Skip to content

Releases: gensecaihq/Wazuh-MCP-Server

Wazuh MCP Server v1.0.0

13 Jun 09:39
d056cb7
Compare
Choose a tag to compare
# v1.0.0 - Initial Release

**Released:** June 13, 2024

## Features

### Tools (14)
- `get_alerts` - Retrieve security alerts with filtering
- `analyze_threats` - AI-powered threat analysis
- `risk_assessment` - Multi-factor risk scoring
- `detect_anomalies` - ML-based anomaly detection
- `check_agent_health` - Agent health monitoring
- `compliance_check` - Framework compliance validation
- `generate_compliance_report` - Multi-framework reporting
- `check_ioc` - IOC reputation checking
- `threat_hunt` - Pattern-based threat hunting
- `create_incident` - Incident management
- `incident_timeline` - Timeline generation
- `vulnerability_scan` - Vulnerability assessment
- `security_baseline` - Security configuration assessment
- `agent_inventory` - System inventory retrieval

### Resources (7)
- `wazuh://alerts/recent`
- `wazuh://alerts/summary`
- `wazuh://agents/status`
- `wazuh://vulnerabilities/critical`
- `wazuh://compliance/status`
- `wazuh://threats/active`
- `wazuh://incidents/open`

### Integrations
- Wazuh 4.x API
- VirusTotal API
- Shodan API
- AbuseIPDB API
- Claude Desktop (MCP Protocol)

### Compliance Frameworks
- PCI DSS
- HIPAA
- GDPR
- NIST
- ISO 27001

### Core Features
- Natural language security queries
- Async architecture
- JWT authentication
- Docker support
- Cross-platform installers (Windows/Linux/macOS)
- MITRE ATT&CK mapping
- Risk scoring algorithm
- Statistical anomaly detection

## Installation

```bash
pip install -r requirements.txt
cp .env.example .env
# Configure .env with Wazuh credentials
python src/wazuh_mcp_server.py

Requirements

  • Python 3.8+
  • Wazuh 4.x
  • Claude Desktop