CrowdStrike Charlotte AI, Agentic SOC and the Falcon MCP Server

Charlotte AI is the name CrowdStrike puts on every AI feature in the Falcon console, from the chat box to the agents that triage detections and the MCP server that lets an outside agent query your fleet. This guide separates the pieces, dates each one, explains what a credit buys and shows where Falcon for IT fits. Every figure comes from a CrowdStrike document or a dated public page read in November 2026.

TL;DR

• Charlotte AI is an agent layer, not a chatbot. Triage, response, recon and custom agents run on Falcon data under approval gates you configure.
• The headline numbers are CrowdStrike's. 98% is agreement with Falcon Complete analysts; 40 hours a week is an average.
• MCP is now the integration path. A CrowdStrike-managed MCP server went GA in September 2026; the open-source one is in maintenance.
• Credits, not seats. 50 free a month for qualifying customers, the rest quoted.

What Charlotte AI Is in November 2026

Charlotte AI started on 30 May 2023 as a generative assistant in private preview: ask the Falcon console a question in plain language, get an answer drawn from your own telemetry. Three years later the same brand covers four layers. The conversational layer still exists, with promptbooks that save and share proven prompts. Above it sit the mission-ready agents CrowdStrike ships inside its modules, then Charlotte AI AgentWorks for building your own, then Charlotte Agentic SOAR, the workspace that governs both agents and the deterministic Falcon Fusion workflows that existed before any of this.

The dates matter because the product changed shape fast. Detection Triage reached general availability on 13 February 2025. Agentic Response and Agentic Workflows followed on 28 April 2025 at RSAC. Fal.Con on 16 September 2025 brought the Agentic Security Platform, the Enterprise Graph data layer, seven out-of-the-box agents and AgentWorks. Charlotte Agentic SOAR arrived at Fal.Con Europe on 5 November 2025, FedRAMP High authorization on 25 November 2025, and an AgentWorks partner ecosystem on 25 March 2026. Fal.Con on 2 September 2026 added coordinated multi-agent investigations, bring-your-own-model and the managed MCP server. Fal.Con Europe on 4 November 2026 added the AI Kill Switch, Agent Interruption and human-in-the-loop action requests.

CrowdStrike's framing is the "agentic SOC": analysts and agents working one investigation together on shared data. Its own justification for the shift comes from two reports it publishes. The 2026 Global Threat Report puts average adversary breakout time at 29 minutes with the fastest recorded at 27 seconds, and the 2026 Threat Hunting Report says AI agents trigger 2.5 times more detection leads than humans. Both are vendor telemetry, and both describe the volume problem an agent layer is meant to absorb. Our primer on what agentic AI means in IT and security operations covers the pattern without the product names.

The Agents Inside the Falcon Console

Charlotte AI Detection Triage is the agent with the longest track record and the most published data. It reads a first-party detection, reaches a true-positive or false-positive decision with a confidence score, and writes a recommendation and the reasoning behind it. Teams decide what happens next through their own playbooks: auto-close, escalate or route. CrowdStrike's published accuracy is "over 98%", and the footnote on its own page defines that as the share of Charlotte AI triage decisions matching the Falcon Complete Next-Gen MDR team's expert decisions. It is an agreement rate against CrowdStrike's analysts, not an independent benchmark.

The research behind it is unusually open for a security vendor. A 17 August 2026 CrowdStrike blog post, Teaching AI to Reason Through Detection Triage, describes a fine-tuned NVIDIA Nemotron 3 Nano 30B-A3B model that reasons step by step before committing. On a held-out set of real Windows endpoint detections it reached 82.6% overall accuracy, against 55% to 71% for the general-purpose frontier models CrowdStrike tested. At the high-confidence operating point that governs automation, false-positive recall rose from 21.8% to 64.8% and true-positive recall from 34.7% to 53.0%. In plain terms: far more benign alerts can be closed without a person, and more real ones reach the analyst sooner.

The Response Agent, announced in April 2025, drives an investigation by generating and answering the questions an analyst would ask across the Falcon modules an organisation owns. The seven mission-ready agents from September 2025 each sit in a module: Exposure Prioritization in Exposure Management, Malware Analysis and Hunt in Threat Intelligence, Search Analysis, Correlation Rule Generation, Data Transformation and Workflow Generation in Next-Gen SIEM. The last one converts a plain-language request into a Falcon Fusion workflow, which is the capability most IT teams will meet first. Since 4 November 2026 the coordinated multi-agent investigations announced at Fal.Con are generally available: an orchestrator agent dispatches specialist agents across endpoint, identity, SaaS, cloud and network in parallel, and they converge on one decision over a shared context layer.

Two defaults are worth knowing before anyone in your team turns these on. CrowdStrike's FAQ states that prebuilt agents are limited to generating information, summaries and recommendations by default, and that any action affecting the environment requires explicit configuration and approval by an authorised member of the security team. That is the capacity framing the product is built around: agents clear the queue, people make the calls that change a host.

AgentWorks and Charlotte Agentic SOAR

Charlotte AI AgentWorks is the no-code builder. A team writes the agent's instructions in plain language, attaches knowledge files such as playbooks and SOPs, assigns the tools it may call, sets outputs and defines when it activates. Governance is built into the same screen: role-based permissions, execution traces, version history with rollback, credit caps per agent and configurable approvals. The 2 September 2026 release made bring-your-own-model generally available, so a team can run agents on its existing OpenAI or Anthropic licence and pick a model per job for reasoning depth, latency or cost. CrowdStrike's AgentWorks walkthrough from 15 October 2026 shows that flow end to end:

Charlotte Agentic SOAR is where agents and the older Falcon Fusion workflows meet. The unified workspace, in public preview as of the 18 September 2026 update to CrowdStrike's blog, lets a team define triggers, data, conditions, agents and actions for each workflow and mark each step as automated or approval-gated. Falcon Foundry, CrowdStrike's app builder, lives in the same place. The 4 November 2026 release added three controls that answer the question every IT lead asks first: human-in-the-loop gates that pause an agent on a sensitive tool call and raise an Action Request, Agent Interruption to stop a running Charlotte AI or AgentWorks agent mid-task, and, scheduled for the current quarter, real-time AI credit visibility with the ability to halt consumption mid-run.

The middle ground is already in use. A CrowdStrike engineer's Workflow Wednesday post on r/crowdstrike from 27 May 2026 builds a Fusion SOAR workflow that fires on a high or critical detection, has Charlotte AI triage and summarise it, posts the context to Slack and then waits for an analyst to approve or decline containment. A reply in the same thread notes that the Detection Triage action inside a workflow does not consume AI credits but does require the paid Charlotte AI SKU, which is a detail worth confirming with your account team before you design around it.

Practitioners who have used it describe the governance as the point rather than the overhead. One customer quoted on CrowdStrike's own page calls AgentWorks "testable, traceable, capped, and versioned", which is the vocabulary a change-advisory board wants to hear before an agent touches production. Our guide to AI agents for MSPs and IT teams covers the same four properties from the buyer's side.

The Falcon MCP Server: What an Outside Agent Can Do

The Model Context Protocol is how an AI agent outside the Falcon console reaches Falcon data and actions, and CrowdStrike now offers it two ways. The open-source falcon-mcp project on GitHub runs locally or in a container with a Falcon API client ID and secret, and exposes around thirty modules: detections, hosts and host groups, Spotlight vulnerabilities with ExPRT ratings, threat intelligence, Next-Gen SIEM queries in CQL, policies, quarantine, read-only Real Time Response triage, Fusion SOAR workflow runs and, since version 0.17.0 on 22 August 2026, an AgentWorks module for calling and observing Charlotte AI agents. Version 0.19.0 on 1 September 2026 added a Guardian module for AI agent activity, and 0.20.0 on 22 October 2026 expanded data security tools.

That repository is now in maintenance mode. Its README states that development continues in CrowdStrike MCP, the hosted server inside the Falcon platform, available in the US-1, US-2 and EU-1 clouds as of November 2026. The hosted version keeps most of the same falcon_ tool names so prompts written for the open-source server carry over, follows the Falcon roles and permissions already assigned to the user, and writes every call to the Falcon audit log. Existing self-hosted installs keep working with security fixes only, and CrowdStrike says it will announce an end-of-life date before archiving the repository.

The connection runs both ways. Third-party agents call into Falcon through the managed server, and AgentWorks agents call out to the tools a team already runs, which CrowdStrike lists as ticketing, asset management, threat intelligence and internal systems. For an IT team this is the part of the Charlotte AI story that matters most, because it is the first time Falcon has been addressable by an agent the team controls rather than one CrowdStrike ships. Our walkthrough of connecting an AI agent to an RMM and helpdesk describes the same tool-calling pattern on the operations side, and the two meet in the ticket.

Charlotte AI Inside Falcon for IT

Falcon for IT is CrowdStrike's IT automation module on the same sensor, and Charlotte AI is embedded in it in two places. The first is live asset querying: the Live Asset Query promptbook turns a plain-language question into an osquery statement that Falcon for IT runs against the fleet, so "which Macs have an unsigned kernel extension loaded" becomes a query without anyone writing SQL. The second is script and workflow drafting, where the Workflow Generation Agent or an AgentWorks agent proposes the remediation and a person approves it before it runs. CrowdStrike's own 24 August 2026 walkthrough shows an AgentWorks agent identifying hosts exposed to a frontier-AI-driven exploit and handing them to Falcon for IT risk-based patching for controlled remediation.

The licensing follows the module. CrowdStrike's Charlotte AI data sheet lists live asset querying as an embedded feature of Falcon for IT, alongside incident investigations in Next-Gen SIEM, command-line explanations in Insight XDR, cloud asset search and CVE explanations in Exposure Management, so the AI feature arrives with the module it lives in and the module is the line on the quote. What the module does and does not cover for an IT team is the subject of our Falcon for IT review, and nothing in Charlotte AI changes that boundary: remote control, a software deployment catalog, ticketing and multi-client tenancy are still not on the feature list.

AIDR, Falcon Guardian and the AI Kill Switch

"CrowdStrike AIDR" is the other half of the AI story and the one searchers most often confuse with Charlotte AI. AI Detection and Response is CrowdStrike's name for defending the AI systems an organisation runs, not for using AI to defend endpoints. It entered the roadmap on 16 September 2025 when CrowdStrike announced a definitive agreement to acquire Pangea, a company whose products cover prompt injection, model jailbreak attempts and governance of generative AI use, with CrowdStrike citing up to 99% efficacy at sub-30-millisecond latency from internal benchmarks. CrowdStrike now markets the result as Falcon AI Detection and Response, and its August 2026 research blog links to it as a separate product from Charlotte AI.

The November 2026 Fal.Con Europe announcements extend the same idea to the agents themselves. Falcon Guardian provides runtime security for AI agents, and its AI Kill Switch, introduced on 4 November 2026, terminates an agent immediately when a decision lands, starting at the gateway with endpoint support planned next. Agent Insider Threat Detection in Next-Gen SIEM, scheduled for the current quarter, learns the normal behaviour of every AI agent and its owner and flags deviations even when no policy is broken. The practical takeaway for an IT team is that Charlotte AI and AIDR are sold and licensed separately, and a quote for one does not include the other.

Licensing: Credits, 50 Free a Month and What Is Quoted

Charlotte AI is not a line on the public price list. Falcon Go, Pro and Enterprise are published at $59.99, $99.99 and $184.99 per device per year as of November 2026, and none of the three names Charlotte AI as an inclusion. Instead the product runs on AI credits. CrowdStrike's FAQ states that qualifying customers can access Charlotte AI at no cost through the Falcon console with 50 AI credits that renew each month, and that anything beyond that is arranged with the account team, which also runs a four-week trial. Agents are built through supported modules, so a triage agent needs the module whose detections it triages.

Two things the table cannot tell you. The first is what a credit costs once the 50 run out, because no public page we read in November 2026 puts a dollar figure on it. G2 reviewers rate Charlotte AI 4.5 out of 5 across 21 reviews as of November 2026, and the rating says nothing about price either. The second is how fast credits go: the months that need deep investigation are the months an agent fleet burns most, which is why the AI Credit Visibility and Control feature scheduled for this quarter is worth asking for by name. The bundle and module prices Charlotte AI sits on are laid out in our Falcon review for MSPs.

The opt-in itself has a thread. CrowdStrike's community manager posted the release notes for the Charlotte AI opt-in and 50-credit promotion on r/crowdstrike in March 2026, and the replies are a useful preview of month one: several admins saw 42 or 44 credits rather than 50 after opting in, one needed Falcon Administrator rights confirmed before the toggle appeared, and CrowdStrike staff asked for support tickets with case IDs. None of it is a reason to skip the promotion. All of it is a reason to screenshot the credit counter on day one.

Reading the Numbers CrowdStrike Publishes

Three figures appear on the Charlotte AI page in November 2026, and each carries a footnote. "Over 98% decision accuracy" is the agreement rate with Falcon Complete analysts described above. "70% reduced manual effort during investigations" and "90% reduced incident response time" are both marked "based on customer-reported assessment" and point to a single case study. The data sheet adds "40+ hours" of average weekly time savings, defined as the triage time an analyst would have spent on the average customer's detections, with the caveat that individual results vary with alert volume. Every CrowdStrike document on the product also carries a forward-looking statement that some described features may not yet be generally available, and the September 2026 blog post was edited on 18 September to change availability labels. Read the status column, not the headline, before a feature goes into a proposal.

How an AI-Native IT Layer Uses the Same Pattern

Strip the brand names away and Charlotte AI is a pattern: agents with scoped tool access, an approval gate before any action that changes a system, a trace of every call, and a credit cap so spend cannot run away. That pattern is not specific to a SOC. An IT team's day is full of the same shape of work, where a ticket arrives, a question gets asked of the fleet, a fix gets drafted and a technician approves it. OpenFrame applies the same pattern to the operations side: its agents reach the RMM, PSA and helpdesk through tool calls, every proposed action waits for a person unless the team has whitelisted it, and the platform runs its own RMM rather than wrapping someone else's. Pricing is $1 per device per month with 10 million AI tokens included, so the capacity question is answered on the invoice rather than in a credit forecast. Flamingo builds OpenFrame, which competes with some of the tools covered here.

The two layers are complementary rather than competing. Falcon's agents are trained on what CrowdStrike's analysts decided about detections; an IT layer's agents are trained on what your technicians decided about tickets. The MCP server is where they meet: a Falcon detection can open a ticket in the IT layer, and an IT agent can ask Falcon which hosts a finding touches before it schedules the fix.

Who It Fits, and Who Should Wait

Charlotte AI fits a security team already on Falcon Enterprise or Complete that owns Next-Gen SIEM, because that is where the multi-agent investigations, the workflow generation and most of the mission-ready agents live, and the 50 free credits make the first month of triage a no-cost experiment. It fits an in-house IT team on Falcon for IT that wants fleet questions answered in plain language and remediation drafted for approval, provided the team accepts that the module boundary has not moved. It fits any organisation that intends to build its own agents and wants the governance, traces and FedRAMP High authorisation on the platform rather than assembled from parts.

An MSP running Falcon across many tenants should wait for two specifics before building a service on it. The first is per-tenant credit visibility and control, which CrowdStrike has scheduled for the current quarter but not shipped at the time of writing. The second is a written answer on how credits and bring-your-own-model spend are metered across child tenants in Flight Control, because the public documentation describes a single-tenant purchase. Teams that mainly want AI help with tickets, patches and client reporting are buying an operations tool, and the CrowdStrike layer is an input to it rather than a replacement for it.

The short answer: Charlotte AI is the most documented agent layer in endpoint security in November 2026, and the documentation is exactly what to read. Take the 50 free credits, run Detection Triage in recommendation-only mode for a month, measure your own agreement rate against your analysts, and let that number, not the footnoted one, decide the quote.