u/BradW-CS

Happy MCP Monday y'all!!

This release adds three new modules, lands us on the MCP registry, and cleans up a bunch of rough edges.

###New modules:

• Falcon Shield (SaaS Security) — visibility into SaaS app risks and posture

• CSPM Findings — query cloud security findings and manage suppression rules

• Case Management — search, create, and manage Falcon cases

###Other highlights:

• Published to the MCP registry — easier discovery and installation

• Deprecated incidents module removed (use alerts instead)

• Tool descriptions standardized across all modules for better LLM tool selection

• Auth failures now surface diagnostic details instead of generic errors

• outputSchema omitted from tools/list to fit within client context budgets

###Bug fixes:

• Connectivity check now retries auth before reporting failure

• NGSIEM async tests actually execute now (oops)

Full changelog: https://github.com/CrowdStrike/falcon-mcp/blob/main/CHANGELOG.md

Repo: https://github.com/CrowdStrike/falcon-mcp