MCP Server Tools

List of tools available in the Falcon MCP server along with the permissions required to run each tool -

Tools available in both STDIO and HTTP MCP Servers:

Tool Name Available Version Description Permission

getFalconApplicationIssues

1.0.0

Returns the number of issues for a given application

View Report, View Organizations

getFalconIssuesSummary

1.0.0

Returns the total number of issues across all the organizations

View Report, View Organizations

getFalconOrganizations

1.0.0

Get all the organizations in Falcon Suite

View Organization

getFalconRuleSeverities

1.0.0

Get all Falcon rule severities in Falcon Suite

View Quality Rules

getFalconRuleCategories

1.0.0

Get the rule categories in Falcon Suite

View Quality Rules

getFalconIssuesDetails

1.0.0

Returns all the issues by line number and file across all organizations

View Report

getFalconRules

1.0.0

Returns the Falcon rules matching the search criteria

View Quality Rules

Tools available only in STDIO Servers:

Tool Name Available Version Description Permission

falcon-code-scan

1.0.0

Execute Falcon Scan Code Analysis for the project

Add role Falcon Scan CLI

Tools available as part of automation tasks:

  1. Navigate to Falcon AIAutomation Tasks

  2. Click on any of the listed Automation Tasks and toggle Include in MCP Server

  3. If selected value is Yes, the automation task will be available as part of MCP Server tool list.