wazuh-mcp-server MCP Server

Lets an MCP client — Claude, Open WebUI backed by a local model, or any client that speaks Streamable HTTP — query alerts, agents, vulnerabilities and compliance data, and dispatch active responses…

Local server

What is the wazuh-mcp-server MCP Server?

wazuh-mcp-server is an MCP project maintained in the gensecaihq/wazuh-mcp-server repository. The maintainer describes its purpose as “Lets an MCP client — Claude, Open WebUI backed by a local model, or any client that speaks Streamable HTTP — query alerts, agents, vulnerabilities…”. Read the project documentation for the complete scope.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
Totals41 read tools, 14 write tools. Tokens without wazuh:write do not see the write tools in tools/list.
Promptssecurity_investigation, threat_hunt, compliance_audit, vulnerability_assessment, iso27001_assessment.
ToolsetCount
alerts5 R
agents6 R
vulnerabilities3 R
analysis5 R
web_search1 R
compliance6 R
system10 R