Same category · Developer tools
Socket Security MCP
Inspect dependency risk and package metadata using Socket’s hosted or local MCP server.
MCPby CrowdStrike · CrowdStrike/falcon-mcp
Investigate Falcon detections, hosts, threat intelligence, and other security data through CrowdStrike’s MCP server.
{
"mcpServers": {
"falcon-mcp": {
"command": "uvx",
"args": [
"--env-file",
"/path/to/.env",
"falcon-mcp",
"--modules",
"detections,hosts,intel"
]
}
}
}Sources: Author README · Checked 2026-10-18.
Replace the environment-file path. The example selects detections, hosts, and intel; review tool permissions before connecting a production tenant.
Sources: Author README · Checked 2026-10-18.
| Capability | What it does |
|---|---|
| Security investigation | Query detections, host information, and threat intelligence using Falcon modules. |
| Tool controls | Limit exposed modules and tools, or select the documented read-only mode. |
Sources: Author README · Checked 2026-10-18.
Suggested prompts for your own client. These are examples, not recorded tool executions.
Review recent detections on a test host and correlate them with threat intelligence, citing the records used.Summarize the hosts affected by a detection pattern and draft an investigation checklist without running response actions.Publisher-owned documentation and public GitHub metadata reviewed on 2026-10-18. Author installation examples are retained as documented. Prompts are illustrative; no third-party package or MCP was installed or executed, and no account was connected.
Recent activity refers to the repository push timestamp. It does not establish the product’s original release date. Stars are a dated snapshot of the entire repository.