Falco

Falco Version API

Version information

GitHub OpenAPI

Operations 1

GET /version Falco Version information #

Documentation

📖
Documentation
https://falco.org/docs/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/falco/refs/heads/main/openapi/falco-version-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/falcosecurity/falco

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/falco/refs/heads/main/json-schema/falco-alert-output.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/falco/refs/heads/main/json-schema/falco-rules.json

Other Resources

🔗
Reference
https://falco.org/docs/reference/

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/falco-version-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

falco-version-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Falco HTTP Health Version API
  description: The Falco HTTP API provides health check, version, and rules management endpoints for the Falco cloud-native runtime security engine. Falco uses eBPF to detect unexpected application behavior and alerts on threats at runtime. This API is served by the Falco web server when enabled via configuration.
  version: 0.39.0
  contact:
    name: Falco Community
    url: https://falco.org
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: http://localhost:8765
  description: Default Falco web server
tags:
- name: Version
  description: Version information
paths:
  /version:
    get:
      operationId: getVersion
      summary: Falco Version information
      description: Returns the version information for the running Falco instance, including the engine version and the version of the loaded rules files.
      tags:
      - Version
      responses:
        '200':
          description: Version information returned successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VersionInfo'
components:
  schemas:
    VersionInfo:
      type: object
      properties:
        version:
          type: string
          description: Falco version string
          example: 0.39.0
        engine_version:
          type: string
          description: Falco engine version
          example: '33'
        engine_fields_checksum:
          type: string
          description: Checksum of the engine fields
          example: abc123def456
        rules_file_version:
          type: string
          description: Version of the loaded rules file
          example: falco_rules-3.3.0
      required:
      - version
      - engine_version