mirror of
https://github.com/gbrigandi/mcp-server-wazuh.git
synced 2025-07-13 07:04:49 -06:00
47b33414cb
Major enhancements: - Added Docker image building and publishing to GitHub Container Registry with multi-platform support (linux/amd64, linux/arm64) - Expanded from basic alert retrieval to comprehensive security operations with 14 MCP tools covering: * Vulnerability management (agent vulnerability summaries, critical vulnerabilities) * Agent monitoring (running agents, processes, network ports) * System statistics (weekly stats, remoted stats, log collector stats) * Log analysis (manager logs, error logs with search capabilities) * Cluster management (health checks, node listing) - Updated environment configuration to support both Wazuh Manager API and Wazuh Indexer with proper SSL handling - Enhanced documentation with detailed use cases, Docker deployment options, and comprehensive tool descriptions - Upgraded wazuh-client dependency to v0.1.1 for expanded API capabilities - Added agent ID formatting and validation for consistent three-digit zero-padded identifiers This transforms the server from a simple alert fetcher into a full-featured security operations platform for AI-assisted Wazuh management.
40 lines
1.4 KiB
Plaintext
40 lines
1.4 KiB
Plaintext
# Wazuh MCP Server Environment Configuration Example
|
|
#
|
|
# Copy this file to .env and fill in your specific values.
|
|
# Lines starting with # are comments.
|
|
|
|
# Wazuh Manager API Configuration
|
|
# Hostname or IP address of the Wazuh Manager API server.
|
|
WAZUH_API_HOST=localhost
|
|
# Port number for the Wazuh Manager API.
|
|
WAZUH_API_PORT=55000
|
|
# Username for Wazuh Manager API authentication.
|
|
WAZUH_API_USERNAME=wazuh
|
|
# Password for Wazuh Manager API authentication.
|
|
WAZUH_API_PASSWORD=wazuh
|
|
|
|
# Wazuh Indexer API Configuration
|
|
# Hostname or IP address of the Wazuh Indexer API server.
|
|
WAZUH_INDEXER_HOST=localhost
|
|
# Port number for the Wazuh Indexer API.
|
|
WAZUH_INDEXER_PORT=9200
|
|
# Username for Wazuh Indexer API authentication.
|
|
WAZUH_INDEXER_USERNAME=admin
|
|
# Password for Wazuh Indexer API authentication.
|
|
WAZUH_INDEXER_PASSWORD=admin
|
|
|
|
# SSL Configuration for Wazuh Connections
|
|
# Set to "true" to verify SSL certificates for Wazuh API and Indexer connections.
|
|
# Set to "false" to disable SSL verification (not recommended for production).
|
|
WAZUH_VERIFY_SSL=false
|
|
|
|
# Protocol for Wazuh Connections (Optional)
|
|
# Overrides the default protocol used by the wazuh-client.
|
|
# Typically "http" or "https". If not set, the client's default (usually https) will be used.
|
|
# WAZUH_TEST_PROTOCOL=https
|
|
|
|
# Logging Configuration
|
|
# Controls the log level for the application and its dependencies.
|
|
# Examples: "info", "debug", "trace", "mcp_server_wazuh=debug,wazuh_client=info"
|
|
RUST_LOG=info
|