Skip to content

Wazuh-MCP-Server **v1.0.0**

Compare
Choose a tag to compare
@alokemajumder alokemajumder released this 10 Jul 11:35
· 42 commits to main since this release
# 🚀 Wazuh-MCP-Server **v1.0.0** — “Unix Unification”

The first stable release of the Wazuh ↔ Model Context Protocol bridge is here!
v1.0.0 delivers production-ready Unix support, tighter security, and polished docs so you can chat with your Wazuh stack (“Show me critical alerts from the last hour 💬”) straight from Claude or any MCP-capable agent.


Screenshot 2025-07-09 at 14 46 26

✨ Highlights

Category What’s new
Unified Unix launcher macOS & Linux now share a single mcp_wrapper.sh, eliminating path/env quirks. Windows keeps the Python entry-point.
Hardened security – Purged sample creds<br>– Expanded .gitignore to block secrets/logs<br>– Clear prod-vs-dev SSL guidance
Docs overhaul Consolidated OS guides, added Quick Start, and fresh diagrams
Feature-complete toolkit Stable endpoints: get_alerts, analyze_threats, check_agent_health, compliance_check, risk_assessment, vulnerability_prioritization

🆕 New & Improved

  • Prompt packs for incident triage, threat hunting, compliance, forensics, and exec reporting
  • Robust logging & error handling — wrapper traps signals, cleans temp files, surfaces SSL/Wazuh errors clearly
  • Changelog introduced — future upgrades stay transparent

⚠️ Breaking / Action Required

  1. Linux & macOS users: replace any direct python main.py call with the new wrapper:

    {
      "mcpServers": {
        "wazuh": {
          "command": "/path/to/Wazuh-MCP-Server/mcp_wrapper.sh",
          "args": ["--stdio"]
        }
      }
    }

  1. Regenerate your Wazuh API-only user and update .env

  2. Verify SSL flagsVERIFY_SSL=true + WAZUH_ALLOW_SELF_SIGNED=true is the recommended minimum for production


🔐 Security Hardening

Area Change
Credentials Removed placeholder secrets; docs now show best-practice API user creation
Transport Self-signed vs CA-signed cert guidance with examples
Repo hygiene .gitignore now shields logs, traces, and env files

🙏 Special Thanks

Big shout-out to @marcolinux46 for tireless testing, detailed feedback, and reporting edge-case Wazuh issues that made this release rock-solid.


Happy threat-hunting with conversational AI!