Wazuh MCP Server
UnclaimedProduction-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.
Install
go install github.com/mark3labs/mcphost@latestSet up this server
More in Security
Browse the full directoryUnclaimed listing
Is this your MCP server?
This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.
Claim this serverSecurity profile
Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works
Tool change history
FAQ
Questions about Wazuh MCP Server
- How do I connect Wazuh MCP Server to Claude?
- The listing records `go install github.com/mark3labs/mcphost@latest` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop as compatible clients.
- Is Wazuh MCP Server free?
- The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
- What can Wazuh MCP Server do?
- MCPVault has not yet recorded the tool list for Wazuh MCP Server; it is captured when the server passes a live MCP handshake. The description above is what the project publishes.