{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-16T13:36:43.315Z", "record_id": "VXI-EXT-TOOL-TRUST-FALCON-01-v1", "record_kind": "external_reference", "title": "Falcon MCP: Tool filtering and HTTP authentication", "system": "CrowdStrike Falcon MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does selecting Falcon MCP modules prove the connection is read-only and authenticated?", "near_questions": [ "Is Falcon MCP read-only by default?", "Does an explicit tool list narrow enabled modules?", "Can tool additions cross module boundaries?", "Does the read-only filter override additions?", "Are excluded tools callable in dynamic mode?", "Which Falcon customer ID is selected?", "Which API scopes back the connector?", "Is HTTP caller authentication configured?", "Does a remote bind refuse unauthenticated startup?", "Can a three-tool dynamic interface still expose many actions?", "What tenant information reaches the agent?", "Can I preserve the reviewed Falcon access basis?" ], "supported_claims": [ { "claim": "Modules select a tool surface, while the read-only filter removes mutations and explicit tool additions can extend module selection. HTTP transport has no authentication by default and normally binds to loopback. A network-accessible deployment needs its separate authentication reviewed; Falcon API credentials alone do not authenticate incoming MCP callers.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "Modules select a tool surface, while the read-only filter removes mutations and explicit tool additions can extend module selection. HTTP transport has no authentication by default and normally binds to loopback. A network-accessible deployment needs its separate authentication reviewed; Falcon API credentials alone do not authenticate incoming MCP callers.", "related_record_ids": [], "source_review": { "source_type": "official_external_documentation", "source_title": "CrowdStrike Falcon MCP configuration", "source_url": "https://developer.crowdstrike.com/falcon-mcp/getting-started/configuration/", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-TOOL-TRUST-FALCON-01-v1", "candidate_record_sha256": "470d37b69717cd295d6e4b001c325deedbc91ef61d14eb6b0af72029d1360f11", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Modules select a tool surface, while the read-only filter removes mutations and explicit tool additions can extend module selection. HTTP transport has no authentication by default and normally binds to loopback. A network-accessible deployment needs its separate authentication reviewed; Falcon API credentials alone do not authenticate incoming MCP callers.", "required_buyer_context": "Server revision, transport, bind address, incoming authentication, Falcon scopes, customer ID and effective tools.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "CrowdStrike Falcon MCP", "variant": "Dated publisher documentation; buyer deployment unverified" }, "review_status": "documentation_review_only", "checked_on": "2026-10-16", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "CrowdStrike publishes Falcon MCP; the deployment operator hosts it.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Inspect Falcon security data and invoke enabled operations.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Allowed detections, host and security records.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Mutating tools may be exposed unless filtered out.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "Falcon API client credentials; separate optional HTTP API-key authentication.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "API scopes, child customer ID and server tool filters all matter.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Security records pass through the MCP server to the agent.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "A narrow module list can be extended; network binding without caller authentication exposes credential-backed operations.", "source_ids": [ "falcon", "falcon-tools" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Installed revision, enabled tools, network reachability and grants were not tested.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Require effective tool and caller-authentication evidence before tenant access.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "falcon", "url": "https://developer.crowdstrike.com/falcon-mcp/getting-started/configuration/", "final_url": "https://developer.crowdstrike.com/falcon-mcp/getting-started/configuration/", "title": "CrowdStrike Falcon MCP configuration", "checked_on": "2026-10-16", "sha256": "deaa96df86a4bd1c1ab1ed6fad0b56ac5f05cc77dc741aa8b615049b5f00f1c4", "bytes": 225330 }, { "source_id": "falcon-tools", "url": "https://developer.crowdstrike.com/falcon-mcp/usage/cli/", "final_url": "https://developer.crowdstrike.com/falcon-mcp/usage/cli/", "title": "CrowdStrike Falcon MCP tool filtering", "checked_on": "2026-10-16", "sha256": "70832fbb6c0d2883a006508d3f2a0ef27434e2221ecdc401a3ce1bc97a61af61", "bytes": 226616 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Save the exact access-control questions used to review a security-operations connection.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Tool selection precedence, remote authentication and customer-ID configuration." }, "change_history": [ { "version": 1, "date": "2026-10-16", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#falcon-mcp-tool-filter-http-authentication", "machine_readable_record": "/varexis-index/records/falcon-mcp-tool-filter-http-authentication.json" }