Wazuh-MCP-Server

active

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/gensecaihq/Wazuh-MCP-Server
License: MIT
Last update: 2026-11-06
GitHub stars: ★ 272
Homepage: wazuhmcp.netlify.app/

active-response ai claude compliance cybersecurity devsecops incident-response llm mcp mcp-server model-context-protocol python

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.