Back to Browse

Falcon MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Community extension of CrowdStrike falcon-mcp with near-complete Falcon API coverage

About

Community extension of CrowdStrike falcon-mcp with near-complete Falcon API coverage

Security Report

4.2
Use Caution4.2High Risk

This is a community-maintained MCP server extension for CrowdStrike Falcon that properly uses environment variables for credentials and includes reasonable security documentation. However, there are some code quality and permission-related concerns: the server exposes 1,296 tools (many auto-generated) with minimal individual parameter validation, relies on the underlying falconpy library for auth, and includes destructive operations that require explicit opt-in but lack granular input validation. Permissions align with the stated purpose (CrowdStrike API access), but the large attack surface warrants careful scoping by administrators. Supply chain analysis found 7 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

RequiredOptional

Environment variable: FALCON_CLIENT_ID

RequiredOptional

Environment variable: FALCON_CLIENT_SECRET

RequiredOptional

Environment variable: FALCON_BASE_URL

OptionalOptional

Environment variable: FALCON_MEMBER_CID

OptionalOptional

Environment variable: FALCON_MCP_TRANSPORT

OptionalOptional

Environment variable: FALCON_MCP_HOST

OptionalOptional

Environment variable: FALCON_MCP_PORT

OptionalOptional

Environment variable: FALCON_MCP_MODULES

OptionalOptional

Environment variable: FALCON_MCP_ENABLE_GENERATED

OptionalOptional

Environment variable: FALCON_MCP_READONLY

OptionalOptional

Environment variable: FALCON_MCP_ALLOW_DESTRUCTIVE

OptionalOptional

Environment variable: FALCON_MCP_API_KEY

OptionalOptional

Environment variable: FALCON_MCP_STATELESS_HTTP

OptionalOptional

Environment variable: FALCON_MCP_DEBUG

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-rijul170-falcon-mcp": {
      "env": {
        "FALCON_BASE_URL": "your-falcon-base-url-here",
        "FALCON_MCP_HOST": "your-falcon-mcp-host-here",
        "FALCON_MCP_PORT": "your-falcon-mcp-port-here",
        "FALCON_CLIENT_ID": "your-falcon-client-id-here",
        "FALCON_MCP_DEBUG": "your-falcon-mcp-debug-here",
        "FALCON_MEMBER_CID": "your-falcon-member-cid-here",
        "FALCON_MCP_API_KEY": "your-falcon-mcp-api-key-here",
        "FALCON_MCP_MODULES": "your-falcon-mcp-modules-here",
        "FALCON_MCP_READONLY": "your-falcon-mcp-readonly-here",
        "FALCON_CLIENT_SECRET": "your-falcon-client-secret-here",
        "FALCON_MCP_TRANSPORT": "your-falcon-mcp-transport-here",
        "FALCON_MCP_STATELESS_HTTP": "your-falcon-mcp-stateless-http-here",
        "FALCON_MCP_ENABLE_GENERATED": "your-falcon-mcp-enable-generated-here",
        "FALCON_MCP_ALLOW_DESTRUCTIVE": "your-falcon-mcp-allow-destructive-here"
      },
      "args": [
        "falcon-mcp-extended"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

Falcon MCP Server - Community extension of CrowdStrike falcon-mcp with | MCP Marketplace