CrowdStrike Falcon MCP Server

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

What does this entry provide?

CrowdStrike Falcon MCP Server is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding CrowdStrike Falcon MCP Server to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: Official MCP Registry
Quality: 78/100
Install method: pypi
Repo: CrowdStrike/falcon-mcp
Repo updated: Oct 22, 2026

Install command

uvx falcon-mcp==0.20.0

Install method: pypi

Review the upstream source before running this command.

GitHub project

Quality

Repo stars

Repo updated

Oct 22, 2026

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.

MCP manifest

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-22T19:36:42.474283Z",
      "publishedAt": "2026-10-22T19:36:42.474283Z",
      "statusChangedAt": "2026-10-22T19:36:42.474283Z"
    }
  },
  "server": {
    "name": "io.github.CrowdStrike/falcon-mcp",
    "title": "CrowdStrike Falcon MCP Server",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.20.0",
    "packages": [
      {
        "version": "0.20.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "falcon-mcp",
        "runtimeHint": "uvx",
        "registryType": "pypi",
        "environmentVariables": [
          {
            "name": "FALCON_CLIENT_ID",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "CrowdStrike API client ID"
          },
          {
            "name": "FALCON_CLIENT_SECRET",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "CrowdStrike API client secret"
          },
          {
            "name": "FALCON_BASE_URL",
            "format": "string",
            "default": "https://api.crowdstrike.com",
            "description": "CrowdStrike API region URL",
            "placeholder": "https://api.crowdstrike.com"
          },
          {
            "name": "FALCON_MEMBER_CID",
            "format": "string",
            "description": "Child CID for Flight Control (MSSP) support"
          },
          {
            "name": "FALCON_MCP_MODULES",
            "format": "string",
            "description": "Comma-separated list of modules to enable",
            "placeholder": "detections,incidents,hosts"
          },
          {
            "name": "FALCON_MCP_TRANSPORT",
            "format": "string",
            "choices": [
              "stdio",
              "sse",
              "streamable-http"
            ],
            "default": "stdio",
            "description": "Transport protocol to use"
          },
          {
            "name": "FALCON_MCP_DEBUG",
            "format": "boolean",
            "default": "false",
            "description": "Enable debug logging"
          },
          {
            "name": "FALCON_MCP_HOST",
            "format": "string",
            "default": "127.0.0.1",
            "description": "Host to bind to for HTTP transports"
          },
          {
            "name": "FALCON_MCP_PORT",
            "format": "number",
            "default": "8000",
            "description": "Port to listen on for HTTP transports"
          },
          {
            "name": "FALCON_MCP_USER_AGENT_COMMENT",
            "format": "string",
            "description": "Additional information to include in the User-Agent comment section"
          },
          {
            "name": "FALCON_MCP_STATELESS_HTTP",
            "format": "boolean",
            "default": "false",
            "description": "Enable stateless HTTP mode for scalable deployments"
          },
          {
            "name": "FALCON_MCP_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "API key for HTTP transport authentication (x-api-key header)"
          }
        ]
      }
    ],
    "repository": {
      "id": "999737146",
      "url": "https://github.com/CrowdStrike/falcon-mcp",
      "source": "github"
    },
    "description": "Connects AI agents with CrowdStrike Falcon for security analysis and automation."
  }
}

Report an issue with this listing