Palo Alto Networks MCP Server Suite
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PANOS_DEBUG | No | Enable debug mode | false |
| PANOS_API_KEY | Yes | Your Palo Alto Networks API key | |
| PANOS_TIMEOUT | No | API request timeout in milliseconds | 30000 |
| PANOS_VERIFY_SSL | No | Whether to verify SSL certificates | true |
| PANOS_API_BASE_URL | Yes | The base URL of your Palo Alto Networks firewall API (e.g., https://your-firewall.example.com/api) |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_system_infoB | Get system information from the Palo Alto firewall |
| list_resourcesC | List resources from a specific category |
| view_config_node_valuesC | View configuration node values for XPath on the Palo Alto firewall |
| multi_move_clone_configurationC | Multi-Move or Multi-Clone the configuration of the Palo Alto firewall |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 4 tools
The tools have distinct primary functions (system info, listing, configuration operations, viewing values), but some overlap exists: 'list_resources' and 'view_config_node_values' both involve retrieving configuration data, which could cause confusion about which to use for specific queries. Descriptions help clarify, but boundaries are not perfectly clear.
Naming is inconsistent with mixed conventions: 'get_system_info' and 'list_resources' use verb_noun patterns, while 'multi_move_clone_configuration' is a verbose compound name without clear structure, and 'view_config_node_values' uses a different verb style. This lack of pattern makes the set less predictable and harder to navigate.
With 4 tools, the count is borderline for a server suite focused on Palo Alto Networks firewall management. It feels thin for covering a comprehensive domain like firewall configuration and monitoring, potentially missing operations like update, delete, or specific resource management, but it's not extremely mismatched.
There are significant gaps in the tool surface for firewall management. While tools exist for getting info, listing, moving/cloning, and viewing values, there's no coverage for creating, updating, or deleting configurations or resources, which are core operations in this domain. This incompleteness will likely cause agent failures in full workflows.