Skip to main content
Glama
Sbharadwaj05

wazuh-mcp-server

by Sbharadwaj05
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to wazuh-mcp-server

No user-submitted related servers found.

    Related Servers

    • AI Detection Engineering

      Simoon896
      A
      license
      Not graded
      quality
      C
      maintenance
      An MCP server that enables conversational interaction with Wazuh SIEM, allowing users to investigate alerts, hunt threats, tune false positives, edit rules, and run security actions via natural language.
      MIT

    • klaxon

      sec73
      A
      license
      A
      quality
      A
      maintenance
      An MCP server that connects language models to a Wazuh SIEM cluster, enabling read-only plain-language queries, schema inspection, field coverage analysis, and decoder testing.
      10
      Apache 2.0

    • wazuh-mcp

      lidless-labs
      A
      license
      B
      quality
      A
      maintenance
      An MCP server for the Wazuh SIEM/XDR platform that enables users to query agents, security alerts, detection rules, and decoders through Claude or other MCP clients. It provides specialized tools and prompts for investigating security alerts, performing agent health checks, and generating environmental security overviews.
      28
      10 npm
      4
      MIT

    • wazuh-mcp-soc

      cisse-lalya
      F
      license
      Not graded
      quality
      C
      maintenance
      Enables natural-language security operations by connecting Wazuh SIEM to Claude Desktop via MCP, allowing querying of alerts, agents, vulnerabilities, and generating security reports with Slack integration.
      1
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.8/5.0

    Scored across 28 tools

    Disambiguation5/5

    Every tool has a clearly distinct purpose, from agent management to alert querying to compliance checks. Overlapping functions like listing vs. searching alerts are differentiated by scope and detail.

    Naming Consistency5/5

    All tools follow a consistent 'wazuh_verb_noun' pattern (e.g., wazuh_list_agents, wazuh_get_alert), making it predictable and easy for an agent to infer action and resource.

    Tool Count4/5

    With 28 tools, the set is comprehensive but still well-scoped for the Wazuh security management domain. While slightly above the typical 3-15 range, each tool addresses a specific function without redundancy.

    Completeness5/5

    The tool surface covers agent lifecycle, health, alerts, rules, compliance, vulnerability, FIM, cluster, logs, and active response. No obvious dead ends; destructive tools are paired with safety confirmation flows.

    Maintenance

    ActivityMaintained
    ResponsivenessWithin a week

    Resources