Palo Alto Device Server

A Model Context Protocol (MCP) server for managing Palo Alto firewalls through their REST API. This server provides tools for system information retrieval, firewall upgrades, content updates, and certificate management.

Features

• Get system information from Palo Alto firewalls
• Upgrade firewall PAN-OS versions
• Manage HA firewall upgrades through Panorama
• Automatically check and install content updates
• Certificate management
• Run operational mode commands

Prerequisites

• Node.js
• TypeScript
• Palo Alto firewall with REST API access
• API key for authentication

Installation

Installing via Smithery

To install Palo Alto Device Server for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @DynamicEndpoints/paloalto-device-server --client claude

Manual Installation

npm install

Configuration

The server requires the following environment variables:

• PANOS_API_KEY: Your Palo Alto firewall API key (required)
• PANOS_API_BASE_URL: Base URL for the Palo Alto REST API (defaults to ‘https://firewall.example.com/restapi/v11.0’)

Building

npm run build

Running

npm start

Available Tools

1. get_system_info: Retrieve system information from the firewall
2. upgrade_firewall: Upgrade the firewall to the latest PAN-OS version
3. upgrade_ha_firewalls_from_panorama: Upgrade PAN-OS on multiple HA firewalls through Panorama
4. check_install_content_updates: Check for and install content updates
5. manage_certificates: Manage firewall certificates
6. run_operational_mode_command: Execute operational mode commands

Development

This project uses TypeScript and the Model Context Protocol SDK. The main server implementation is in src/index.ts.

License

[Add your license information here]