LocalFree

Wazuh MCP server

gbrigandi/mcp-server-wazuh

Access real-time security alerts and event data from Wazuh SIEM.

240 GitHub stars61 forks

Install Wazuh in Claude Code

This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:

Claude Code
claude mcp add wazuh -- <command to start the server>

Frequently asked questions

What does the Wazuh MCP server do?

Access real-time security alerts and event data from Wazuh SIEM.

Is the Wazuh MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Wazuh run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Wazuh to Claude Code?

Follow the install steps in the project's README at https://github.com/gbrigandi/mcp-server-wazuh, then register it with "claude mcp add".

More security & identity MCP servers

View all