Ng-siem Cql Query Execution For Security Investigations

CrowdStrike Falcon MCP server exposing Falcon security APIs (detections, hosts, intel, SIEM, cloud, identity, RTR) as tools for AI agents. Supports stdio/HTTP transports, module selection, read-only and dynamic modes; Python, MIT licensed, pre-1.0.

MCP | Python · mcp-server · crowdstrike