CrowdStrike MCP Server

CrowdStrike MCP is an MCP integration. Every CrowdStrike Falcon MSP operation, plus a Flight-Control-aware local store that answers.

Packages and local setup

The published mcpb package is https://github.com/Servosity/msp-skills/releases/download/crowdstrike-v0.1.5/crowdstrike-mcp.mcpb, version 0.1.5. Its declared MCP transport is stdio.

The package declares CROWDSTRIKE_BASE_URL: Base URL for the CrowdStrike Falcon API. Leave the prefilled default unless your account uses a different regional or self-hosted host.; CROWDSTRIKE_OAUTH_SCOPE (required): Set the CROWDSTRIKE_OAUTH_SCOPE credential for the CrowdStrike MCP server.; CROWDSTRIKE_TOKEN_URL: Token endpoint the client-credentials exchange posts to. Leave the prefilled default unless your tenant uses a different token endpoint.; FALCON_CLIENT_ID (required): Set the FALCON_CLIENT_ID credential for the CrowdStrike MCP server.; FALCON_CLIENT_SECRET (required): Set the FALCON_CLIENT_SECRET credential for the CrowdStrike MCP server.; CROWDSTRIKE_NO_CONFIG_WRITE: Set to 1 to keep credentials off disk. The token cache becomes a no-op, so the connector mints a fresh token each run instead of writing one to config.toml. Leave blank for the default cached behaviour..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 0.1.5 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related security & identity MCP servers for tools that cover the same kind of work.