How to Get Started with Wazuh API Using Postman: A Step-by-Step Guide for Beginners

Are you interested in monitoring and securing your infrastructure using Wazuh? The Wazuh API allows you to interact easily with your Wazuh manager programmatically. In this complete beginner-friendly guide, we'll show you how to authenticate using JWT tokens and how to set up Postman to make real API requests to your Wazuh server. This guide is perfect for security professionals, system administrators, and developers looking to automate security monitoring and management through Wazuh's powerful API.

SECURITY

sardar awais

8/23/20251 min read

What You Will Learn in This Guide

  • How to generate a JWT token for Wazuh API authentication

  • How to set up Postman for Wazuh API interaction

  • How to make authorized API requests to list agents and more

  • How to save your JWT token in Postman for easy reuse

  • Key Wazuh API endpoints to try next


Prerequisites

  • Wazuh Manager installed and running locally or remotely
    Wazuh API enabled on port 55000 (default)
    Default Wazuh API credentials (wazuh:wazuh) or your custom credentials
    Postman installed or use the Postman Web version (Download Postman)

What You Will Learn in This Guide

  • How to generate a JWT token for Wazuh API authentication

  • How to set up Postman for Wazuh API interaction

  • How to make authorized API requests to list agents and more

  • How to save your JWT token in Postman for easy reuse

  • Key Wazuh API endpoints to try next


Prerequisites

  • Wazuh Manager installed and running locally or remotely
    Wazuh API enabled on port 55000 (default)
    Default Wazuh API credentials (wazuh:wazuh) or your custom credentials
    Postman installed or use the Postman Web version (Download Postman)

Step 1: Generate JWT Token Using Curl (Quick Check)

Before we jump into Postman, let's verify that you can get a JWT token via the command line using curl. Open your Command Prompt (Windows) or Terminal (Linux/Mac), and run:




This command authenticates with the Wazuh API using default credentials and returns a JWT token. If successful, you will see a long token string starting with eyJhbGciOiJFUzUxMiIsInR5cCI6IkpXVCJ9...

Prerequisites

  • Wazuh Manager installed and running locally or remotely
    Wazuh API enabled on port 55000 (default)
    Default Wazuh API credentials (wazuh:wazuh) or your custom credentials
    Postman installed or use the Postman Web version (Download Postman)