Palo Alto Device Server
# Palo Alto Device Server
[](https://smithery.ai/server/@DynamicEndpoints/paloalto-device-server)
A Model Context Protocol (MCP) server for managing Palo Alto firewalls through their REST API. This server provides tools for system information retrieval, firewall upgrades, content updates, and certificate management.
## Features
- Get system information from Palo Alto firewalls
- Upgrade firewall PAN-OS versions
- Manage HA firewall upgrades through Panorama
- Automatically check and install content updates
- Certificate management
- Run operational mode commands
## Prerequisites
- Node.js
- TypeScript
- Palo Alto firewall with REST API access
- API key for authentication
## Installation
### Installing via Smithery
To install Palo Alto Device Server for Claude Desktop automatically via [Smithery](https://smithery.ai/server/@DynamicEndpoints/paloalto-device-server):
```bash
npx -y @smithery/cli install @DynamicEndpoints/paloalto-device-server --client claude
```
### Manual Installation
```bash
npm install
```
## Configuration
The server requires the following environment variables:
- `PANOS_API_KEY`: Your Palo Alto firewall API key (required)
- `PANOS_API_BASE_URL`: Base URL for the Palo Alto REST API (defaults to 'https://firewall.example.com/restapi/v11.0')
## Building
```bash
npm run build
```
## Running
```bash
npm start
```
## Available Tools
1. `get_system_info`: Retrieve system information from the firewall
2. `upgrade_firewall`: Upgrade the firewall to the latest PAN-OS version
3. `upgrade_ha_firewalls_from_panorama`: Upgrade PAN-OS on multiple HA firewalls through Panorama
4. `check_install_content_updates`: Check for and install content updates
5. `manage_certificates`: Manage firewall certificates
6. `run_operational_mode_command`: Execute operational mode commands
## Development
This project uses TypeScript and the Model Context Protocol SDK. The main server implementation is in `src/index.ts`.
## License
[Add your license information here]
TDQS
Scored across 6 tools
Each tool has a clearly distinct purpose with no overlap: checking/installing updates, retrieving system info, managing certificates, running operational commands, upgrading a single firewall, and upgrading HA firewalls via Panorama. The descriptions clearly differentiate the scope and target of each action, making misselection unlikely.
The naming is mostly consistent with a verb_noun pattern (e.g., check_install_content_updates, get_system_info, run_operational_mode_command), but there are minor deviations like 'manage_certificates' using a verb_noun format while others include more specific verbs. All names use snake_case, maintaining readability despite slight variations in verb specificity.
With 6 tools, the count is well-scoped for managing Palo Alto firewalls, covering key operations like updates, info retrieval, certificate management, commands, and upgrades. Each tool earns its place by addressing distinct aspects of firewall administration without being overly sparse or bloated.
The tool set covers essential firewall management tasks, including updates, system info, certificates, operational commands, and upgrades for both single and HA setups. Minor gaps might exist, such as configuration management or policy tools, but the core lifecycle and operational needs are well-addressed, allowing agents to perform most critical workflows.