mcp-server-wazuh

stdio MCP server for Wazuh 5. It reads the manager API on port 55000 (agents, groups, cluster, MITRE) and the indexer on port 9200 (events, findings, vulnerability state).

Wazuh 5 removed the 4.x manager paths /manager, /rules, /syscheck, /sca and /vulnerability. Existing public servers such as gbrigandi/mcp-server-wazuh still call those paths, so this package talks to the 5.0 API instead of forking them. Rule matches are findings in wazuh-findings-v5*, not wazuh-alerts-*.

Install

apt install mcp-server-wazuh
apt install mcprack-mcp-server-wazuh

Environment

Variable	Secret	Default	Meaning
WAZUH_API_URL	no	https://127.0.0.1:55000	Manager API base URL
WAZUH_API_USER	yes	–	API user. Used once to obtain a JWT
WAZUH_API_PASSWORD	yes	–	API password
WAZUH_INDEXER_URL	no	https://127.0.0.1:9200	Indexer base URL
WAZUH_INDEXER_USER	yes	–	Indexer user
WAZUH_INDEXER_PASSWORD	yes	–	Indexer password
WAZUH_READ_ONLY	no	true	Hide restart_agents
WAZUH_VERIFY_TLS	no	true	Verify manager and indexer certificates
WAZUH_TIMEOUT	no	30	Seconds per request
WAZUH_MAX_CHARS	no	100000	Truncate larger tool output
WAZUH_EVENTS_INDEX	no	wazuh-events-v5*	Events data stream
WAZUH_FINDINGS_INDEX	no	wazuh-findings-v5*	Findings data stream
WAZUH_VULN_INDEX	no	wazuh-states-vulnerabilities	Vulnerability state index

The JWT is refreshed in-process and is never printed. A 401 fetches a new token once.

Tools

Tool	Title	Annotation	Backend
get_api_info	API Info	read-only	manager GET /
list_agents	List Agents	read-only	manager GET /agents
get_agent	Get Agent	read-only	manager GET /agents/{id}
get_agents_summary	Agents Summary	read-only	manager GET /agents/summary
list_groups	List Groups	read-only	manager GET /groups
get_cluster_status	Cluster Status	read-only	manager GET /cluster/status
list_cluster_nodes	List Cluster Nodes	read-only	manager GET /cluster/nodes
search_mitre	Search MITRE	read-only	manager GET /mitre/techniques
search_events	Search Events	read-only	indexer
search_findings	Search Findings	read-only	indexer
search_vulnerabilities	Search Vulnerabilities	read-only	indexer
restart_agents	Restart Agents	destructive	manager, only when WAZUH_READ_ONLY=false

restart_agents interrupts agents. Ask before calling it. Wazuh 5 may reject the restart endpoint.

Development

PYTHONPATH=src python3 -m pytest