AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Observability/
Wazuh-MCP-Server
Wazuh-MCP-Server logo

Wazuh-MCP-Server

Active·★ 257·MIT·Updated 2026-10-16

This production-ready MCP server bridges AI assistants with Wazuh SIEM, enabling natural language queries for security data. It simplifies threat analysis, vulnerability checks, and compliance reporting by eliminating context-switching and manual API interactions.

Wazuh-MCP-Server sits in the Observability category, so it is usually better judged by workflow fit, deployment style, and team needs than by isolated features alone. Based on the available metadata, it leans most clearly toward Full MCP Protocol Compliance (2025-11-25). A representative use case is Natural language querying for security alerts and data.. The listed license is MIT. GitHub stars are currently 256. Relevant tags include AI Integration, SIEM.

This write-up is based on the project's README and public repository data. We have not hand-tested the tool.

© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides
#AI Integration
#SIEM
#Wazuh
#Security Automation
#MCP Protocol
#API Connector
#Cybersecurity
$ Install
$ git clone https://github.com/gensecaihq/Wazuh-MCP-Server.git && cd Wazuh-MCP-Server && cp .env.example .env && python deploy.py
↗ Visit site★ GitHub
01

Features

01Full MCP Protocol Compliance (2025-11-25)
0229 Specialized Security Tools
03Flexible Authentication (OAuth, JWT, Authless)
04Production-Ready Resilience and Monitoring
05Dockerized Multi-platform Deployment
02

Why choose it

+Full MCP Protocol Compliance (2025-11-25)
+29 Specialized Security Tools
+Natural language querying for security alerts and data.
+Supports 5 platforms or runtime environments.
03

Trade-offs

!The final decision should still be made through side-by-side comparison with similar tools.
04

Compatibility

Python
Runtime
Verified via docs
Wazuh
SIEM Platform
Verified via docs
Docker
Deployment
Verified via docs
MCP Protocol
Standard
Verified via docs
Claude AI
AI Assistant
Verified via docs
05

Quick start

1
$ git clone https://github.com/gensecaihq/Wazuh-MCP-Server.git
2
$ cd Wazuh-MCP-Server
3
$ cp .env.example .env
4
$ python deploy.py
06

Use cases

↳Natural language querying for security alerts and data.
↳Automated vulnerability and agent health checks.
↳Automatic alert triage and incident case creation.
↳AI-driven response planning and risk assessment.
07

Alternatives

⚡Top VS:
VSmcp-panther★47→VSfalcon-mcp★272→VSmetorial-platform★221→

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Compatibility05Quick start06Use cases
VS
Wazuh-MCP-Server
★93
→
mcp-panther logo
mcp-panther★ 47
Write detections, investigate alerts, and query logs from your favorite AI agents
VSCompare→
falcon-mcp logo
falcon-mcp★ 272
Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting
VSCompare→
metorial-platform logo
metorial-platform★ 221
The engine powering hundreds of thousands of MCP connections 🤖 🔥
VSCompare→
Wazuh-MCP-Server logo
Wazuh-MCP-Server★ 93
Wazuh MCP Server: AI-Driven SOC Automation
VSCompare→
minibridge logo
minibridge★ 55
Make your MCP servers secure and production ready
VSCompare→
winccoa-ae-js-mcpserver logo
winccoa-ae-js-mcpserver★ 26
WinCC OA MCP Server
VSCompare→
mcp-context-forge logo
mcp-context-forge★ 4.7k
A Model Context Protocol (MCP) Gateway & Registry. Serves as a central management point for tools, resources, and prompts that can be accessed by MCP-compatible LLM applications. Converts REST API endpoints to MCP, composes virtual MCP servers with added security and observability, and converts between protocols (stdio, SSE, Streamable HTTP).
VSCompare→
toolkit logo
toolkit★ 938
Agentic tooling for Sentry
VSCompare→
See all alternatives →
07
Alternatives
gensecaihq /
Wazuh-MCP-Server
↗

AI-powered security operations for Wazuh SIEM—use any MCP-compatible client to ask security questions in plain English. Faster threat detection, incident triage, and compliance checks with real-time monitoring and anomaly spotting. Production-ready MCP server for conversational SOC workflows.

257MIT
Last commit1w ago
StatusActive
CategoryObservability
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit