About Falcon Digest
Falcon Digest is an MCP server published by CrowdStrike in the Security category: a sample code to generate local summarize Falcon dashboard using AI prompting built on FalconPy (CrowdStrike's official Python SDK) and the Model Context Protocol (MCP). Includes an MCP server, an 11-tab Streamlit dashboard ("Falcon Digest"), and a CLI client for querying Falcon security data using natural language.
The repository has 3 stars and 0 forks, with the last commit 9 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/CrowdStrike/falcon-digestThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (14)
get_cloud_securityCSPM risks by severity, provider, service
Parameters not published.
get_exposure_managementExternal attack surface assets
Parameters not published.
get_host_detailsGet device info by hostname
Parameters not published.
get_identity_protectionRisky entities, risk scores, AD account data
Parameters not published.
get_ngsiem_ingestionLogScale data ingestion volume and top sources
Parameters not published.
get_security_postureExecutive security overview with risk score
Parameters not published.
list_available_productsList Falcon product types with examples
Parameters not published.
search_alertsSearch alerts by product, severity, time range
Parameters not published.
search_casesQuery cases by status, severity, time
Parameters not published.
search_detectionsQuery all detections (EDR, 3P, IDP, NGSIEM, etc.)
Parameters not published.
Show all 14 tools
search_hostsSearch/count hosts by platform, status, recency
Parameters not published.
search_threatgraphIOC lookups and edge type listing
Parameters not published.
search_vulnerabilitiesQuery Spotlight vulnerabilities
Parameters not published.
test_fql_filterValidate FQL filter syntax
Parameters not published.
Ask AI
Ask AI about Falcon Digest
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.