Wazuh-MCP-Server

Wazuh-MCP-Server is a defensive blue team framework designed to integrate with Claude Desktop or any MCP client, serving as a complement to offensive security tools. It provides access to over 100 SOC tools, including multi-provider threat intelligence, alert enrichment, and advanced threat correlation capabilities using the MITRE framework. Notable features include a modular architecture, a variety of transport options for communication, and extensive configuration options for integrating with Wazuh SIEM and various threat intelligence sources.