mcp-server-wazuh
mcp-server-wazuh is an MCP server. It reaches wazuh. It needs WAZUH_API_PASSWORD and WAZUH_INDEXER_PASSWORD to authenticate. Its repository has 240 GitHub stars and is licensed under MIT; we last read it on 2026-10-22.
MCP Server for Wazuh SIEM
Install
MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. mcp-server-wazuh’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.
What it reaches, and what it needs
Reaches
wazuh
Credential
WAZUH_API_PASSWORD, WAZUH_INDEXER_PASSWORD
Maintenance
Stars
240
State
listed
Licence
MIT
Common questions about mcp-server-wazuh
- What does mcp-server-wazuh do?
- MCP Server for Wazuh SIEM
- How do I install mcp-server-wazuh?
- Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/gbrigandi/mcp-server-wazuh
- What does mcp-server-wazuh connect to, and what does it need?
- It reaches wazuh. The credentials we found in its source are WAZUH_API_PASSWORD and WAZUH_INDEXER_PASSWORD.
- Is mcp-server-wazuh official and is it maintained?
- We found nothing naming it as a vendor’s official server. Its repository has 240 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2025-12-12.
- What licence does mcp-server-wazuh use?
- The repository declares the MIT licence.