CrowdStrike Falcon MCP server

What the model can do

CrowdStrike Falcon endpoint security: hosts and whether they are online or contained, alerts by status, severity and date, Spotlight vulnerabilities, cases and custom indicators of compromise; when you ask, can change alert status, comment, tag and assign alerts, contain or release hosts, hide or restore hosts, tag hosts, create and update cases and their tags, and add or delete custom IOCs.

Reads

• crowdstrike_hostsHosts (endpoints) running the Falcon sensor: device id, host name, platform and OS, sensor version, containment status, first and last seen, tags.
• crowdstrike_host_statusWhether hosts are online now, and when each was last seen, by device id (from crowdstrike_hosts or an alert's device_id).
• crowdstrike_alertsFalcon alerts (detections and other products' alerts), newest first by default: composite id, name, description, severity, status, product…
• crowdstrike_vulnerabilitiesSpotlight vulnerabilities on hosts: CVE, its severity, base score and ExPRT rating, CISA KEV flag, status, device id and dates.
• crowdstrike_casesFalcon cases, most recently updated first: id, name, description, status, severity, tags, number of linked alerts, dates and version.
• crowdstrike_indicatorsCustom indicators of compromise (hashes, domains, IP addresses): type, value, action (detect, prevent, allow…), severity, platforms…
• crowdstrike_ioc_optionsThe IOC types, severities, platforms and actions this Falcon CID accepts, for crowdstrike_create_indicator.

Acts, when you ask

These change something in CrowdStrike Falcon. The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• crowdstrike_update_alertsChanges Falcon alerts by composite id: sets their status (new, in_progress, reopened, closed), appends a comment other Falcon users see…
• crowdstrike_assign_alertsAssigns Falcon alerts to one Falcon console user, by their user UUID or user id (their sign-in email), or unassigns them.
• crowdstrike_contain_hostsNetwork-contains Falcon hosts by device id: each machine is cut off from every network location except the CrowdStrike cloud and the addresses in its…
• crowdstrike_lift_containmentLifts network containment from Falcon hosts by device id, returning their network access to normal…
• crowdstrike_hide_hostsHides Falcon hosts by device id.
• crowdstrike_unhide_hostsRestores hidden Falcon hosts by device id, so their detections are reported again.
• crowdstrike_tag_hostsAdds or removes Falcon grouping tags on hosts by device id.
• crowdstrike_create_caseCreates a Falcon case with a name, description, severity and tags, optionally assigned to a Falcon user by UUID (who then sees it in their queue).
• crowdstrike_update_caseChanges a Falcon case's name, description, severity or assignee (by Falcon user UUID), or removes its assignee.
• crowdstrike_add_case_tagsAdds tags to a Falcon case.
• crowdstrike_remove_case_tagsRemoves the named tags from a Falcon case.
• crowdstrike_create_indicatorAdds a custom indicator of compromise (a hash, domain or IP address) to Falcon.
• crowdstrike_delete_indicatorsPermanently deletes custom IOCs by id; any blocking or detection they caused stops.

Connect it

First connect CrowdStrike Falcon on Dashboard → Connections, then add Memtro to your client once. The CrowdStrike Falcon tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared CrowdStrike Falcon connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › Which critical Falcon alerts are still new this week?
• › Is the laptop LON-0423 online and contained?
• › Which hosts have a CISA KEV vulnerability open?
• › What open cases have more than one linked alert?
• › Contain host LON-0423 while we investigate.

Questions

Is this an official CrowdStrike Falcon MCP server?

No. It is Memtro's MCP server with Memtro's CrowdStrike Falcon connector behind it: the connector reads CrowdStrike Falcon through its API with the credentials you connect on Dashboard → Connections, and CrowdStrike Falcon publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in CrowdStrike Falcon?

Only when you ask, and only what it has been granted: change the status of alerts, comment on them, or add or remove an alert tag; assign alerts to a Falcon user, or unassign them; network-contain hosts; lift network containment from hosts; hide hosts (stops their detections being reported); restore hidden hosts; add or remove Falcon grouping tags on hosts; create a case; update a case's name, description, severity or assignee; add tags to a case; remove tags from a case; create a custom indicator of compromise (IOC); delete custom IOCs by id. Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server