falcon-mcp: Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting

by CrowdStrike · MCP Server · ★ 277

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install falcon-mcp

uv tool install falcon-mcp
pip install falcon-mcp

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 70/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

aicrowdstrikefalconmcpmcp-server

Quick Facts

Stars277
Forks97
LanguagePython
CategoryMCP Server
LicenseMIT
Quality Score70/100
Open Issues1
Last Updated2026-11-03
Created2025-06-10
Platformsmcp, python
Est. Tokens~21k

About falcon-mcp

falcon-mcp falcon-mcp is a Model Context Protocol (MCP) server that connects AI agents with the CrowdStrike Falcon platform, powering intelligent security analysis in your agentic workflows. It delivers programmatic access to essential security capabilities—including detections, incidents, and behaviors—establishing the foundation for advanced security operations and automation.

falcon-mcp alternative? Top 2 similar tools

Looking for a falcon-mcp alternative? If you're comparing falcon-mcp with other mcp server tools, these 2 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • LLM-Finetuning-Toolkit by georgian-io · ⭐ 870

    Toolkit for fine-tuning, ablating and unit-testing open-source LLMs.

  • llms_tool by stanleylsx · ⭐ 226

    一个基于HuggingFace开发的大语言模型训练、测试工具。支持各模型的webui、终端预测,低参数量及全参数模型训练(预训练、SFT、RM、PPO、DPO)和融合、量化。

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools