# CrowdStrike Developer Center > Documentation for the CrowdStrike Falcon platform APIs, SDKs, and Configuration as Code tools. Build integrations, automate security operations, and manage your Falcon environment programmatically. ## Sections > For the complete version of this document with all 1388+ individual API operations listed, see [llms-full.txt](/llms-full.txt) - [Falcon API Reference](/api-reference/overview/): CrowdStrike Falcon API reference documentation. - [Falcon Foundry](/foundry/understanding-foundry/): Build custom apps, API integrations, and automated workflows directly on the CrowdStrike Falcon platform. - [Configuration as Code](/cac/overview/): Manage the CrowdStrike Falcon platform using Configuration as Code with Terraform. - [Falcon MCP](/falcon-mcp/overview/): Connect AI assistants to the CrowdStrike Falcon platform via the Model Context Protocol. - [Sensor Deployment](/falcon-sensor/overview/): Deploy, configure, and manage the CrowdStrike Falcon sensor across your infrastructure. - [Falcon Next-Gen SIEM](/ngsiem/overview/): Build custom parsers, normalize security data, and integrate third-party log sources with CrowdStrike Next-Gen SIEM. - [Software Development Kits](/sdks/overview/): Official CrowdStrike Falcon SDKs. Six languages, full API coverage. ## API Reference - [All Operations](/api-reference/all-operations/): Complete alphabetical list of all 1388+ API operations - [Operations by Collection](/api-reference/operations-by-collection/): Operations grouped by service collection - [Falcon Query Language](/api-reference/falcon-query-language/): FQL syntax reference for filtering API results ### Service Collections (119 collections, 1388+ operations) - [Admission Control Policies](/api-reference/collections/admission-control-policies/): 15 operations - [Alerts](/api-reference/collections/alerts/): 9 operations - [API Integrations](/api-reference/collections/api-integrations/): 3 operations - [ASPM](/api-reference/collections/aspm/): 52 operations - [CAO Hunting](/api-reference/collections/cao-hunting/): 7 operations - [Case Management](/api-reference/collections/case-management/): 53 operations - [Certificate Based Exclusions](/api-reference/collections/certificate-based-exclusions/): 6 operations - [Cloud AWS Registration](/api-reference/collections/cloud-aws-registration/): 7 operations - [Cloud Azure Registration](/api-reference/collections/cloud-azure-registration/): 9 operations - [Cloud Connect AWS](/api-reference/collections/cloud-connect-aws/): 9 operations - [Cloud GCP Registration](/api-reference/collections/cloud-gcp-registration/): 7 operations - [Cloud Google Cloud Registration](/api-reference/collections/cloud-google-cloud-registration/): 7 operations - [Cloud OCI Registration](/api-reference/collections/cloud-oci-registration/): 7 operations - [Cloud Policies](/api-reference/collections/cloud-policies/): 29 operations - [Cloud Security](/api-reference/collections/cloud-security/): 7 operations - [Cloud Security Assets](/api-reference/collections/cloud-security-assets/): 4 operations - [Cloud Security Compliance](/api-reference/collections/cloud-security-compliance/): 2 operations - [Cloud Security Detections](/api-reference/collections/cloud-security-detections/): 3 operations - [Cloud Security Risks](/api-reference/collections/cloud-security-risks/): 1 operations - [Cloud Snapshots](/api-reference/collections/cloud-snapshots/): 8 operations - [Configuration Assessment](/api-reference/collections/configuration-assessment/): 2 operations - [Configuration Assessment Evaluation Logic](/api-reference/collections/configuration-assessment-evaluation-logic/): 1 operations - [Container Alerts](/api-reference/collections/container-alerts/): 3 operations - [Container Detections](/api-reference/collections/container-detections/): 7 operations - [Container Image Compliance](/api-reference/collections/container-image-compliance/): 11 operations - [Container Images](/api-reference/collections/container-images/): 13 operations - [Container Packages](/api-reference/collections/container-packages/): 7 operations - [Container Vulnerabilities](/api-reference/collections/container-vulnerabilities/): 10 operations - [Content Update Policies](/api-reference/collections/content-update-policies/): 11 operations - [Correlation Rules](/api-reference/collections/correlation-rules/): 18 operations - [Correlation Rules Admin](/api-reference/collections/correlation-rules-admin/): 1 operations - [CSPM Registration](/api-reference/collections/cspm-registration/): 39 operations - [Custom IOA](/api-reference/collections/custom-ioa/): 20 operations - [Custom Storage](/api-reference/collections/custom-storage/): 18 operations - [D4C Registration](/api-reference/collections/d4c-registration/): 22 operations - [Data Protection Configuration](/api-reference/collections/data-protection-configuration/): 47 operations - [Delivery Settings](/api-reference/collections/delivery-settings/): 2 operations - [Deployments](/api-reference/collections/deployments/): 6 operations - [Detects](/api-reference/collections/detects/): 4 operations - [Device Content](/api-reference/collections/device-content/): 2 operations - [Device Control Policies](/api-reference/collections/device-control-policies/): 18 operations - [Discover](/api-reference/collections/discover/): 13 operations - [Downloads](/api-reference/collections/downloads/): 4 operations - [Drift Indicators](/api-reference/collections/drift-indicators/): 5 operations - [Event Streams](/api-reference/collections/event-streams/): 2 operations - [Exposure Management](/api-reference/collections/exposure-management/): 12 operations - [FaaS Execution](/api-reference/collections/faas-execution/): 1 operations - [Falcon Complete Dashboard](/api-reference/collections/falcon-complete-dashboard/): 19 operations - [Falcon Container](/api-reference/collections/falcon-container/): 20 operations - [Falconx Sandbox](/api-reference/collections/falconx-sandbox/): 15 operations - [FDR](/api-reference/collections/fdr/): 5 operations - [Federated Connections](/api-reference/collections/federated-connections/): 3 operations - [FileVantage](/api-reference/collections/filevantage/): 31 operations - [Firewall Management](/api-reference/collections/firewall-management/): 33 operations - [Firewall Policies](/api-reference/collections/firewall-policies/): 10 operations - [Foundry LogScale](/api-reference/collections/foundry-logscale/): 11 operations - [Host Group](/api-reference/collections/host-group/): 9 operations - [Host Migration](/api-reference/collections/host-migration/): 10 operations - [Hosts](/api-reference/collections/hosts/): 16 operations - [Identity Protection](/api-reference/collections/identity-protection/): 8 operations - [Image Assessment Policies](/api-reference/collections/image-assessment-policies/): 11 operations - [Installation Tokens](/api-reference/collections/installation-tokens/): 9 operations - [Intel](/api-reference/collections/intel/): 24 operations - [Intelligence Feeds](/api-reference/collections/intelligence-feeds/): 3 operations - [Intelligence Indicator Graph](/api-reference/collections/intelligence-indicator-graph/): 2 operations - [IOA Exclusions](/api-reference/collections/ioa-exclusions/): 14 operations - [IOC](/api-reference/collections/ioc/): 17 operations - [IOCs](/api-reference/collections/iocs/): 9 operations - [IT Automation](/api-reference/collections/it-automation/): 42 operations - [Knowledge Base Audit Events](/api-reference/collections/knowledge-base-audit-events/): 4 operations - [Knowledge Base Files](/api-reference/collections/knowledge-base-files/): 6 operations - [Knowledge Bases](/api-reference/collections/knowledge-bases/): 5 operations - [Kubernetes Container Compliance](/api-reference/collections/kubernetes-container-compliance/): 10 operations - [Kubernetes Protection](/api-reference/collections/kubernetes-protection/): 63 operations - [MalQuery](/api-reference/collections/malquery/): 9 operations - [Message Center](/api-reference/collections/message-center/): 9 operations - [ML Exclusions](/api-reference/collections/ml-exclusions/): 14 operations - [Mobile Enrollment](/api-reference/collections/mobile-enrollment/): 2 operations - [MSSP (Flight Control)](/api-reference/collections/mssp/): 31 operations - [Network Scan Global Configs](/api-reference/collections/network-scan-global-configs/): 2 operations - [Network Scan Networks](/api-reference/collections/network-scan-networks/): 6 operations - [Network Scan Scan Run Reports](/api-reference/collections/network-scan-scan-run-reports/): 1 operations - [Network Scan Scan Runs](/api-reference/collections/network-scan-scan-runs/): 5 operations - [Network Scan Scanners](/api-reference/collections/network-scan-scanners/): 4 operations - [Network Scan Scans](/api-reference/collections/network-scan-scans/): 6 operations - [Network Scan Templates](/api-reference/collections/network-scan-templates/): 6 operations - [Network Scan Zones](/api-reference/collections/network-scan-zones/): 7 operations - [NGSIEM](/api-reference/collections/ngsiem/): 48 operations - [OAuth2](/api-reference/collections/oauth2/): 2 operations - [ODS (On Demand Scan)](/api-reference/collections/ods/): 16 operations - [Overwatch Dashboard](/api-reference/collections/overwatch-dashboard/): 5 operations - [Prevention Policy](/api-reference/collections/prevention-policy/): 10 operations - [Quarantine](/api-reference/collections/quarantine/): 6 operations - [Quick Scan](/api-reference/collections/quick-scan/): 4 operations - [Quick Scan Pro](/api-reference/collections/quick-scan-pro/): 6 operations - [Real Time Response](/api-reference/collections/real-time-response/): 23 operations - [Real Time Response Admin](/api-reference/collections/real-time-response-admin/): 20 operations - [Real Time Response Audit](/api-reference/collections/real-time-response-audit/): 1 operations - [Recon](/api-reference/collections/recon/): 26 operations - [Report Executions](/api-reference/collections/report-executions/): 4 operations - [Response Policies](/api-reference/collections/response-policies/): 10 operations - [SaaS Security](/api-reference/collections/saas-security/): 21 operations - [Sample Uploads](/api-reference/collections/sample-uploads/): 11 operations - [Scheduled Reports](/api-reference/collections/scheduled-reports/): 3 operations - [Sensor Download](/api-reference/collections/sensor-download/): 13 operations - [Sensor Update Policy](/api-reference/collections/sensor-update-policy/): 19 operations - [Sensor Usage](/api-reference/collections/sensor-usage/): 2 operations - [Sensor Visibility Exclusions](/api-reference/collections/sensor-visibility-exclusions/): 5 operations - [Serverless Exports](/api-reference/collections/serverless-exports/): 4 operations - [Serverless Vulnerabilities](/api-reference/collections/serverless-vulnerabilities/): 1 operations - [Spotlight Evaluation Logic](/api-reference/collections/spotlight-evaluation-logic/): 4 operations - [Spotlight Vulnerabilities](/api-reference/collections/spotlight-vulnerabilities/): 5 operations - [Spotlight Vulnerability Metadata](/api-reference/collections/spotlight-vulnerability-metadata/): 1 operations - [Tailored Intelligence](/api-reference/collections/tailored-intelligence/): 5 operations - [ThreatGraph](/api-reference/collections/threatgraph/): 6 operations - [Unidentified Containers](/api-reference/collections/unidentified-containers/): 3 operations - [User Management](/api-reference/collections/user-management/): 25 operations - [Workflows](/api-reference/collections/workflows/): 20 operations - [Zero Trust Assessment](/api-reference/collections/zero-trust-assessment/): 4 operations ## Authentication All API access requires OAuth2 credentials (client_id and client_secret) created in the Falcon console under Support and resources > API Clients & Keys. Tokens expire after 30 minutes. Base URLs vary by cloud region: us-1 (api.crowdstrike.com), us-2 (api.us-2.crowdstrike.com), eu-1 (api.eu-1.crowdstrike.com), us-gov-1 (api.laggar.gcw.crowdstrike.com).