
}3Verify installation
Restart Claude Desktop, then ask:
"What tools do you have available from falcon mcp?"
Prerequisites
- Python 3.10 or higher
- pip or uv package manager
- Claude Desktop or Claude API access
- API key for falcon mcp
Configuration
API Key Required
This server requires an API key from falcon mcp. Add it to your environment or config.
| Variable | Required | Description |
|---|---|---|
| FALCON_MCP_API_KEY | Yes | Your falcon mcp API key |
Usage Examples
List Resources
"What resources are available in falcon mcp?"
Claude will query available resources and return a list of what you can access.
Get Details
"Show me details about [specific item] in falcon mcp"
Claude will fetch and display detailed information about the requested item.
Create New
"Create a new [item] in falcon mcp with [details]"
Claude will use the appropriate tool to create the resource and confirm success.
Works with falcon mcp
CrowdStrike
Protect endpoints with real-time threat intelligence and advanced detection and response capabilities.
Feroot Security
AI-powered compliance platform for 50+ laws
Darktrace
Detect and respond to cyber threats in real-time using self-learning AI technology.
Orca Security
Ensure cloud security with continuous monitoring and vulnerability management.
Related skills
Browse all skillsNeed help with MCP integration?
We build custom MCP integrations for B2B companies. From simple connections to complex multi-tool setups.