PanOS MCP

MCP server claude

Manage Palo Alto Networks firewalls and Panorama with 116 tools — read system state, security policies, logs, VPN status, and more. Supports configuration changes with staged commits. Connect using just a hostname and API key.

Tools

get_firewall_info
get_ha_status
get_active_sessions
get_system_resources
get_interfaces
get_zones
get_routing_table
get_arp_table
get_vlans
get_dhcp_leases
get_dns_proxy
get_static_routes
add_static_route
delete_static_route
get_security_rules
get_security_profiles
get_security_profile_groups
get_pbf_rules
get_dos_profiles
get_qos_rules
get_address_objects
get_address_groups
get_service_objects
get_service_groups
get_application_filters
get_nat_rules
get_userid_mappings
get_userid_groups
get_userid_config
get_admins
get_admin_roles
get_auth_profiles
get_ipsec_tunnels
get_globalprotect_users
get_globalprotect_config
panorama_get_managed_devices
panorama_get_device_groups
panorama_get_templates
panorama_get_template_stacks
panorama_get_shared_address_objects
panorama_get_shared_address_groups
panorama_get_shared_service_objects
panorama_get_shared_service_groups
panorama_get_pre_rules
panorama_get_post_rules
panorama_get_device_group_nat_rules
panorama_get_log_collectors
panorama_get_collector_groups
panorama_get_push_status
panorama_get_commit_status
panorama_get_managed_device_software
panorama_get_ha_status
panorama_get_device_group_hierarchy
panorama_get_shared_security_profiles
panorama_get_shared_profile_groups
panorama_add_pre_rule
panorama_move_pre_rule
panorama_delete_pre_rule
panorama_add_post_rule
panorama_move_post_rule
panorama_delete_post_rule
panorama_add_device_group_nat_rule
panorama_move_device_group_nat_rule
panorama_delete_device_group_nat_rule
get_traffic_logs
get_threat_logs
get_system_logs
get_config_logs
get_wildfire_status
get_antivirus_version
get_content_versions
get_url_categories
get_certificates
get_decryption_rules
get_decryption_profiles
get_licenses
get_license_usage
add_address_object
add_address_group
add_service_object
add_service_group
add_security_rule
add_nat_rule
add_decryption_rule
move_security_rule
move_nat_rule
move_decryption_rule
delete_security_rule
delete_nat_rule
delete_decryption_rule
set_security_rule_disabled
set_nat_rule_disabled
set_decryption_rule_disabled
delete_address_object
delete_address_group
delete_service_object
delete_service_group
get_tags
add_tag
delete_tag
add_pbf_rule
move_pbf_rule
delete_pbf_rule
set_pbf_rule_disabled
add_qos_rule
move_qos_rule
delete_qos_rule
set_qos_rule_disabled
set_config
delete_config
panorama_commit
commit
panorama_push_to_devices
run_op_command
get_config_xpath
list_firewalls