palo-alto-bgp-ipsec

panorama_get_plan_status

Read-only

Retrieve safe lifecycle status for an active Panorama provisioning plan by plan ID. See only the target label and hash, keeping sensitive plan data hidden.

Instructions

[READ-ONLY] Returns safe lifecycle metadata for one active Panorama provisioning plan. Returns only a safe target label/hash; never returns plan/candidate hashes, XPath values, mutation XML, or secret slot names.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "plan_id": "<plan_id>"
    },
    "name": "panorama_get_plan_status"
  }
}

Input Schema

Name	Required	Description	Default
`plan_id`	Yes	Plan ID returned by a Panorama plan call
`firewall`	No	Target firewall name (from firewalls.json). Required when multiple firewalls are configured; optional otherwise.

Schema Changelog

Changes observed during successful MCP inspections.

First observedv1.0.0Sep 1, 2026

TDQS

A3.5/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint=true and destructiveHint=false, and the description adds meaningful context beyond that by listing exactly what is and is never returned: safe target label/hash only, never plan/candidate hashes, XPath values, mutation XML, or secret slot names. This is valuable behavioral disclosure for an agent deciding whether the tool is safe to invoke.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and front-loaded: the READ-ONLY marker and the first sentence immediately establish purpose. There is minor redundancy in repeating 'Returns safe', but overall every clause earns its place and the text is easy to scan.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description provides a useful high-level statement of the return value (safe target label/hash) and explicitly lists exclusions. It could define what 'lifecycle metadata' concretely includes, but for a read-only status tool with fully documented parameters, this is sufficient for an agent to select and call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both plan_id and firewall are already documented structurally. The description does not add parameter-specific detail, which is acceptable given the schema fully covers the parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('returns') and a specific resource ('safe lifecycle metadata for one active Panorama provisioning plan'), which distinguishes it from list-style and operation-style siblings at a high level. It does not explicitly name sibling alternatives such as panorama_list_active_plans or panorama_get_operation_status, so differentiation is implied rather than explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives. The safety framing ('READ-ONLY', 'never returns...') implies it is appropriate for safe status checks, but it does not say when to prefer it over related plan/operation tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server