Access real-time security alerts and event data from Wazuh SIEM.
接入配置
选择客户端,复制配置,再按项目文档补齐环境变量。
claude mcp add wazuh-server-gbrigandi --env WAZUH_HOST='<WAZUH_HOST>' --env WAZUH_PORT='<WAZUH_PORT>' --env WAZUH_USER='<WAZUH_USER>' --env WAZUH_PASS='<WAZUH_PASS>' -- docker pull ghcr.io/gbrigandi/mcp-server-wazuh:latest~/.codex/config.toml
[mcp_servers.wazuh-server-gbrigandi]
command = "docker"
args = ["pull", "ghcr.io/gbrigandi/mcp-server-wazuh:latest"]
env = { WAZUH_HOST = "<WAZUH_HOST>", WAZUH_PORT = "<WAZUH_PORT>", WAZUH_USER = "<WAZUH_USER>", WAZUH_PASS = "<WAZUH_PASS>" }
# codex mcp add wazuh-server-gbrigandi --env WAZUH_HOST='<WAZUH_HOST>' --env WAZUH_PORT='<WAZUH_PORT>' --env WAZUH_USER='<WAZUH_USER>' --env WAZUH_PASS='<WAZUH_PASS>' -- docker pull ghcr.io/gbrigandi/mcp-server-wazuh:latest~/.cursor/mcp.json
{
"mcpServers": {
"wazuh-server-gbrigandi": {
"command": "docker",
"args": [
"pull",
"ghcr.io/gbrigandi/mcp-server-wazuh:latest"
],
"env": {
"WAZUH_HOST": "<WAZUH_HOST>",
"WAZUH_PORT": "<WAZUH_PORT>",
"WAZUH_USER": "<WAZUH_USER>",
"WAZUH_PASS": "<WAZUH_PASS>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"wazuh-server-gbrigandi": {
"type": "stdio",
"command": "docker",
"args": [
"pull",
"ghcr.io/gbrigandi/mcp-server-wazuh:latest"
],
"env": {
"WAZUH_HOST": "<WAZUH_HOST>",
"WAZUH_PORT": "<WAZUH_PORT>",
"WAZUH_USER": "<WAZUH_USER>",
"WAZUH_PASS": "<WAZUH_PASS>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"wazuh-server-gbrigandi": {
"command": "docker",
"args": [
"pull",
"ghcr.io/gbrigandi/mcp-server-wazuh:latest"
],
"env": {
"WAZUH_HOST": "<WAZUH_HOST>",
"WAZUH_PORT": "<WAZUH_PORT>",
"WAZUH_USER": "<WAZUH_USER>",
"WAZUH_PASS": "<WAZUH_PASS>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"wazuh-server-gbrigandi": {
"command": "docker",
"args": [
"pull",
"ghcr.io/gbrigandi/mcp-server-wazuh:latest"
],
"env": {
"WAZUH_HOST": "<WAZUH_HOST>",
"WAZUH_PORT": "<WAZUH_PORT>",
"WAZUH_USER": "<WAZUH_USER>",
"WAZUH_PASS": "<WAZUH_PASS>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"wazuh-server-gbrigandi": {
"command": "docker",
"args": [
"pull",
"ghcr.io/gbrigandi/mcp-server-wazuh:latest"
],
"env": {
"WAZUH_HOST": "<WAZUH_HOST>",
"WAZUH_PORT": "<WAZUH_PORT>",
"WAZUH_USER": "<WAZUH_USER>",
"WAZUH_PASS": "<WAZUH_PASS>"
}
}
}
}需要的环境变量
WAZUH_HOSTWAZUH_PORTWAZUH_USERWAZUH_PASS
把占位值换成你自己的密钥;不要把密钥提交到代码仓库。