"Falcon" matching MCP servers:

Connects AI agents with the CrowdStrike Falcon platform to programmatically access detections, threat intelligence, host management, and other security capabilities for intelligent security analysis and automation.

MCP server bridging AI assistants with CrowdStrike Falcon for SOC operations, enabling natural-language triage, investigation, and response across detections, endpoints, threat intelligence, and more.

Model Context Protocol server that connects AI agents with CrowdStrike Falcon platform for intelligent security analysis and automation.

An MCP server that enables interaction with the CrowdStrike Falcon API for managing hosts, detections, IOCs, and security policies. It supports both STDIO and HTTP/REST transport modes for seamless integration with AI clients like Claude and Cursor.

A modular, multi-transport Model Context Protocol server that connects AI assistants to the CrowdStrike Falcon platform. Query NG-SIEM logs, triage alerts, inspect endpoints, manage detection rules, and audit cloud security posture — all through natural language.

Query CrowdStrike Falcon LogScale logs from AI assistants via the Model Context Protocol.

Enables querying and analyzing Falco security events from Falcosidekick UI through MCP tools. Supports filtering events by time windows and retrieving full event details for security monitoring and incident investigation.