MCP.Market

CrowdStrike Falcon MCP Server

by CrowdStrike·io.github.CrowdStrike/falcon-mcp·v0.20.2·274 stars
No reviews yet

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

A85/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A85/100

not scanned yet

Adoption
Established

274 stars14k downloads/wk

Reviews

Write one

Nobody has reviewed CrowdStrike Falcon MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

CrowdStrike Falcon MCP Server tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How CrowdStrike Falcon MCP Server compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 70% of 915 Security servers
GitHub stars
274
more than 97% of 587 Security servers
Downloads a week
14,308
more than 95% of 249 Security servers with a package

Release history: 3 versions in the registry since 2026-09-01, latest 2026-11-03, typically one every 51 days.

Install CrowdStrike Falcon MCP Server in Claude Code, Cursor or VS Code

claude mcp add falcon-mcp -- uvx falcon-mcp
Add to Cursor

What the publisher says

From the CrowdStrike Falcon MCP Server repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.CrowdStrike/falcon-mcp -->

falcon-mcp

falcon-mcp is a Model Context Protocol (MCP) server that connects AI agents with the CrowdStrike Falcon platform, powering intelligent security analysis in your agentic workflows. It delivers programmatic access to essential security capabilities—including detections, threat intelligence, and host management—establishing the foundation for advanced security operations and automation.

[!IMPORTANT]

Pre-1.0 release: falcon-mcp is under active development ahead of 1.0. Tool names, parameters, and response shapes can still change between minor releases, so pin a version and check the changelog before upgrading. The project is actively maintained by CrowdStrike and supported through GitHub Issues; CrowdStrike customers can also raise questions through their usual Technical Support channels. See SUPPORT.md for details.

Documentation

Full docs are available at developer.crowdstrike.com/falcon-mcp.

Modules

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

CrowdStrike Falcon MCP Server: common questions

Is CrowdStrike Falcon MCP Server safe?
Yes, by our scan: it is graded A (85/100). Read the CrowdStrike Falcon MCP Server safety report
How do I install CrowdStrike Falcon MCP Server?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does CrowdStrike Falcon MCP Server need an API key?
Yes. The registry entry asks for FALCON_CLIENT_ID, FALCON_CLIENT_SECRET, FALCON_MCP_API_KEY.
Is CrowdStrike Falcon MCP Server maintained?
The last commit was 8 days ago (2026-10-28). The latest release is v0.20.2.
What can I use instead of CrowdStrike Falcon MCP Server?
Servers from other publishers that do the same job: Wireshark MCP server, Virustotal MCP server and Virustotal MCP server. Compare all CrowdStrike Falcon MCP Server alternatives.
How does CrowdStrike Falcon MCP Server compare with other Security MCP servers?
safety score 85/100 (higher than 70% of 915 Security servers); github stars 274 (more than 97% of 587 Security servers); downloads a week 14,308 (more than 95% of 249 Security servers with a package). Full comparison.

Alternatives to CrowdStrike Falcon MCP Server

Same job from other publishers: the closest match first, then the best rated.

All CrowdStrike Falcon MCP Server alternatives →
  • Wireshark
    Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
    A
  • Virustotal
    MCP server for querying VirusTotal API with comprehensive security analysis tools.
    B
  • Virustotal
    MCP server for querying VirusTotal API with comprehensive security analysis tools.
    B
  • Reversecore MCP
    Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
    B
  • Raziel
    MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
    A
CrowdStrike Falcon MCP Server vs WiresharkCrowdStrike Falcon MCP Server vs VirustotalCrowdStrike Falcon MCP Server vs Virustotal