Enabling Falcon MCP Server

  • MCP server feature requires Falcon Suite version 1.4.0 or above

The following section describes the steps required to enable and start the Falcon MCP server.

Enabling / Starting MCP Server

  1. Navigate to Audit → Scheduler Audit Logs

  2. Click on the Enable Schedule action item to start the MCP Sever.

  3. Once the schedule is enabled, the HTTP MCP server can be accessed at http(s)://<YOUR_HOT_NAME>/mcp

  4. To check the list of available tools check available tools section

Stopping MCP Server

  1. Navigate to Audit → Scheduler Audit Logs

  2. Click on the Disable Schedule action item to stop the MCP Sever.

See Also