🔐 SB SIEM MCP

Note: Independent, third-party project — not affiliated with or endorsed by Wazuh Inc. Actively developed and tested against live Wazuh instances; review and test before production deployment.

28 MCP tools. 9 domains. Tested on Wazuh 4.14.5 against live instances. AI-powered security operations for Wazuh SIEM/XDR.

"Show me all critical alerts in the last 6 hours, cross-reference with MITRE ATT&CK, and check if any affected hosts have unpatched CVEs."

One prompt. Your AI assistant queries 7,514 alerts, checks 5,038 FIM records, scans 12 CVEs, cross-references 750 MITRE techniques, audits CIS compliance, and triggers incident response — all through your Wazuh infrastructure.

How It Works (30 seconds)

You already have Wazuh running somewhere. The MCP server is a local process that your AI client spawns as a child — just like a language server or linter.

Your Machine                              Your Wazuh Server
┌────────────────────┐                   ┌──────────────────┐
│ Zed / Claude       │                   │                  │
│   │                │                   │  Wazuh API       │
│   ▼                │                   │  :55000          │
│ python -m          │───────HTTPS──────▶│                  │
│ wazuh_mcp.server   │                   │  Wazuh Indexer   │
│ (child process)    │───────HTTPS──────▶│  :9200           │
└────────────────────┘                   └──────────────────┘

No Docker required. No containers. No agents to install. Just point it at your existing Wazuh and start asking questions in natural language.

🛡️ Security Features (Defense in Depth)

• Input validation — Shell metacharacter blocking, regex for agent IDs, IPs, CVEs, MITRE IDs
• Rate limiting — Token-bucket: 30/60s for read tools, 5/120s for destructive
• Output sanitization — Redacts AWS keys, JWT tokens, SSH keys, API keys, passwords from LLM-bound data
• Audit logging — Append-only JSONL trail for all destructive actions
• Confirmation gate — Two-step confirm=True + expiring token for active response tools
• RBAC — 4 built-in roles: viewer, analyst, admin, soc with hierarchical access
• Dependabot + pip-audit + CodeQL — Automated dependency scanning on every push + weekly schedule
• Non-root Docker — Production container runs as unprivileged wazuhmcp user
• TLS support — Verify server certificates, or disable for local dev via WAZUH_INSECURE
• Prometheus metrics — 7 metrics exposed on :9090/metrics for SOC monitoring (latency, errors, rate limits)
• OpenAPI 3.0 / Swagger UI — Interactive API docs at /docs, raw spec at /openapi.json

📊 Architecture

┌──────────────────────────┐         ┌──────────────────────────┐
│  Your AI Client           │         │  Wazuh Infrastructure     │
│  (Zed / Claude / Cursor)  │         │                          │
│          │                │         │  Wazuh API :55000        │
│          ▼                │         │  ├─ Agents, Groups       │
│  ┌──────────────────┐     │         │  ├─ SCA, FIM, MITRE

... [View full README on GitHub](https://github.com/Sbharadwaj05/sb-siem-mcp#readme)