# Falcon MCP Server

**Canonical:** https://apis.io/apis/crowdstrike/falcon-mcp/  
**Provider:** CrowdStrike — https://apis.io/providers/crowdstrike/  
**Base URL:** https://api.crowdstrike.com  
**Documentation:** https://developer.crowdstrike.com/falcon-mcp/overview/

Falcon MCP Server is one of 2 APIs that [CrowdStrike](https://apis.io/providers/crowdstrike/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include MCP, Security Operations, and Cybersecurity. The published artifact set on APIs.io includes API documentation and a changelog.

CrowdStrike's first-party open-source MCP server. Self-hosted (uvx/pip/Docker/Bedrock/Cloud Run) and authenticated with the operator's own Falcon API client; 166 tools across 28 modules. A separate CrowdStrike-hosted Falcon MCP is documented but publishes no public endpoint.

## Machine-readable artifacts (5)

- **MCPServer** — https://raw.githubusercontent.com/api-evangelist/crowdstrike/refs/heads/main/mcp/crowdstrike-mcp.yml
- **ToolCrosswalk** — https://raw.githubusercontent.com/api-evangelist/crowdstrike/refs/heads/main/mcp/crowdstrike-tool-crosswalk.yml
- **Documentation** — https://developer.crowdstrike.com/falcon-mcp/overview/
- **SourceCode** — https://github.com/CrowdStrike/falcon-mcp
- **ChangeLog** — https://developer.crowdstrike.com/falcon-mcp/changelog/

## Other CrowdStrike APIs (1)

- [CrowdStrike API](https://apis.io/apis/crowdstrike/crowdstrike-api/)

## Tags

MCP, Security Operations, Cybersecurity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/crowdstrike/falcon-mcp/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/crowdstrike/.