An MCP server for the Wazuh SIEM/XDR platform that enables users to query agents, security alerts, detection rules, and decoders through Claude or other MCP clients. It provides specialized tools and prompts for investigating security alerts, performing agent health checks, and generating environmental security overviews.
Not monetized yet
Turn wazuh-mcp’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.
Install wazuh-mcp
For anyone using wazuh-mcp — no Lulu account needed# stdio server — install per the repository README: https://github.com/lidless-labs/wazuh-mcp
9 field-tested tactics as a designed playbook plus skills your coding agent can run. Free.
Get the Kit →FAQ
wazuh-mcp installs from source — follow the repository README.
Unrated out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Similar servers
Works well together
Your server?
This is for the person who owns wazuh-mcp — adds Lulu Ads to your own code. Not the install steps above, those are for your users.
Copies a ready prompt: your coding agent installs the lulu-ads SDK, wires the slot, and applies the widget design guide.
or set up manually at getlulu.dev/publishers
Get verified so you can edit the page. Your badge is already live below — no claim needed for that.
Managed hosting with monetization built in — waitlist.
[](https://getlulu.dev/mcps/wazuh-mcp)