TokenToSeaMCP Hub
中文 Console

Wazuh MCP Server

gbrigandi

Access real-time security alerts and event data from Wazuh SIEM.

Setup

Choose your client, copy the config, then fill in any required environment variables.

Add to CursorAdd to VS Code

claude mcp add wazuh-server-gbrigandi --env WAZUH_HOST='<WAZUH_HOST>' --env WAZUH_PORT='<WAZUH_PORT>' --env WAZUH_USER='<WAZUH_USER>' --env WAZUH_PASS='<WAZUH_PASS>' -- docker pull ghcr.io/gbrigandi/mcp-server-wazuh:latest

Environment variables

  • WAZUH_HOST
  • WAZUH_PORT
  • WAZUH_USER
  • WAZUH_PASS

Replace the placeholders with your own credentials and keep them out of version control.