Pan Os MCP

🚀 PAN-OS MCP Server

This project provides a Model Control Protocol (MCP) server for interacting with Palo Alto Networks firewalls via the XML API. It allows you to manage and configure your PAN-OS devices using natural language with Claude or other compatible tools.

🚀 Quick Start

This project offers a Model Control Protocol (MCP) server that enables interaction with Palo Alto Networks firewalls through the XML API. You can use Claude or other compatible tools to manage and configure your PAN-OS devices using natural language.

✨ Features

• Connect to PAN-OS/Panorama devices using API key authentication.
• Retrieve basic system information.
• Execute operational commands.
• Submit candidate configurations.
• Perform configuration operations (set, edit, delete, rename, etc.).
• Push policies from Panorama to managed devices.

📦 Installation

1. Clone the repository:

git clone https://github.com/edoscars/pan-os-mcp.git

2. Install the dependencies:

pip install -r requirements.txt

3. Add it to your Claude Desktop configuration (specify the correct path in args):

{
  "mcpServers": {
    "pan-os":{
      "command": "uv",
      "args":[
        "--directory",
        "C:\\Users\\USER\\pan-os",
        "run",
        "pan-os.py"
      ]
    }
  }
}

4. Edit the pan-os.py file to configure your PAN-OS device:

# -----------------------------------------------------------------------------
# Pan-OS / Panorama configuration (adjust according to your environment)
# -----------------------------------------------------------------------------
PA_HOST = "your-firewall-ip"
PA_API_KEY = "your-api-key"  

💻 Usage Examples

Basic Usage

The server provides several tools for interacting with PAN-OS:

• get_system_info: Retrieve basic system information.
• op_command: Execute operational commands using XML.
• commit_config: Submit candidate configurations.
• commit_all_shared_policy: Push policies from Panorama to managed devices.
• config_action: Perform configuration operations using XPath.

Advanced Usage

There is no specific advanced usage example provided in the original text. If you have relevant advanced usage scenarios, you can add corresponding code examples here.

📚 Documentation

This server offers multiple tools for interacting with PAN-OS. Each tool has its specific function and usage method, which can be used according to actual needs.

⚠️ Important Note

• This project is intended for demonstration and use in controlled environments.
• API keys in the code should be kept secure and not committed to public repositories.
• When using in a production environment, ensure proper authentication controls and consider adding TLS verification.

📄 License

MIT License