MCP Directory
Back

Wazuh-MCP-Server

by gensecaihq · Python · ★ 190

AI-powered security operations for Wazuh SIEM—use any MCP-compatible client to ask security questions in plain English. Faster threat detection, incident triage, and compliance checks with real-time monitoring and anomaly spotting. Production-ready MCP server for conversational SOC workflows.

#ai#claude#claude-ai#claude-code#claudedxt#dxt#genai#hacktoberfest#hacktoberfest-accepted#hacktoberfest2025#mcp#mcp-server#mcpserver#model-context-protocol#model-context-protocol-servers#python#wazuh#wazuh-integration

Install

pip install git+https://github.com/gensecaihq/Wazuh-MCP-Server.git

Auto-generated from the repo's primary language — check the repo's own README for its exact install instructions.

Claude Desktop config

A starting point for your claude_desktop_config.json (auto-generated — the repo's README may specify a published package name or required env vars):

{
  "mcpServers": {
    "wazuh-mcp-server": {
      "command": "uvx",
      "args": [
        "git+https://github.com/gensecaihq/Wazuh-MCP-Server.git"
      ]
    }
  }
}

From the README

[](https://opensource.org/licenses/MIT) [](https://www.python.org/downloads/) [](https://modelcontextprotocol.io/) [](https://github.com/gensecaihq/Wazuh-MCP-Server) **Talk to your SIEM.** Query alerts, hunt threats, check vulnerabilities, and trigger active responses across your entire Wazuh deployment — through natural conversation with any AI assistant. > **v4.2.1** | 54 security tools | Wazuh 4.8.0–4.14.4 | [Changelog](CHANGELOG.md) This is a standard MCP tool server. It doesn't care what LLM you use — it just executes tools and returns results. | Mode | LLM | Client | Data leaves your…
Read full README on GitHub →

Related monitoring servers