Palo Alto Policy Management MCP Server

🚀 Palo Alto Policy Management MCP Server

A Model Context Protocol (MCP) server for managing Palo Alto Networks firewall policies. This server provides a standardized interface to interact with Palo Alto Networks firewall configurations via the MCP protocol.

🚀 Quick Start

This MCP server simplifies the management of Palo Alto Networks firewall policies. It offers a range of tools for querying and managing various types of rules.

✨ Features

• Integrate Palo Alto Networks API through MCP.
• Provide policy management capabilities.
• Implement type safety and a better development experience using TypeScript.

💻 Usage Examples

Available Tools

Query Tools

• get_security_rules - Retrieve security policy rules.
• get_nat_rules - Retrieve NAT policy rules.
• get_qos_rules - Retrieve QoS policy rules.
• get_policy_based_forwarding_rules - Retrieve policy-based forwarding rules.
• get_decryption_rules - Retrieve decryption policy rules.
• get_tunnel_inspection_rules - Retrieve tunnel inspection rules.
• get_application_override_rules - Retrieve application override rules.
• get_authentication_rules - Retrieve authentication policy rules.
• get_dos_rules - Retrieve DoS protection rules.
• get_sdwan_rules - Retrieve SD-WAN policy rules.

Management Tools

• create_rule - Create a new policy rule.
• update_rule - Update an existing policy rule.
• delete_rule - Delete a policy rule.

📦 Installation

Prerequisites

• Node.js (v16 or higher is recommended).
• npm or yarn package manager.
• Access to Palo Alto Networks firewalls.

Installation via Smithery

To automatically install the Palo Alto Policy Management Server via Smithery:

npx -y @smithery/cli install @DynamicEndpoints/palo-alto-policy-management-mcp-server --client claude

Manual Installation

1. Clone the repository:

git clone <repository-url>
cd paloalto-policy-server

2. Install dependencies:

npm install

📚 Documentation

Building the Project

To compile TypeScript code:

npm run build

Running the Server

Start the MCP server:

npm start

The server will start and listen for MCP protocol commands.

Development

This project uses TypeScript and is organized as follows:

• src/ - Source code directory.
• build/ - Compiled JavaScript output.
• package.json - Project configuration and dependencies.
• tsconfig.json - TypeScript configuration.

Dependencies

The main dependencies include:

• @modelcontextprotocol/sdk - For MCP protocol implementation.
• axios - For sending HTTP requests to the Palo Alto API.

📄 License

Please add appropriate license information.

🤝 Contribution

Contributions are welcome! Feel free to submit a Pull Request.