Wazuh

Wazuh MCP Server is a Rust-based Model Context Protocol (MCP) server that bridges Wazuh's Security Information and Event Management (SIEM) platform with AI assistants such as Claude Desktop. It enables natural language access to real-time security data, including alerts, vulnerabilities, compliance metrics, and agent/system status for threat detection and incident response. Designed for security analysts, compliance teams, and operations personnel, it streamlines threat hunting, vulnerability management, and audit workflows by allowing AI-driven, context-rich queries and integrations with platforms like TheHive, Cortex, and MISP.