F
licenseA
qualityC
maintenanceEnables querying a remote Wazuh deployment via MCP, covering Manager API (agents, rules, inventory, configuration) and Indexer (alerts, vulnerabilities) with 34 tools and reports, read-only by default.
34
-
mcp-server-wazuh
Related Servers
Alternatives to mcp-server-wazuh
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityCmaintenanceEnables MCP clients to query and manipulate a Wazuh SIEM deployment through its manager, Indexer, and dashboard REST APIs, covering agents, alerts, vulnerabilities, rules, decoders, active response, and content promotion.MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI assistants to converse in plain language with a Wazuh SIEM deployment, querying and aggregating alerts, hunting threats, triaging vulnerabilities, running compliance checks, and executing or rolling back active responses across multi-cluster environments. Works with both cloud and fully local, air-gapped LLM clients while enforcing scoped, audited access to the security tools.MIT
- AlicenseAqualityBmaintenanceEnables agents to query and explore Prometheus through PromQL, metric and label discovery, alerts, rules, scrape health, and cardinality, while keeping admin writes disabled unless explicitly enabled.12MIT
- AlicenseNot gradedqualityBmaintenanceExposes Wazuh SIEM data and actions—including agents, alerts, vulnerabilities, rules, decoders, active response, and Wazuh 5 Sigma rules, Detectors, and content promotion—as Model Context Protocol tools that LLM clients can call over HTTP.MIT
- AlicenseNot gradedqualityDmaintenanceEnables natural language interaction with Wazuh SIEM for alert querying, threat hunting, vulnerability scanning, and active response actions.MIT
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues