Wazuh-MCP-Server
AI-powered security operations for Wazuh SIEM—use any MCP-compatible client to ask security questions in plain English.
This MCP server turns complex security workflows into a conversational interface, allowing users to query alerts, hunt threats, check vulnerabilities, and trigger responses through natural conversation with AI assistants. It supports various LLMs and can operate in both cloud and local environments.
Compatible with
Install
Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"wazuh-mcp-server-2": {
"args": [
"mcp-server-wazuh-mcp-server-2"
],
"command": "uvx"
}
}
}Config File Location
Mac: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Linux: ~/.config/claude/claude_desktop_config.json
Some servers require additional setup - check the GitHub README for specific instructions.