Wazuh-MCP-Server MCP server

Name: Wazuh-MCP-Server
Author: gensecaihq

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.

What Wazuh-MCP-Server does

Summarised from the project README; check the repository for the latest details.

Tools exposed (10)

Toolset – Count
alerts – 5 R
agents – 6 R
vulnerabilities – 3 R
analysis – 5 R
web_search – 1 R
compliance – 6 R
system – 10 R
WAZUH_DISABLED_TOOLS – hides individual tools. Hidden tools are removed from `tools/list` and refused by `tools/call`; unknown toolset or tool names stop the serve
wazuh_firewall_allow – and `wazuhhostallow` require an operator-deployed undo command (`WAZUHARFIREWALLUNDOCOMMAND`, `WAZUHARHOSTDENYUNDOCOMMAND`); without one the

Repository: gensecaihq/Wazuh-MCP-Server
Website: https://wazuhmcp.netlify.app/
Stars: ★251
Language: Python
Last updated: 2026-10-09
active-responseaiclaudecompliancecybersecuritydevsecopsincident-responsellmmcpmcp-servermodel-context-protocolpythonsecuritysecurity-automationsiemsocthreat-detectionthreat-huntingvulnerability-managementwazuh

How to install Wazuh-MCP-Server

No install config was found in this README. See the repository for setup steps, then follow our guides for Claude Desktop, Cursor or VS Code.

Listed on Socketlist – add this badge to your README:

Badge markdown

[![Listed on Socketlist](https://socketlist.pages.dev/badge.svg)](https://socketlist.pages.dev/s/gensecaihq-wazuh-mcp-server/)

Maintain this project? Get it featured for free during launch →

Compare with ida-pro-mcp →

Related Security MCP servers

ida-pro-mcp by mrexodia · ★12870
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Security

hexstrike-ai by 0x4m4 · ★12793
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools
Security

jadx-ai-mcp by zinja-coder · ★2900
Plugin for JADX to integrate MCP server
Security

Qu1cksc0pe by CYB3RMX · ★2084
All-in-One malware analysis tool.
Security

OpenOSINT by OpenOSINT · ★1753
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized secur
Security

reverify by 2akouwu · ★1288
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Ground
Security

Weekly MCP digest – new and trending MCP servers in your inbox.