- Conduid
- Marketplace
- #siem
MCP servers tagged siem
7 live MCP servers tagged "siem", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with siem.
gbrigandi/mcp-server-wazuh
Model Context Protocol server for the Wazuh SIEM/XDR platform
AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
Wirken
The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit log.
Rsigma
A complete Sigma detection toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:
Wazuh Openclaw Autopilot
Autonomous SOC layer for Wazuh using OpenClaw agents with MCP . Auto-triage alerts, correlate incidents, generate response plans with human-in-the-loop approval. Evidenc…
Wazuh Autopilot
Autonomous AI SOC for Wazuh SIEM — 11 security-expert agents triage, correlate, investigate and plan responses 24/7, every action gated by two-tier human approval. Runs on OpenCla…
WRG-11/wrg-sigma-rules
rule production corpus across 11 MITRE ATT&CK tactic categories. Standalone server + Claude Code plugin distribution.