Falco MCP Integrations

Falco is an open-source cloud-native runtime security tool designed to detect and alert on anomalous behavior and potential security threats in containers, Kubernetes, and cloud environments.

View all MCP Integrations for Falco

Why this server?
Provides tools for querying and retrieving Falco security events from Falcosidekick UI, including normalized event data from syscall, Kubernetes audit, and AWS CloudTrail sources, with support for temporal filtering and full event inspection by UUID.
Falcosidekick UI MCP Server
Monitoring Security Observability
maratsal
-
security
F
license
-
quality
Enables querying and analyzing Falco security events from Falcosidekick UI through MCP tools. Supports filtering events by time windows and retrieving full event details for security monitoring and incident investigation.
Last updated a month ago

Falcosidekick UI MCP Server