Wazuh MCP Server

Your Wazuh SIEM generates thousands of alerts, vulnerability findings, and agent events daily. Investigating them means juggling dashboards, writing API queries, and manually correlating data across tools.

This MCP server turns that workflow into a conversation:

This server sits between an LLM and your SIEM. Security is not optional.

# Generate a secure API key python -c "import secrets; print('wazuh_' + secrets.token_urlsafe(32))"

It is opt-in, lossless, and every response stays complete (a format change only, no cross-turn deduplication, so no alert is ever omitted). If encoding fails — or the encoder isn't installed — the tool falls back to JSON. It composes with the existingcompactfield-projection parameter.

The encoder is one zero-dependency package (pinned exact). Install it directly, or via thegcfextra from a source checkout:

- Noclusters.json→ single-cluster behavior from env vars, exactly as before.
- Withclusters.json→ named clusters, each with its own Manager (and optionally Indexer) credentials;"${ENV_VAR}"values are resolved from the environment so secrets stay out of the file. The env-configured cluster remains reachable asdefault.
- Cross-Cluster Search→ point clusters at a shared OpenSearch CCS coordinator and setccs_prefix(the remote-cluster name); alert/vulnerability queries becomeeu:wazuh-alerts-. An entry with"ccs_prefix": "*"gives you anallpseudo-cluster that searches every remote cluster at once.

src/wazuh_mcp_server/ ├── server.py # MCP protocol + 55 tool handlers ├── config.py # Environment-based configuration ├── auth.py # JWT + API key authentication ├── oauth.py # OAuth 2.0 with Dynamic Client Registration ├── security.py # Rate limiting, CORS, input validation ├── monitoring.py # Prometheus metrics, structured logging ├── resilience.py # Circuit breakers, retries, graceful shutdown ├── session_store.py # Pluggable sessions (in-memory + Redis) └── api/ ├── wazuh_client.py # Wazuh Manager REST API client └── wazuh_indexer.py # Wazuh Indexer (Elasticsearch) client

While this server gives you conversational access to Wazuh, Autopilot runs an eleven-agent AI SOC team on top of itaround the clock— a seven-stage reactive pipeline (triage → correlation → investigation → response) plus four proactive specialists (vulnerability management, threat intel, threat hunting, detection engineering). Every containment action is gated behind two-tier human approval. Runs on OpenClaw, Hermes, or NVIDIA NemoClaw.

Manual SOC: Alert → Analyst reviews → Hours → Response Agentic SOC: Alert → AI triages → Seconds → Response ready for approval

Legend:💻 Code · 🐛 Issues · 🔀 Pull Requests · 💬 Discussions

Enforces organisational AI usage policies at the agent layer — blocks prohibited model calls, enforces data residency rules, logs policy violations, and ensures AI governance policies are machine-executable.

Guardrails service for AI agents. Default-deny tool call evaluation with LLM safety analysis, priority-ordered decision matrix, and human-in-the-loop escalations. Session recording, behavioral analysis, MCP proxy, secret redaction, and real-time audit.

Trust and safety layer for AI agents — scores MCP servers for security risk, capability flags, and prompt injection.

Security gateway that blocks prompt-injection-driven tool calls (poisoned payments, fabricated results) using cryptographic receipts, value-provenance enforcement, and multi-model consensus. Sits in front of any MCP server.

Vaara is the tamper-evident runtime evidence layer for AI systems. It covers EU AI Act compliance, and any other case where you need to prove what an agent actually did. Open source, no SaaS, no telemetry.

KHEPRA MCP Server smithery badge MCP Registry License Container PQC Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal — with the World's First DoD PQC STIG built in. PQC-01-STIG-V1R1 — Full Whitepaper → 17 controls covering CNSA 2.0, FIPS 203/204/205, and the NSA's May 2026 MCP security advisory. The world's first DoD-style Post-Quantum Cryptography STIG, including the first PQC controls for agentic AI and MCP deployments.

Comprehensive audit logging for agent-to-agent interactions — immutable event trails, tamper-evident hashing, structured log export (SIEM-compatible), and compliance-grade retention for regulated industries.

Cryptographic runtime governance for AI agents. 20 tools. Sealed policy artifacts, continuous measurement, tamper-evident proof. Ed25519 + SHA-256.

AI Agent Supply Chain Security - Intercepts and validates every package installation, git clone, and script download triggered by AI coding agents before it executes.