PAN-OS MCP Server logo

PAN-OS MCP Server

by edoscars

The PAN-OS MCP Server allows you to interact with Palo Alto Networks firewalls using natural language via a Model Control Protocol (MCP). It enables management and configuration of PAN-OS devices using tools like Claude through the XML API.

View on GitHub

Last updated: N/A

What is PAN-OS MCP Server?

This is a Model Control Protocol (MCP) server designed to facilitate interaction with Palo Alto Networks firewalls. It leverages the XML API to enable natural language-based management and configuration of PAN-OS devices.

How to use PAN-OS MCP Server?

  1. Clone the repository. 2. Install the required Python dependencies. 3. Configure the MCP server within your Claude Desktop setup, specifying the correct path. 4. Edit the pan-os.py file with your PAN-OS device's IP address and API key. 5. Use the available commands to interact with your PAN-OS device.

Key features of PAN-OS MCP Server

  • Authenticate with PAN-OS/Panorama using API key

  • Retrieve system information

  • Execute operational commands

  • Commit configurations

  • Perform configuration actions (set, edit, delete, rename, etc.)

  • Push policy from Panorama to managed devices

Use cases of PAN-OS MCP Server

  • Automated firewall configuration

  • Natural language-based firewall management

  • Retrieving firewall status and information

  • Scripting firewall operations

  • Integrating with AI tools for security automation

FAQ from PAN-OS MCP Server

What is the purpose of this server?

To provide a way to manage and configure Palo Alto Networks firewalls using natural language through a Model Control Protocol (MCP).

What are the requirements to use this server?

Python 3.13+, a Palo Alto Networks firewall, and API access to your PAN-OS device.

How do I install the server?

Clone the repository, install the dependencies, and configure the MCP server in your Claude Desktop setup.

How do I configure the server to connect to my firewall?

Edit the pan-os.py file and set the PA_HOST and PA_API_KEY variables to your firewall's IP address and API key.

What are some available commands?

get_system_info, op_command, commit_config, commit_all_shared_policy, and config_action.