Best Falco MCP Servers

Falco is an open-source cloud-native runtime security tool designed to detect and alert on anomalous behavior and potential security threats in containers, Kubernetes, and cloud environments.

View all Falco MCP Servers

Why this server?
Provides tools for querying and retrieving Falco security events from Falcosidekick UI, including normalized event data from syscall, Kubernetes audit, and AWS CloudTrail sources, with support for temporal filtering and full event inspection by UUID.
Falcosidekick UI MCP Server
Monitoring Security Observability
maratsal
-
security
F
license
-
quality
Enables querying and analyzing Falco security events from Falcosidekick UI through MCP tools. Supports filtering events by time windows and retrieving full event details for security monitoring and incident investigation.
Last updated 2 months ago

Falcosidekick UI MCP Server