Connects AI agents with CrowdStrike Falcon for security analysis and automation.
To add CrowdStrike Falcon MCP Server to Claude, run the install command below or copy the ready-made config for Claude Code, Claude Desktop, Cursor and VS Code further down. Restart your client after adding it and its tools show up in your next conversation. It needs 12 environment variables, listed below.
Install
uvx falcon-mcp@0.20.0Environment variables
FALCON_CLIENT_IDSet in your MCP configFALCON_CLIENT_SECRETSet in your MCP configFALCON_BASE_URLSet in your MCP configFALCON_MEMBER_CIDSet in your MCP configFALCON_MCP_MODULESSet in your MCP configFALCON_MCP_TRANSPORTSet in your MCP configFALCON_MCP_DEBUGSet in your MCP configFALCON_MCP_HOSTSet in your MCP configFALCON_MCP_PORTSet in your MCP configFALCON_MCP_USER_AGENT_COMMENTSet in your MCP configFALCON_MCP_STATELESS_HTTPSet in your MCP configFALCON_MCP_API_KEYSet in your MCP configInstall with your client
claude mcp add crowdstrike-falcon --env FALCON_CLIENT_ID=<YOUR_FALCON_CLIENT_ID> --env FALCON_CLIENT_SECRET=<YOUR_FALCON_CLIENT_SECRET> --env FALCON_BASE_URL=<YOUR_FALCON_BASE_URL> --env FALCON_MEMBER_CID=<YOUR_FALCON_MEMBER_CID> --env FALCON_MCP_MODULES=<YOUR_FALCON_MCP_MODULES> --env FALCON_MCP_TRANSPORT=<YOUR_FALCON_MCP_TRANSPORT> --env FALCON_MCP_DEBUG=<YOUR_FALCON_MCP_DEBUG> --env FALCON_MCP_HOST=<YOUR_FALCON_MCP_HOST> --env FALCON_MCP_PORT=<YOUR_FALCON_MCP_PORT> --env FALCON_MCP_USER_AGENT_COMMENT=<YOUR_FALCON_MCP_USER_AGENT_COMMENT> --env FALCON_MCP_STATELESS_HTTP=<YOUR_FALCON_MCP_STATELESS_HTTP> --env FALCON_MCP_API_KEY=<YOUR_FALCON_MCP_API_KEY> -- uvx falcon-mcp@0.20.0
Run this in a terminal to add the server to Claude Code.
What this does
CrowdStrike Falcon MCP Server exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.
Requirements
This server needs the following environment variables to be set before it can run:
FALCON_CLIENT_ID FALCON_CLIENT_SECRET FALCON_BASE_URL FALCON_MEMBER_CID FALCON_MCP_MODULES FALCON_MCP_TRANSPORT FALCON_MCP_DEBUG FALCON_MCP_HOST FALCON_MCP_PORT FALCON_MCP_USER_AGENT_COMMENT FALCON_MCP_STATELESS_HTTP FALCON_MCP_API_KEY
Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).
Frequently asked questions
How do I install CrowdStrike Falcon MCP Server?
Run the Claude Code command in the install section to add CrowdStrike Falcon MCP Server to Claude Code, or copy the ready-made config for your client from the install section on this page. Restart your client afterwards and the tools appear in your next conversation.
Which clients work with CrowdStrike Falcon MCP Server?
This page carries setup and config for Claude Code, Claude Desktop, Cursor and VS Code. Any other MCP client that accepts a standard server config can connect to CrowdStrike Falcon MCP Server as well.
Does CrowdStrike Falcon MCP Server need an API key?
Yes. Before it can run, set these environment variables: FALCON_CLIENT_ID, FALCON_CLIENT_SECRET, FALCON_BASE_URL, FALCON_MEMBER_CID, FALCON_MCP_MODULES, FALCON_MCP_TRANSPORT, FALCON_MCP_DEBUG, FALCON_MCP_HOST, FALCON_MCP_PORT, FALCON_MCP_USER_AGENT_COMMENT, FALCON_MCP_STATELESS_HTTP, FALCON_MCP_API_KEY. They go in the env block of your MCP config.
Imported from the Official MCP Registry. The details above come from the registry entry; the maker can claim this listing to correct them, add docs, and see its traffic.
Is this your MCP server?
Claim this listing to see its traffic, fix details yourself, and skip the review queue on future updates.
Add this badge to your README
Show visitors this server is listed in the ClaudeRules directory. The badge links straight to this listing.
[](https://clauderules.net/mcp/io-github-crowdstrike-falcon-mcp)<a href="https://clauderules.net/mcp/io-github-crowdstrike-falcon-mcp" target="_blank" rel="noopener noreferrer"><img src="https://clauderules.net/api/badge/io-github-crowdstrike-falcon-mcp" alt="Listed on clauderules.net" /></a>More AI MCP servers
GitHub
Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
Serena MCP: the IDE for your agent
A powerful toolkit for coding, providing semantic retrieval and editing capabilities.
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database.
Figma-Context-MCP
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.