MCP Server Wazuh vs MCP Shodan

In-depth architectural comparison of the MCP Server Wazuh and MCP Shodan MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

Which MCP Server Should You Choose?

Choose MCP Server Wazuh when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: API Key required (Free / Open Source).
• Primary tools included: Wazuh alert and event access, Agent health, process, and port monitoring, Vulnerability summaries and prioritization data.

Explore MCP Server Wazuh Details

Choose MCP Shodan when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: API Key required (BYOK (Pay Provider Direct)).
• You have access to required keys: SHODAN_API_KEY.
• Primary tools included: ip_lookup, ip, shodan_search.

Feature & Specification Comparison

Specification	MCP Server Wazuh gbrigandi Security	MCP Shodan BurtTheCoder Security
Summary	A Rust-based MCP server bridging Wazuh SIEM with AI assistants, providing real-time security alerts and event data for enhanced contextual understanding.	MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
Category & Scope

Tools & Capabilities Breakdown

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

{
  "mcpServers": {
    "gbrigandi-mcp-server-wazuh": {
      "command": "npx",
      "args": [
        "-y",
        "gbrigandi-mcp-server-wazuh"
      ]
    }
  }
}

{
  "mcpServers": {
    "burtthecoder-mcp-shodan": {
      "command": "npx",
      "args": [
        "-y",
        "@burtthecoder/mcp-shodan"
      ],
      "env": {
        "SHODAN_API_KEY": "YOUR_SHODAN_API_KEY_HERE"
      }
    }
  }
}

Related MCP Server Comparisons