# wazuh-mcp-server

> Use this tool when you need to streamline security operations and incident response through natural language queries. The wazuh-mcp-server enables security analysts to query Wazuh SIEM/XDR for alert triage, threat hunting, and compliance audits, taking in natural language prompts as input and providing relevant security insights as output. It solves problems related to manual log analysis, threat detection, and compliance auditing, making it ideal for use cases involving security investigations and incident response.

Canonical page: https://skillsregistry.net/skills/sbharadwaj05-wazuh-mcp-server  
JSON: https://api.skillsregistry.net/v1/skills/sbharadwaj05-wazuh-mcp-server

## Description

AI-powered MCP server that enables security analysts to query Wazuh SIEM/XDR for alert triage, threat hunting, compliance audits, and incident response through natural language prompts.

## Trust

- **Trust score (0–1):** 0.60
- **Verification tier:** unverified

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** ai-ml
- **Updated:** 2026-06-26

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/fk7r2cq0zh)
- **Repository:** <https://github.com/Sbharadwaj05/sb-siem-mcp>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "sbharadwaj05-wazuh-mcp-server"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/sbharadwaj05-wazuh-mcp-server` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/sbharadwaj05-wazuh-mcp-server/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt