lidless-labs/wazuh-mcp

Your SIEM answers live behind a console you babysit. wazuh-mcp reads Wazuh alerts, agents, and CVEs straight into your AI client. Read-only, nothing leaves the box.

This repository also configures its own agents. See what wazuh-mcp tells them →

3Stars on the repository
2Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

wazuh-mcp

01

lidless-labs/wazuh-mcp

MCP server Claude CodeCodexCursor +2

Read-only Wazuh SIEM/XDR control CLI with an MCP adapter. Runs locally from the wazuh-mcp npm package.

not rated 3 1mo ago A tokens not measured original MIT