docs(modules): note RTR is not available on the hosted MCP

Real Time Response is currently excluded on CrowdStrike's hosted Falcon
MCP. Adds it to the existing HOSTED_MCP_MODULE_NOTES/overview pattern
used for Fusion SOAR and Zero Trust Assessment, matching their wording
for consistency.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: ppauzas

docs/modules/overview.md

@@ -47,7 +47,7 @@ If you self-host and want the same discovery pattern, enable [dynamic mode](/fal
 
 Module and tool coverage also differs:
 
-- [Fusion SOAR](/falcon-mcp/modules/fusion/) and [Zero Trust Assessment](/falcon-mcp/modules/zero-trust-assessment/) are available only on this self-hosted server; the hosted MCP has no equivalent modules.
+- [Fusion SOAR](/falcon-mcp/modules/fusion/), [Zero Trust Assessment](/falcon-mcp/modules/zero-trust-assessment/), and [Real Time Response](/falcon-mcp/modules/rtr/) are available only on this self-hosted server; the hosted MCP has no equivalent modules.
 - [Cloud Security](/falcon-mcp/modules/cloud/): `falcon_search_cloud_insights`, `falcon_list_cloud_insight_definitions`, and `falcon_get_cloud_asset_insights` are not available on the hosted MCP.
 - [Discover](/falcon-mcp/modules/discover/): `falcon_search_managed_assets` is not available on the hosted MCP.
 - [Policies](/falcon-mcp/modules/policies/): the hosted MCP does not use the unified `policy_type`-discriminated tools. It instead exposes six policy-type-specific variants of each tool (for example `falcon_search_policies_firewall`, `falcon_create_policy_prevention`).

docs/modules/rtr.md

@@ -6,6 +6,9 @@
 
 Initiating and inspecting RTR sessions and for executing read-only RTR commands during host investigations
 
+> [!NOTE]
+> This module is not available on CrowdStrike's hosted Falcon MCP; it is only available when self-hosting this server. See [module overview](/falcon-mcp/modules/overview/#crowdstrike-hosted-mcp-differences).
+
 ## API Scopes
 
 - `Real time response:read`

scripts/generate_module_docs.py

@@ -96,6 +96,10 @@ def _module_link(module_key: str) -> str:
         "This module is not available on CrowdStrike's hosted Falcon MCP; it is only "
         f"available when self-hosting this server. See [module overview]({_OVERVIEW_LINK})."
     ),
+    "rtr": (
+        "This module is not available on CrowdStrike's hosted Falcon MCP; it is only "
+        f"available when self-hosting this server. See [module overview]({_OVERVIEW_LINK})."
+    ),
     "policies": (
         "CrowdStrike's hosted Falcon MCP does not use these unified, `policy_type`-discriminated "
         "tools. It instead exposes six policy-type-specific variants of each tool below, suffixed "
@@ -1457,9 +1461,10 @@ def generate_overview_page(modules: dict[str, dict[str, Any]]) -> str:
     lines.append("Module and tool coverage also differs:")
     lines.append("")
     lines.append(
-        f"- [Fusion SOAR]({_module_link('fusion')}) and "
-        f"[Zero Trust Assessment]({_module_link('zerotrustassessment')}) are available only "
-        "on this self-hosted server; the hosted MCP has no equivalent modules."
+        f"- [Fusion SOAR]({_module_link('fusion')}), "
+        f"[Zero Trust Assessment]({_module_link('zerotrustassessment')}), and "
+        f"[Real Time Response]({_module_link('rtr')}) are available only on this self-hosted "
+        "server; the hosted MCP has no equivalent modules."
     )
     lines.append(
         f"- [Cloud Security]({_module_link('cloud')}): `falcon_search_cloud_insights`, "