mcp-server-wazuh (gbrigandi)
Rust-based MCP server bridging Wazuh SIEM to Claude Desktop for contextual security data.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for mcp-server-wazuh (gbrigandi), derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology. Are you the vendor? Factual corrections are free.
Overview
mcp-server-wazuh is a Rust implementation that bridges Wazuh SIEM to MCP clients, tailored for Claude Desktop, exposing Wazuh's security context (alerts, agents, rules) to an LLM. It is a lightweight, performance-oriented alternative for surfacing SIEM data conversationally. Querying live SIEM data means it inherits the sensitivity and data-egress considerations of any SIEM integration.
Key features
- Rust implementation
- Wazuh alerts and context to LLM
- Claude Desktop focused
Use cases
- Surface Wazuh alerts to an agent
- Contextualize SIEM data during investigation