Quick Install
Copy the config for your editor. Some servers may need additional setup — check the README.
Add to claude_desktop_config.json:
{
"mcpServers": {
"wazuh-mcp": {
"command": "npx",
"args": [
"-y",
"solomonneas/wazuh-mcp"
]
}
}
}
Run in terminal:
claude mcp add wazuh-mcp npx -y solomonneas/wazuh-mcp
Add to .cursor/mcp.json:
{
"mcpServers": {
"wazuh-mcp": {
"command": "npx",
"args": [
"-y",
"solomonneas/wazuh-mcp"
]
}
}
}
README Excerpt
<p align="center"> <img src="docs/assets/wazuh-mcp-banner.jpg" alt="wazuh-mcp banner"> </p> <h1 align="center">wazuh-mcp</h1> <p align="center"> <strong>MCP server for Wazuh SIEM/XDR platform integration.</strong> </p> <p align="center"> <img src="https://img.shields.io/github/actions/workflow/status/solomonneas/wazuh-mcp/ci.yml?branch=main&style=for-the-badge&label=CI&logo=githubactions&logoColor=white" alt="CI status">
Tools (20)
WAZUH_INDEXER_PASSWORDWAZUH_INDEXER_URLWAZUH_INDEXER_USERNAMEWAZUH_INDEXER_VERIFY_SSLWAZUH_PASSWORDWAZUH_URLWAZUH_USERNAMEWAZUH_VERIFY_SSLadminget_agentget_agent_hotfixesget_agent_networkget_agent_osget_agent_packagesget_agent_portsget_agent_processesget_agent_statsget_alertget_alertsget_fim_files
Topics
ai-agentslog-analysismcpmodel-context-protocolmonitoringsecuritysiemwazuh