SERVER

CrowdStrike Falcon MCP Server

Rank #357

io.github.CrowdStrike/falcon-mcp

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

11 versions

257 GitHub stars

by crowdstrike (1 servers)View repository ↗Claim this server

First listed

Aug 5, 2025

Last publish date

Sep 1, 2026

OVERVIEW

CrowdStrike Falcon MCP Server is a Model Context Protocol (MCP) server published by crowdstrike. It ranks #357 of 132,046 servers tracked on MCP Toplist, and its repository has 257 GitHub stars. CrowdStrike Falcon MCP Server is listed across 4 registries — Official MCP, Glama, PulseMCP and mcp.so, with 11 tracked versions. It was first listed on Aug 5, 2025 and most recently updated on Sep 1, 2026.

STANDING

#357of 132,046 tracked serversTop 0.5%

Ranks ahead of 131,689 of 132,046 servers on MCP Toplist.

Recent momentum

+108GitHub stars since Apr 27 (+72%)

CONNECT

Use CrowdStrike Falcon MCP Server

API keyNeeds credentials

Requires user-supplied configuration before first use — typically an API key, token or connection string set via environment variables.

Python package (PyPI)

claude mcp add falcon-mcp -e "FALCON_CLIENT_ID=<your FALCON_CLIENT_ID>" -e "FALCON_CLIENT_SECRET=<your FALCON_CLIENT_SECRET>" -e "FALCON_BASE_URL=<your FALCON_BASE_URL>" -e "FALCON_MEMBER_CID=<your FALCON_MEMBER_CID>" -e "FALCON_MCP_MODULES=<your FALCON_MCP_MODULES>" -e "FALCON_MCP_TRANSPORT=<your FALCON_MCP_TRANSPORT>" -e "FALCON_MCP_DEBUG=<your FALCON_MCP_DEBUG>" -e "FALCON_MCP_HOST=<your FALCON_MCP_HOST>" -e "FALCON_MCP_PORT=<your FALCON_MCP_PORT>" -e "FALCON_MCP_USER_AGENT_COMMENT=<your FALCON_MCP_USER_AGENT_COMMENT>" -e "FALCON_MCP_STATELESS_HTTP=<your FALCON_MCP_STATELESS_HTTP>" -e "FALCON_MCP_API_KEY=<your FALCON_MCP_API_KEY>" -- uvx falcon-mcp

Replace each placeholder with your own value before saving.

Python package (PyPI)

[mcp_servers.falcon-mcp]
command = "uvx"
args = ["falcon-mcp"]

[mcp_servers.falcon-mcp.env]
FALCON_CLIENT_ID = "<your FALCON_CLIENT_ID>"
FALCON_CLIENT_SECRET = "<your FALCON_CLIENT_SECRET>"
FALCON_BASE_URL = "<your FALCON_BASE_URL>"
FALCON_MEMBER_CID = "<your FALCON_MEMBER_CID>"
FALCON_MCP_MODULES = "<your FALCON_MCP_MODULES>"
FALCON_MCP_TRANSPORT = "<your FALCON_MCP_TRANSPORT>"
FALCON_MCP_DEBUG = "<your FALCON_MCP_DEBUG>"
FALCON_MCP_HOST = "<your FALCON_MCP_HOST>"
FALCON_MCP_PORT = "<your FALCON_MCP_PORT>"
FALCON_MCP_USER_AGENT_COMMENT = "<your FALCON_MCP_USER_AGENT_COMMENT>"
FALCON_MCP_STATELESS_HTTP = "<your FALCON_MCP_STATELESS_HTTP>"
FALCON_MCP_API_KEY = "<your FALCON_MCP_API_KEY>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

Python package (PyPI)

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<your FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<your FALCON_CLIENT_SECRET>",
        "FALCON_BASE_URL": "<your FALCON_BASE_URL>",
        "FALCON_MEMBER_CID": "<your FALCON_MEMBER_CID>",
        "FALCON_MCP_MODULES": "<your FALCON_MCP_MODULES>",
        "FALCON_MCP_TRANSPORT": "<your FALCON_MCP_TRANSPORT>",
        "FALCON_MCP_DEBUG": "<your FALCON_MCP_DEBUG>",
        "FALCON_MCP_HOST": "<your FALCON_MCP_HOST>",
        "FALCON_MCP_PORT": "<your FALCON_MCP_PORT>",
        "FALCON_MCP_USER_AGENT_COMMENT": "<your FALCON_MCP_USER_AGENT_COMMENT>",
        "FALCON_MCP_STATELESS_HTTP": "<your FALCON_MCP_STATELESS_HTTP>",
        "FALCON_MCP_API_KEY": "<your FALCON_MCP_API_KEY>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

Python package (PyPI)

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<your FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<your FALCON_CLIENT_SECRET>",
        "FALCON_BASE_URL": "<your FALCON_BASE_URL>",
        "FALCON_MEMBER_CID": "<your FALCON_MEMBER_CID>",
        "FALCON_MCP_MODULES": "<your FALCON_MCP_MODULES>",
        "FALCON_MCP_TRANSPORT": "<your FALCON_MCP_TRANSPORT>",
        "FALCON_MCP_DEBUG": "<your FALCON_MCP_DEBUG>",
        "FALCON_MCP_HOST": "<your FALCON_MCP_HOST>",
        "FALCON_MCP_PORT": "<your FALCON_MCP_PORT>",
        "FALCON_MCP_USER_AGENT_COMMENT": "<your FALCON_MCP_USER_AGENT_COMMENT>",
        "FALCON_MCP_STATELESS_HTTP": "<your FALCON_MCP_STATELESS_HTTP>",
        "FALCON_MCP_API_KEY": "<your FALCON_MCP_API_KEY>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

Python package (PyPI)

{
  "servers": {
    "falcon-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<your FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<your FALCON_CLIENT_SECRET>",
        "FALCON_BASE_URL": "<your FALCON_BASE_URL>",
        "FALCON_MEMBER_CID": "<your FALCON_MEMBER_CID>",
        "FALCON_MCP_MODULES": "<your FALCON_MCP_MODULES>",
        "FALCON_MCP_TRANSPORT": "<your FALCON_MCP_TRANSPORT>",
        "FALCON_MCP_DEBUG": "<your FALCON_MCP_DEBUG>",
        "FALCON_MCP_HOST": "<your FALCON_MCP_HOST>",
        "FALCON_MCP_PORT": "<your FALCON_MCP_PORT>",
        "FALCON_MCP_USER_AGENT_COMMENT": "<your FALCON_MCP_USER_AGENT_COMMENT>",
        "FALCON_MCP_STATELESS_HTTP": "<your FALCON_MCP_STATELESS_HTTP>",
        "FALCON_MCP_API_KEY": "<your FALCON_MCP_API_KEY>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

Python package (PyPI)

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<your FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<your FALCON_CLIENT_SECRET>",
        "FALCON_BASE_URL": "<your FALCON_BASE_URL>",
        "FALCON_MEMBER_CID": "<your FALCON_MEMBER_CID>",
        "FALCON_MCP_MODULES": "<your FALCON_MCP_MODULES>",
        "FALCON_MCP_TRANSPORT": "<your FALCON_MCP_TRANSPORT>",
        "FALCON_MCP_DEBUG": "<your FALCON_MCP_DEBUG>",
        "FALCON_MCP_HOST": "<your FALCON_MCP_HOST>",
        "FALCON_MCP_PORT": "<your FALCON_MCP_PORT>",
        "FALCON_MCP_USER_AGENT_COMMENT": "<your FALCON_MCP_USER_AGENT_COMMENT>",
        "FALCON_MCP_STATELESS_HTTP": "<your FALCON_MCP_STATELESS_HTTP>",
        "FALCON_MCP_API_KEY": "<your FALCON_MCP_API_KEY>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

Python package (PyPI)

{
  "mcpServers": {
    "falcon-mcp": {
      "command": "uvx",
      "args": [
        "falcon-mcp"
      ],
      "env": {
        "FALCON_CLIENT_ID": "<your FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<your FALCON_CLIENT_SECRET>",
        "FALCON_BASE_URL": "<your FALCON_BASE_URL>",
        "FALCON_MEMBER_CID": "<your FALCON_MEMBER_CID>",
        "FALCON_MCP_MODULES": "<your FALCON_MCP_MODULES>",
        "FALCON_MCP_TRANSPORT": "<your FALCON_MCP_TRANSPORT>",
        "FALCON_MCP_DEBUG": "<your FALCON_MCP_DEBUG>",
        "FALCON_MCP_HOST": "<your FALCON_MCP_HOST>",
        "FALCON_MCP_PORT": "<your FALCON_MCP_PORT>",
        "FALCON_MCP_USER_AGENT_COMMENT": "<your FALCON_MCP_USER_AGENT_COMMENT>",
        "FALCON_MCP_STATELESS_HTTP": "<your FALCON_MCP_STATELESS_HTTP>",
        "FALCON_MCP_API_KEY": "<your FALCON_MCP_API_KEY>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.CrowdStrike%2Ffalcon-mcp.svg)](https://mcptoplist.com/server/io.github.CrowdStrike%2Ffalcon-mcp)

HTML

<a href="https://mcptoplist.com/server/io.github.CrowdStrike%2Ffalcon-mcp"><img src="https://mcptoplist.com/badge/io.github.CrowdStrike%2Ffalcon-mcp.svg" alt="MCP Toplist: Top 1% of 132,046" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

REGISTRIES

Listed on 4 registries

ORGANIZATION

crowdstrike

Organization

crowdstrike

Servers in org

Versions across org

VERSIONS

Available versions (11)

Version	Published
0.19.0	Sep 1, 2026
0.18.0	Aug 28, 2026
0.17.0	Aug 22, 2026
0.16.1	Aug 10, 2026
0.16.0	Aug 5, 2026
0.15.0	Jul 22, 2026
0.14.0	Jul 16, 2026
0.13.0	Jun 25, 2026
0.12.0	Jun 11, 2026
0.11.0	Jun 3, 2026
0.10.0	May 18, 2026

FAQ

Frequently asked questions

Who maintains CrowdStrike Falcon MCP Server?: CrowdStrike Falcon MCP Server is maintained by crowdstrike, which publishes 1 MCP server (11 total versions) tracked on MCP Toplist.
Is CrowdStrike Falcon MCP Server listed on the Official MCP Registry?: Yes — CrowdStrike Falcon MCP Server is listed on the Official MCP Registry, alongside Glama, PulseMCP and mcp.so.
How many versions does CrowdStrike Falcon MCP Server have?: MCP Toplist tracks 11 versions of CrowdStrike Falcon MCP Server, most recently published on Sep 1, 2026.
Where can I find the source code for CrowdStrike Falcon MCP Server?: The source code for CrowdStrike Falcon MCP Server is hosted at github.com/crowdstrike/falcon-mcp.

Used in projects

Do you run this server?

Add to a project

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers