An MCP server that connects language models to a Wazuh SIEM cluster, enabling read-only plain-language queries, schema inspection, field coverage analysis, and decoder testing.
Install klaxon
For anyone using klaxon — no Lulu account needed# stdio server — install per the repository README: https://github.com/sec73/klaxon
9 field-tested tactics as a designed playbook plus skills your coding agent can run. Free.
Get the Kit →FAQ
klaxon installs from source — follow the repository README.
Submitted directly to Lulu MCPs.
3 out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Similar servers
Works well together