Best Palo Alto Networks MCP Servers
Palo Alto Networks is a global cybersecurity company that provides advanced firewalls, cloud security, and security automation solutions to help organizations prevent cyberattacks and protect their digital assets.
Why this server?
Provides tools to search and retrieve Palo Alto Networks vendor advisories, including advisory details, severity, CVSS scores, affected products, and associated CVEs.
AlicenseAqualityAmaintenanceEnables any MCP client to look up CVE intelligence — severity summaries, filtered searches, and full per-CVE detail fusing NVD, MITRE-CNA pre-NVD, CISA KEV, EPSS, and GitHub GHSA data — alongside a Shodan-derived internet-exposure footprint showing how many internet-facing services run a version mapping to a given CVE. It is free, keyless, and read-only, and distinguishes verified zeros from unassessed or failed lookups.162,857 npm2MITWhy this server?
Provides tools for provisioning IPsec tunnels and BGP-over-IPsec peers on Palo Alto Panorama-managed firewalls, including preflight checks, candidate configuration planning/application/validation, and runtime verification. Changes remain candidate-only and require a human commit.
AlicenseBqualityCmaintenanceEnables provisioning and management of IPsec tunnels and BGP-over-IPsec peers on Palo Alto Panorama-managed firewalls, with candidate-only, human-committed workflows and additional read/write tools for PAN-OS operations.63MITWhy this server?
Provides end-of-life and end-of-sale lookup for Palo Alto Networks hardware, returning support status, support runway score, and vendor bulletin URLs.
AlicenseAqualityAmaintenanceSource-backed hardware end-of-life (EOL/EOSL) lookups by part number for enterprise gear — support status, end-of-sale and end-of-support dates, with the vendor's own bulletin URL on every answer. Unknown parts return found:false, never a guess.51Apache 2.0Why this server?
Provides read-only policy review for Palo Alto Networks Panorama, including listing device groups, retrieving security rules, searching policy coverage, and preclearing rule requests by detecting duplicates, broader coverage, conflicts, and partial overlaps.
AlicenseAqualityCmaintenanceA read-only MCP server for Palo Alto Panorama policy review that reads security rules, finds duplicates, broader coverage, conflicts, and overlaps, and returns preclear decisions without committing changes.4MITWhy this server?
Provides tools to interact with Prisma SD-WAN fabric, enabling read-only access to operational data for inventory audits, health checks, topology analysis, policy verification, and generating site configuration files.
AlicenseAqualityBmaintenanceEnables AI agents to securely access and query Prisma SD-WAN operational data for inventory, health checks, topology analysis, and policy verification through natural language.275MITWhy this server?
Enables management and processing of Palo Alto Networks firewall traffic logs, including filtering, field extraction, and event sampling capabilities.
Why this server?
Provides tools for managing Palo Alto Networks PAN-OS firewalls and Panorama, including security policies, objects, NAT rules, VPNs, logs, certificates, and configuration commits via the PAN-OS XML API.
AlicenseAqualityBmaintenanceEnables AI assistants to manage Palo Alto Networks firewalls and Panorama through natural language, including policy inspection, configuration changes, monitoring, and log queries via the PAN-OS XML API.91MITWhy this server?
Provides comprehensive management of Palo Alto Networks Strata Cloud Manager (SCM) firewall configuration through 149 tools covering policy objects, security rules, NAT, profiles, decryption, QoS, and full CRUD operations across multi-tenant environments.
FlicenseBqualityCmaintenanceA Model Context Protocol server for managing Palo Alto Networks Strata Cloud Manager firewall configurations through natural language in Claude. It provides 149 tools covering the full configuration lifecycle including policy objects, security rules, NAT, and profiles with multi-tenant support.100-Why this server?
Provides tools to manage Palo Alto Networks Strata Cloud Manager (SCM) objects such as addresses, address groups, services, tags, security rules, and incidents through the SCM REST API.
FlicenseBqualityDmaintenanceExposes Palo Alto Networks Strata Cloud Manager API via MCP, enabling AI assistants to manage addresses, security rules, and incidents through natural language.101-