About Sb Siem MCP
Sb Siem MCP is an MCP server in the Security category: sb-siem-mcp is an MCP server that connects LLMs (like Claude) to Wazuh SIEM, enabling natural language threat hunting, alert analysis, compliance checks, and incident response through 28 security-focused tools. Built with defense-in-depth security, RBAC, and audit logging.
Install
git clone https://github.com/Sbharadwaj05/sb-siem-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (3)
wazuh_alert_summaryAggregated: severity distribution, top rules/IPs, MITRE coverage
Parameters not published.
wazuh_get_alertFetch single alert by ID with full context
Parameters not published.
wazuh_list_alertsQuery alerts by severity, agent, rule ID, MITRE, search
Parameters not published.
Ask AI
Ask AI about Sb Siem MCP
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.