MCP Vetted

Wazuh-MCP-Server

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.

Repository
gensecaihq/Wazuh-MCP-Server
Stars
222
Last push
2026-08-16
License
MIT
Category
Developer Tools

Score breakdown — how scoring works

  • Maintenance

    30 / 30
    • Pushed within 14 days4 days ago+30

  • Adoption

    13.6 / 25
    • GitHub stars (no package published — stars weighted fully)222+13.6

  • Documentation

    25 / 25
    • Comprehensive README (6,000+ chars)23634 chars+10
    • Install / setup instructionsyes+6
    • Tools / capabilities documentedyes+5
    • Code or client-config exampleyes+4

  • Trust signals

    9 / 20
    • OSS license declaredMIT+7
    • First-party vendor implementationno+0
    • DNS-verified registry namespaceno+0
    • Listed in official MCP Registryno+0
    • Owned by an organizationyes+2

Install

From sourcegit clone https://github.com/gensecaihq/Wazuh-MCP-Server

No package published to a registry — see the README for setup instructions.

Always review a server's code and required credentials before connecting it to your MCP client. MCP Vetted scores public metadata — it does not audit code for malicious behavior (yet). Methodology →

View on GitHub ↗