skills.rest
CrowdStrike
CrowdStrikeOFFICIAL
Explore all skills by this author →
WebsiteGitHub

functions-falcon-api

Call CrowdStrike Falcon APIs from serverless functions with automatic authentication.

24|3|Updated Apr 7, 2026
Search Tags:#automation#security#serverless#api#falcon#crowdstrike#falconpy
One-click install
npx skills add https://github.com/CrowdStrike/foundry-skills --skill functions-falcon-api
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: functions-falcon-api
Source: https://github.com/CrowdStrike/foundry-skills/tree/main/skills/functions-falcon-api
Command: npx skills add https://github.com/CrowdStrike/foundry-skills --skill functions-falcon-api

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires falconpy, and includes scripts (resource) and references (resource) components.

What problem does it solve?

It streamlines integrating CrowdStrike Falcon platform APIs into Foundry function handlers, enabling secure and automatic API interactions.

Core Features & Use Cases

  • API Integration: Enables calling Falcon APIs like detections, alerts, and hosts directly from serverless functions.
  • Automatic Authentication: Leverages platform-injected credentials, eliminating manual OAuth setup.
  • Use Case: Analyzing detection data in real-time within serverless functions to automate incident response.

Quick Start

Use this skill to call Falcon APIs securely inside your serverless functions without manual OAuth management.

Frequently Asked Questions about functions-falcon-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I call CrowdStrike Falcon APIs from serverless functions?▼

To call CrowdStrike Falcon APIs from serverless functions, you can use this Skill to facilitate seamless authentication and direct API access for detections, alerts, and host management without manual OAuth setup.

Do I need to manually configure OAuth to use the Falcon API in Foundry functions?▼

No, you do not need to manually configure OAuth to use the Falcon API in Foundry functions. The Skill leverages platform-injected credentials to enable automatic authentication for secure API interactions.

What use cases are supported by integrating the Falcon API with serverless functions?▼

Integrating the Falcon API with serverless functions supports use cases like analyzing detection data in real-time, automating incident response, host management, and alert analysis within automated security workflows.

Does the Falcon API integration require the falconpy SDK?▼

Yes, calling the CrowdStrike Falcon APIs through this Skill requires the falconpy SDK and appropriate environment setup to ensure seamless authentication and API access within your serverless functions.

What is the best way to automate incident response using CrowdStrike Falcon?▼

The best way to automate incident response using CrowdStrike Falcon is to integrate Falcon APIs directly into serverless functions, enabling real-time detection data analysis and automatic authentication for immediate action.

Related Skills

Explore More Software Engineering Skills→
miethemiethe

crowdstrike-deploy

Deploy and verify CrowdStrike Falcon sensor on Linux hosts and Kubernetes clusters.

Community
Advanced
claude-office-skillsclaude-office-skills
368

Security Monitoring

Automate security monitoring, threat detection, and incident response workflows.

Official
Advanced
PostalocityPostalocity
1

log-monitor

Analyze application logs with regex patterns and generate threshold-based alerts.

Official
Intermediate
bingggbinggg
1

auth-http-api-cloudbase

Implement CloudBase Auth login, signup, token refresh, and user info via raw HTTP endpoints.

Community
Intermediate