Wiz MCP Commands¶

Comprehensive Wiz MCP (Model Context Protocol) commands and workflows for AI-powered cloud security automation.

MCP Server Setup¶

Command	Description
`wiz-mcp install`	Install Wiz MCP server
`wiz-mcp configure`	Configure MCP server
`wiz-mcp start`	Start MCP server
`wiz-mcp stop`	Stop MCP server
`wiz-mcp status`	Check server status
`wiz-mcp --version`	Show version information
`wiz-mcp --help`	Show help information

Authentication and Connection¶

Command	Description
`wiz-mcp auth login`	Login to Wiz platform
`wiz-mcp auth logout`	Logout from platform
`wiz-mcp auth status`	Check authentication status
`wiz-mcp auth token`	Manage API tokens
`wiz-mcp connect --endpoint <url>`	Connect to Wiz endpoint
`export WIZ_API_TOKEN=<token>`	Set environment token

AI Assistant Integration¶

Command	Description
`wiz-mcp claude connect`	Connect to Claude Desktop
`wiz-mcp cursor connect`	Connect to Cursor IDE
`wiz-mcp vscode connect`	Connect to VS Code
`wiz-mcp chat enable`	Enable chat interface
`wiz-mcp chat disable`	Disable chat interface

Security Queries¶

Command	Description
`wiz-mcp query vulnerabilities`	Query vulnerability data
`wiz-mcp query compliance`	Query compliance status
`wiz-mcp query risks`	Query security risks
`wiz-mcp query assets`	Query cloud assets
`wiz-mcp query incidents`	Query security incidents
`wiz-mcp query policies`	Query security policies

Cloud Asset Management¶

Command	Description
`wiz-mcp assets list`	List cloud assets
`wiz-mcp assets scan`	Scan cloud assets
`wiz-mcp assets filter --type vm`	Filter by asset type
`wiz-mcp assets filter --risk high`	Filter by risk level
`wiz-mcp assets export`	Export asset inventory

Vulnerability Management¶

Command	Description
`wiz-mcp vulns list`	List vulnerabilities
`wiz-mcp vulns show <vuln-id>`	Show vulnerability details
`wiz-mcp vulns filter --severity critical`	Filter by severity
`wiz-mcp vulns filter --status open`	Filter by status
`wiz-mcp vulns remediate <vuln-id>`	Get remediation guidance
`wiz-mcp vulns export`	Export vulnerability data

Compliance Monitoring¶

Command	Description
`wiz-mcp compliance status`	Check compliance status
`wiz-mcp compliance --framework cis`	Check CIS compliance
`wiz-mcp compliance --framework pci`	Check PCI compliance
`wiz-mcp compliance --framework sox`	Check SOX compliance
`wiz-mcp compliance report`	Generate compliance report

Incident Response¶

Command	Description
`wiz-mcp incidents list`	List security incidents
`wiz-mcp incidents show <incident-id>`	Show incident details
`wiz-mcp incidents investigate <incident-id>`	Start investigation
`wiz-mcp incidents timeline <incident-id>`	Show incident timeline
`wiz-mcp incidents respond <incident-id>`	Initiate response

Policy Management¶

Command	Description
`wiz-mcp policies list`	List security policies
`wiz-mcp policies show <policy-id>`	Show policy details
`wiz-mcp policies validate`	Validate policies
`wiz-mcp policies violations`	Show policy violations
`wiz-mcp policies enforce <policy-id>`	Enforce policy

AI-Powered Analysis¶

Command	Description
`wiz-mcp ai analyze`	AI-powered security analysis
`wiz-mcp ai recommendations`	Get AI recommendations
`wiz-mcp ai prioritize`	AI-based risk prioritization
`wiz-mcp ai investigate <query>`	AI-assisted investigation
`wiz-mcp ai remediation <vuln-id>`	AI remediation suggestions

Automation Workflows¶

Command	Description
`wiz-mcp workflows list`	List automation workflows
`wiz-mcp workflows create <name>`	Create new workflow
`wiz-mcp workflows run <workflow-id>`	Run workflow
`wiz-mcp workflows schedule <workflow-id>`	Schedule workflow
`wiz-mcp workflows logs <workflow-id>`	View workflow logs

Integration Management¶

Command	Description
`wiz-mcp integrations list`	List integrations
`wiz-mcp integrations add <service>`	Add integration
`wiz-mcp integrations configure <service>`	Configure integration
`wiz-mcp integrations test <service>`	Test integration
`wiz-mcp integrations remove <service>`	Remove integration

Reporting and Analytics¶

Command	Description
`wiz-mcp reports generate`	Generate security report
`wiz-mcp reports schedule`	Schedule reports
`wiz-mcp reports export --format pdf`	Export report as PDF
`wiz-mcp reports export --format json`	Export report as JSON
`wiz-mcp analytics dashboard`	Open analytics dashboard

Cloud Provider Integration¶

Command	Description
`wiz-mcp aws connect`	Connect AWS account
`wiz-mcp azure connect`	Connect Azure subscription
`wiz-mcp gcp connect`	Connect GCP project
`wiz-mcp kubernetes connect`	Connect Kubernetes cluster
`wiz-mcp docker connect`	Connect Docker registry

Security Scanning¶

Command	Description
`wiz-mcp scan infrastructure`	Scan cloud infrastructure
`wiz-mcp scan containers`	Scan container images
`wiz-mcp scan code`	Scan source code
`wiz-mcp scan iac`	Scan Infrastructure as Code
`wiz-mcp scan secrets`	Scan for exposed secrets

Risk Assessment¶

Command	Description
`wiz-mcp risk assess`	Perform risk assessment
`wiz-mcp risk score`	Calculate risk score
`wiz-mcp risk trends`	Show risk trends
`wiz-mcp risk matrix`	Generate risk matrix
`wiz-mcp risk forecast`	Risk forecasting

Monitoring and Alerts¶

Command	Description
`wiz-mcp monitor start`	Start continuous monitoring
`wiz-mcp monitor stop`	Stop monitoring
`wiz-mcp alerts list`	List active alerts
`wiz-mcp alerts configure`	Configure alert rules
`wiz-mcp alerts test`	Test alert configuration

Data Export and Import¶

Command	Description
`wiz-mcp export --type vulnerabilities`	Export vulnerability data
`wiz-mcp export --type assets`	Export asset data
`wiz-mcp export --type compliance`	Export compliance data
`wiz-mcp import --file <file>`	Import data from file
`wiz-mcp sync`	Sync data with Wiz platform

Configuration Management¶

Command	Description
`wiz-mcp config show`	Show current configuration
`wiz-mcp config set <key> <value>`	Set configuration value
`wiz-mcp config reset`	Reset to default configuration
`wiz-mcp config validate`	Validate configuration
`wiz-mcp config backup`	Backup configuration

Performance and Optimization¶

Command	Description
`wiz-mcp optimize performance`	Optimize performance
`wiz-mcp cache clear`	Clear cache
`wiz-mcp cache status`	Check cache status
`wiz-mcp --parallel <count>`	Set parallel processing
`wiz-mcp --timeout <seconds>`	Set operation timeout

Debugging and Troubleshooting¶

Command	Description
`wiz-mcp debug --log-level debug`	Enable debug logging
`wiz-mcp debug connectivity`	Test connectivity
`wiz-mcp debug permissions`	Check permissions
`wiz-mcp debug validate`	Validate setup
`wiz-mcp logs --tail 100`	View recent logs

Environment Variables¶

Variable	Description
`WIZ_API_TOKEN`	Wiz API authentication token
`WIZ_ENDPOINT`	Wiz API endpoint URL
`WIZ_MCP_PORT`	MCP server port
`WIZ_MCP_HOST`	MCP server host
`WIZ_LOG_LEVEL`	Logging level

Configuration Files¶

File	Description
`wiz-mcp.config.json`	Main configuration file
`wiz-mcp-policies.yml`	Policy configuration
`wiz-mcp-workflows.yml`	Workflow definitions
`.wiz-mcp-ignore`	Files to ignore

Docker Integration¶

Command	Description
`docker run wiz/mcp-server`	Run MCP server in Docker
`docker run -p 8080:8080 wiz/mcp-server`	Run with port mapping
`docker run -e WIZ_API_TOKEN=$TOKEN wiz/mcp-server`	Run with environment variables

Kubernetes Deployment¶

Command	Description
`kubectl apply -f wiz-mcp-deployment.yaml`	Deploy MCP server
`kubectl get pods -l app=wiz-mcp`	Check MCP pods
`kubectl logs -l app=wiz-mcp`	View MCP logs
`kubectl port-forward svc/wiz-mcp 8080:8080`	Port forward to MCP service

API Endpoints¶

Endpoint	Description
`GET /api/v1/health`	Health check
`GET /api/v1/vulnerabilities`	Get vulnerabilities
`GET /api/v1/assets`	Get cloud assets
`GET /api/v1/compliance`	Get compliance status
`POST /api/v1/scan`	Trigger security scan

Webhook Configuration¶

Event	Description
`vulnerability.detected`	New vulnerability found
`compliance.violation`	Compliance violation detected
`incident.created`	Security incident created
`risk.elevated`	Risk level elevated
`scan.completed`	Security scan completed