広告掲載
MCP.so
ログイン

Wazuh MCP Server

@gbrigandi

リポジトリ

基本情報

カテゴリ

その他

ライセンス

MIT

トランスポート

stdio

作者

gbrigandi

Wazuh MCP Server について

MCP Server for Wazuh SIEM

#mcp#siem#wazuh#security-operations#llm#wazuh-integration#mcp-server#model-context-protocol-servers#model-context-pro

Wazuh MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-server-wazuh": {
      "command": "docker",
      "args": [
        "pull",
        "ghcr.io/gbrigandi/mcp-server-wazuh:latest"
      ]
    }
  }
}

Wazuh MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Wazuh MCP Server?

A Rust-based server that bridges Wazuh SIEM data with MCP-compatible AI assistants like Claude Desktop. It transforms complex Wazuh API responses into structured security context, enabling natural language queries for alerts, agents, vulnerabilities, rules, and compliance data.

How to use Wazuh MCP Server?

Install via pre-built binary, Docker image, or build from source with Rust. Configure environment variables for Wazuh API and Indexer credentials, then point your MCP client (e.g., Claude Desktop) to the server executable or Docker container.

Key features of Wazuh MCP Server

  • Real-time access to security alerts and events
  • Agent management and health status monitoring
  • Vulnerability assessment for risk management
  • Security rules and configuration access
  • System statistics and performance metrics
  • Compliance monitoring for PCI-DSS, HIPAA, etc.

Use cases of Wazuh MCP Server

  • Triage and prioritize security alerts using natural language queries
  • Assess agent vulnerabilities and prioritize patching efforts
  • Investigate running processes and open ports for threat hunting
  • Monitor cluster health and manager performance metrics
  • Automate compliance reporting and gap analysis for audits

よくある質問

1

What are the requirements for running the server?

A running Wazuh server (v4.12 recommended) with API enabled, network connectivity, and an MCP-compatible LLM client like Claude Desktop.

2

How do I install and configure the server?

You can download a pre-built binary, pull a Docker image, or build from source with Rust. Configuration is done through environment variables for Wazuh API/Indexer host, port, and credentials.

3

Can I use this server with other MCP security tools?

Yes, it can be combined with Cortex MCP Server, TheHive MCP Server, and MISP MCP Server for enhanced threat intelligence, case management, and IOC enrichment.

4

What data sources does the server access?

It accesses data from both the Wazuh Indexer (alerts) and the Wazuh Manager (agents, rules, vulnerabilities, cluster health, logs, and statistics).

コメント

「その他」の他のコンテンツ

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

広告掲載