About
Overview
The Falco MCP Server enables AI agents to interact with Falco's runtime security tool. It provides tools for viewing alerts, managing rules, and monitoring container and host activity.
Capabilities
Tools & Capabilities
⚡list_alerts
List recent security alerts
⚡list_rules
List detection rules
⚡get_alert
Get alert details
Setup
Installation
bash
Install
npx -y @falcosecurity/mcp-server-falcoExamples
Example Usage
javascript
Usage
{
"mcpServers": {
"falco": {
"command": "npx",
"args": ["-y", "@falcosecurity/mcp-server-falco"]
}
}
}Quick Info
Authorfalcosecurity
LanguageTypeScript
StatusStable
Stars★ 50
Last UpdatedFeb 12, 2026