PluginBench
MCP Server

CrowdStrike MCP MCP Server

io.github.Servosity/crowdstrike-mcp

RepositoryRegistry

What is the CrowdStrike MCP MCP server?

Every CrowdStrike Falcon MSP operation, plus a Flight-Control-aware local store that answers

How to install CrowdStrike MCP

Copy-paste configuration for popular MCP clients.

transport: stdio
Config generated by PluginBench — verify against the source before use.
Environment / auth
  • CROWDSTRIKE_OAUTH_SCOPE
    required
    secret

    Set the CROWDSTRIKE_OAUTH_SCOPE credential for the CrowdStrike MCP server.

  • FALCON_CLIENT_ID
    required
    secret

    Set the FALCON_CLIENT_ID credential for the CrowdStrike MCP server.

  • FALCON_CLIENT_SECRET
    required
    secret

    Set the FALCON_CLIENT_SECRET credential for the CrowdStrike MCP server.

Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "crowdstrike-mcp": {
      "command": "https://github.com/Servosity/msp-skills/releases/download/crowdstrike-v0.1.0/crowdstrike-mcp.mcpb",
      "args": [],
      "env": {
        "CROWDSTRIKE_OAUTH_SCOPE": "<YOUR_CROWDSTRIKE_OAUTH_SCOPE>",
        "FALCON_CLIENT_ID": "<YOUR_FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<YOUR_FALCON_CLIENT_SECRET>"
      }
    }
  }
}
Cursor
~/.cursor/mcp.json
{
  "mcpServers": {
    "crowdstrike-mcp": {
      "command": "https://github.com/Servosity/msp-skills/releases/download/crowdstrike-v0.1.0/crowdstrike-mcp.mcpb",
      "args": [],
      "env": {
        "CROWDSTRIKE_OAUTH_SCOPE": "<YOUR_CROWDSTRIKE_OAUTH_SCOPE>",
        "FALCON_CLIENT_ID": "<YOUR_FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<YOUR_FALCON_CLIENT_SECRET>"
      }
    }
  }
}
Windsurf
~/.codeium/windsurf/mcp_config.json
{
  "mcpServers": {
    "crowdstrike-mcp": {
      "command": "https://github.com/Servosity/msp-skills/releases/download/crowdstrike-v0.1.0/crowdstrike-mcp.mcpb",
      "args": [],
      "env": {
        "CROWDSTRIKE_OAUTH_SCOPE": "<YOUR_CROWDSTRIKE_OAUTH_SCOPE>",
        "FALCON_CLIENT_ID": "<YOUR_FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<YOUR_FALCON_CLIENT_SECRET>"
      }
    }
  }
}
VS Code
.vscode/mcp.json
{
  "servers": {
    "crowdstrike-mcp": {
      "type": "stdio",
      "command": "https://github.com/Servosity/msp-skills/releases/download/crowdstrike-v0.1.0/crowdstrike-mcp.mcpb",
      "args": [],
      "env": {
        "CROWDSTRIKE_OAUTH_SCOPE": "<YOUR_CROWDSTRIKE_OAUTH_SCOPE>",
        "FALCON_CLIENT_ID": "<YOUR_FALCON_CLIENT_ID>",
        "FALCON_CLIENT_SECRET": "<YOUR_FALCON_CLIENT_SECRET>"
      }
    }
  }
}
Claude Code
claude mcp add crowdstrike-mcp --env CROWDSTRIKE_OAUTH_SCOPE=<YOUR_CROWDSTRIKE_OAUTH_SCOPE> --env FALCON_CLIENT_ID=<YOUR_FALCON_CLIENT_ID> --env FALCON_CLIENT_SECRET=<YOUR_FALCON_CLIENT_SECRET> -- https://github.com/Servosity/msp-skills/releases/download/crowdstrike-v0.1.0/crowdstrike-mcp.mcpb

Related MCP servers

Abnormal Security MCP

Abnormal Security email threats, cases, and reporting in your terminal and your AI agents.

View repository →

Acronis MCP

The first real CLI for the Acronis Cyber Protect Cloud platform - every tenant, agent, and usage

View repository →

Action1 MCP

Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations.

View repository →

Afi MCP

The first CLI for Afi SaaS backup - full public-API coverage plus the fleet-wide coverage

View repository →

AppDirect MCP

AppDirect marketplace operations with an offline mirror and cross-company billing reconciliation.

View repository →

Atera MCP

Every Atera RMM + PSA endpoint, plus a local SQLite mirror that answers fleet-health, SLA, and

View repository →