https://github.com/crowdstrike/falcon-mcp - v0.3.0

0.3.0 (2025-09-08)

Features

• module/discover: Add unmanaged assets search tool to Discover module (#132) (1c7a798)
• modules/discover: add new discover module (#131) (2862361)
• modules/idp: Add geolocation info to entities and timeline in i… (#124) (31bb268)
• modules/idp: Add geolocation info to entities and timeline in idp module (#121) (31bb268)
• modules/serverless: add serverless module (#127) (0d7b7b3)

Bug Fixes

• fix incorrect module registration assumptions (#153) (bd3aa95)
• modules/identity: add missing scope for Identity Protection module (#148) (791a262)

- Python
Published by github-actions[bot] 11 months ago

https://github.com/crowdstrike/falcon-mcp - v0.2.0

0.2.0 (2025-08-07)

Features

• add origins to intel fql guide (#89) (c9a147e)
• disable telemetry (#102) (feb4507)
• modules/sensorusage: add new sensor usage module (#101) (ad97eb8)
• resources/spotlight: FQL filter as tuples (#91) (d9664a6)
• server: add distinct tools for active vs available modules (#103) (f5f941a)

Bug Fixes

• resources/detections: added severity_name over severity level and cleaned up example filters (#93) (5f4b775)

Refactoring

• remove all return statements from tool docstrings (#117) (80250bb)
• remove mention to Host from FQL guide (cf82392)
• resources/cloud: remove mention to Host from FQL guide (#76) (81ec4de)
• resources/cloud: use new tuple methodology to create filters (#95) (fd5cce7)
• resources/detections: update guide to be more accurate (#83) (4ff2144)
• resources/detections: use new tuple method for fql detections table (#97) (f328b79)
• resources/hosts: tested and updated fql filters and operator support for hosts module (#63) (e0b971c)
• resources/hosts: use new tuple methodology to create filters (#96) (da38d69)
• resources/incidents: use new tuple methodology to create filters (#98) (a9ba2f7)
• resources/intel: use new tuple methodology to create filters (#99) (cf0c19e)
• standardize parameter consistency across all modules (#106) (3c9c299)

- Python
Published by github-actions[bot] 12 months ago

https://github.com/crowdstrike/falcon-mcp - v0.1.0

What's Changed

• initial structure commit by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/2
• chore: rename auth.py to client.py to better reflect purpose by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/3
• feat: initial implementation for the falcon-mcp server by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/4
• feat: add E2E testing by @rom10 in https://github.com/CrowdStrike/falcon-mcp/pull/16
• chore: fix e2e testing env var in Github action by @rom10 in https://github.com/CrowdStrike/falcon-mcp/pull/17
• chore: refactor api scopes outside of errors by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/18
• feat: add Docker support by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/19
• feat: average CrowdScore by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/20
• fix: conversational incidents by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/21
• feat: add intel module by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/22
• feat: add streamable-http transport with Docker support and testing by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/24
• Fix help menu modules display issue by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/26
• Migrate from detections API to alerts API by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/27
• fix: discover modules in examples by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/31
• doc: correctly document running CLI and examples by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/34
• feat: implement lazy module discovery by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/37
• Rom.fix e2e test multi module by @rom10 in https://github.com/CrowdStrike/falcon-mcp/pull/35
• fix: freshen up e2e tests by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/40
• feat: flexible tool input parsing by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/41
• feat: add hosts module by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/42
• feat: add resources infrastructure by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/39
• feat: add filter guide for all tools which have filter param by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/46
• fix: lock version for mcp-use to 1.3.1 by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/47
• docs: update descriptions for better clarity by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/49
• feat: refactor to use falcon_mcp name and absolute imports by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/52
• fix: ensures proper lists are passed to module arg + ENV VAR support for args by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/54
• feat: add spotlight module by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/58
• docs: major refinements to README by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/55
• feat: convert fql guides to resources by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/62
• feat: cloud module by @protiumx in https://github.com/CrowdStrike/falcon-mcp/pull/56
• docs: update readme by @luckb0x in https://github.com/CrowdStrike/falcon-mcp/pull/64
• Idp usecases by @maayanselacr in https://github.com/CrowdStrike/falcon-mcp/pull/57
• fix: make api scope names the UI name to prevent confusion by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/67
• docs: provide better clarity around using .env by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/71
• fix: improve error handling and fix lint issue by @maayanselacr in https://github.com/CrowdStrike/falcon-mcp/pull/69
• feat: add user agent by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/68
• fix: count number of tools correctly by @cristianmessel-cs in https://github.com/CrowdStrike/falcon-mcp/pull/72
• feat: idp support domain lookup and input sanitization by @maayanselacr in https://github.com/CrowdStrike/falcon-mcp/pull/73
• chore(main): release 0.1.0 by @carlosmmatos in https://github.com/CrowdStrike/falcon-mcp/pull/74

New Contributors

• @protiumx made their first contribution in https://github.com/CrowdStrike/falcon-mcp/pull/56
• @luckb0x made their first contribution in https://github.com/CrowdStrike/falcon-mcp/pull/64
• @maayanselacr made their first contribution in https://github.com/CrowdStrike/falcon-mcp/pull/57

Full Changelog: https://github.com/CrowdStrike/falcon-mcp/commits/v0.1.0

- Python
Published by carlosmmatos about 1 year ago