CrowdStrike Falcon
CrowdStrike Falcon · Developer tools
Endpoint security: hosts, detections, incidents and threat intel
The client pastes their client ID from CrowdStrike Falcon's settings. We store it encrypted.
Tested against CrowdStrike Falcon's live API.
Building with CrowdStrike Falcon? The docs have setup steps and code for every tool.
Open the CrowdStrike Falcon docsTools
Your agent calls any endpoint of CrowdStrike Falcon's API with the request tool, with the client's access attached.
Base URL for request
https://api.crowdstrike.com
request
HTTPS ANY /v1/clients/{clientId}/crowdstrike/{path}
Any endpoint of CrowdStrike Falcon's own API, with the client's access attached.
- servicestringrequired
- This service: crowdstrike
- methodstringrequired
- GET, POST, PUT, PATCH or DELETE
- pathstringrequired
- The path under https://api.crowdstrike.com
- queryobjectoptional
- Query parameters
- bodyobjectoptional
- A JSON body
Over MCP every tool also takes client_id, from list_clients. Over HTTPS send it as clientId to https://api.operate.as/v1.
What the client approves
- Use the CrowdStrike Falcon key you paste, with only the access you gave that key
Get started
Send your next client one link
Add a client, select the services, copy the link. You'll get an email the moment their access is ready. Start free, no card required. Paid plans are one flat monthly price, and a busy month never takes your agents offline.