Skip to main content
Glama
Sign In
Palo Alto Device Server

Palo Alto Device Server

by DynamicEndpoints
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Remote

Palo Alto Device Server

A Model Context Protocol (MCP) server for managing Palo Alto firewalls through their REST API. This server provides tools for system information retrieval, firewall upgrades, content updates, and certificate management.

Features

  • Get system information from Palo Alto firewalls

  • Upgrade firewall PAN-OS versions

  • Manage HA firewall upgrades through Panorama

  • Automatically check and install content updates

  • Certificate management

  • Run operational mode commands

Prerequisites

  • Node.js

  • TypeScript

  • Palo Alto firewall with REST API access

  • API key for authentication

Installation

Installing via Smithery

To install Palo Alto Device Server for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @DynamicEndpoints/paloalto-device-server --client claude

Manual Installation

npm install

Configuration

The server requires the following environment variables:

Building

npm run build

Running

npm start

Available Tools

  1. get_system_info: Retrieve system information from the firewall

  2. upgrade_firewall: Upgrade the firewall to the latest PAN-OS version

  3. upgrade_ha_firewalls_from_panorama: Upgrade PAN-OS on multiple HA firewalls through Panorama

  4. check_install_content_updates: Check for and install content updates

  5. manage_certificates: Manage firewall certificates

  6. run_operational_mode_command: Execute operational mode commands

Development

This project uses TypeScript and the Model Context Protocol SDK. The main server implementation is in src/index.ts.

License

[Add your license information here]

Available Tools

6 tools
check_install_content_updatesB

Automatically Check for and Install Content Updates

Inputs: no named parameters.

get_system_infoB

Get system information from the Palo Alto firewall

Inputs: no named parameters.

manage_certificatesC

Manage certificates on the Palo Alto firewall

Inputs: no named parameters.

run_operational_mode_commandC

Run an operational mode command on the Palo Alto firewall

Inputs: command (required).

upgrade_firewallB

Upgrade the Palo Alto firewall to the latest PAN-OS version

Inputs: no named parameters.

upgrade_ha_firewalls_from_panoramaB

Upgrade PAN-OS on Multiple HA Firewalls through Panorama

Inputs: no named parameters.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.4/5.0

    Scored across 6 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose with no overlap: checking/installing updates, retrieving system info, managing certificates, running operational commands, upgrading a single firewall, and upgrading HA firewalls via Panorama. The descriptions clearly differentiate the scope and target of each action, making misselection unlikely.

    Naming Consistency4/5

    The naming is mostly consistent with a verb_noun pattern (e.g., check_install_content_updates, get_system_info, run_operational_mode_command), but there are minor deviations like 'manage_certificates' using a verb_noun format while others include more specific verbs. All names use snake_case, maintaining readability despite slight variations in verb specificity.

    Tool Count5/5

    With 6 tools, the count is well-scoped for managing Palo Alto firewalls, covering key operations like updates, info retrieval, certificate management, commands, and upgrades. Each tool earns its place by addressing distinct aspects of firewall administration without being overly sparse or bloated.

    Completeness4/5

    The tool set covers essential firewall management tasks, including updates, system info, certificates, operational commands, and upgrades for both single and HA setups. Minor gaps might exist, such as configuration management or policy tools, but the core lifecycle and operational needs are well-addressed, allowing agents to perform most critical workflows.

    Resources

    Related MCP Connectors