CrowdStrike Falcon MCP Server

# ============================================================================= # CrowdStrike Falcon API Credentials # ============================================================================= # Required: Get these from your CrowdStrike console (Support > API Clients and Keys) FALCON_CLIENT_ID=your-client-id FALCON_CLIENT_SECRET=your-client-secret # ============================================================================= # CrowdStrike Falcon API Base URL # ============================================================================= # Required: Choose the correct region for your CrowdStrike instance # US-1 (Default): https://api.crowdstrike.com # US-2: https://api.us-2.crowdstrike.com # EU-1: https://api.eu-1.crowdstrike.com # US-GOV: https://api.laggar.gcw.crowdstrike.com FALCON_BASE_URL=https://api.us-2.crowdstrike.com # ============================================================================= # Optional: Server Configuration # ============================================================================= # Modules to enable (comma-separated list) # Options: detections,incidents,intel,hosts,spotlight,cloud,idp,sensorusage # Default: all modules enabled if not specified #FALCON_MCP_MODULES=detections,incidents,intel,hosts,spotlight,cloud,idp,sensorusage,serverless,discover # Transport method to use # Options: stdio, sse, streamable-http # Default: stdio #FALCON_MCP_TRANSPORT=stdio # Enable debug logging # Options: true, false # Default: false #FALCON_MCP_DEBUG=false # Host for HTTP transports (sse, streamable-http) # Default: 127.0.0.1 #FALCON_MCP_HOST=127.0.0.1 # Port for HTTP transports (sse, streamable-http) # Default: 8000 #FALCON_MCP_PORT=8000 # User agent comment to include in API requests # This will be added to the User-Agent header comment section # Example: CustomApp/1.0 #FALCON_MCP_USER_AGENT_COMMENT=