Wazuh-MCP-Server

Name: gensecaihq/Wazuh-MCP-Server
Author: gensecaihq

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.

MCP Servers231 stars63 forks● PythonMITUpdated 6d ago

ClaudeWave Trust Score

100/100

✓ Verified

Passed

✓Open-source license (MIT)
✓Actively maintained (<30d)
✓Healthy fork ratio
✓Clear description
✓Topics declared
✓Mature repo (>1y old)

Last scanned: 9/11/2026

Install in Claude Code / Claude Desktop

Method: UVX (Python) · wazuh-mcp-server

Claude Code CLI

claude mcp add wazuh -- uvx wazuh-mcp-server

claude_desktop_config.json (Claude Desktop)

{
  "mcpServers": {
    "wazuh": {
      "command": "uvx",
      "args": ["wazuh-mcp-server"]
    }
  }
}

1. Run the command above in your terminal (Claude Code), or paste the JSON config into claude_desktop_config.json (Claude Desktop).

2. Replace any <placeholder> values with your API keys or paths.

3. Restart Claude. The MCP server and its tools appear automatically.

💡 Package name inferred from the repository name. Verify it exists on PyPI, or clone https://github.com/gensecaihq/Wazuh-MCP-Server and follow its README.

Use cases

Security Dev Tools AI / ML

About

MCP Servers overview

README preview not available. Visit the repo on GitHub for full documentation.

Topics

active-responseaiclaudecompliancecybersecuritydevsecopsincident-responsellmmcpmcp-servermodel-context-protocolpythonsecuritysecurity-automationsiemsocthreat-detectionthreat-huntingvulnerability-managementwazuh

Frequently asked

What people ask about Wazuh-MCP-Server

What is gensecaihq/Wazuh-MCP-Server?

gensecaihq/Wazuh-MCP-Server is mcp servers for the Claude AI ecosystem. Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready. It has 231 GitHub stars and its last recorded update is dated 2026-09-04.

How do I install Wazuh-MCP-Server?

You can install Wazuh-MCP-Server by cloning the repository (https://github.com/gensecaihq/Wazuh-MCP-Server) or following the README instructions on GitHub. ClaudeWave also provides quick install blocks on this page.

Is gensecaihq/Wazuh-MCP-Server safe to use?

Our security agent has analyzed gensecaihq/Wazuh-MCP-Server and assigned a Trust Score of 100/100 (tier: Verified). See the full breakdown of passed checks and flags on this page.

Who maintains gensecaihq/Wazuh-MCP-Server?

gensecaihq/Wazuh-MCP-Server is maintained by gensecaihq. The last recorded GitHub activity is dated 2026-09-04, with 9 open issues.

Are there alternatives to Wazuh-MCP-Server?

Yes. On ClaudeWave you can browse similar mcp servers at /categories/mcp, sorted by popularity or recent activity.

1-click deploy

Deploy Wazuh-MCP-Server to your cloud

Ship this repo to production in minutes. Each platform spins up its own environment with editable env vars.

Vercel Railway Render

Embeddable badge

Maintain this repo? Add a badge to your README

Drop the badge into your GitHub README to show it's tracked on ClaudeWave. Each badge links back to this page and reflects the live Trust Score.

Markdown (README)

[![Featured on ClaudeWave](https://claudewave.com/api/badge/gensecaihq-wazuh-mcp-server)](https://claudewave.com/repo/gensecaihq-wazuh-mcp-server)

HTML

<a href="https://claudewave.com/repo/gensecaihq-wazuh-mcp-server"><img src="https://claudewave.com/api/badge/gensecaihq-wazuh-mcp-server" alt="Featured on ClaudeWave: gensecaihq/Wazuh-MCP-Server" width="320" height="64" /></a>

More MCP Servers

n8n-io

n8n

today

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

204k60.6kTypeScript

MCP ServersaiapisInstall

open-webui

today

User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

151.6k22.2kPython

MCP ServersaillmInstall

google-gemini

gemini-cli

today

An open-source AI agent that brings the power of Gemini directly into your terminal.

106.9k14.5kTypeScript

MCP Serversaiai-agentsInstall

koala73

worldmonitor

today

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

86k13kTypeScript

MCP ServersagentaiInstall

netdata

today

The fastest path to AI-powered full stack observability, even for lean teams.

80.5k6.6kGo

MCP ServersaialertingInstall

D4Vinci

Scrapling

6d ago

🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!

80.1k8.1kPython

MCP Serversaiai-scrapingInstall