Palo Alto Policy Management MCP Server
About
# Palo Alto Policy Management MCP Server [](https://smithery.ai/server/@DynamicEndpoints/palo-alto-policy-management-mcp-server) A Model Context Protocol (MCP) server for managing Palo Alto Networks firewall policies…
Explore
- Integration with Palo Alto Networks API via MCP
- Policy management capabilities
- Built with TypeScript for type safety and better developer experience
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Palo Alto Policy Management MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
- Node.js (v16 or higher recommended)
- npm or yarn package manager
- Access to a Palo Alto Networks firewall
To install Palo Alto Policy Management Server for Claude Desktop automatically via Smithery:
``bash`
npx -y @smithery/cli install @DynamicEndpoints/palo-alto-policy-management-mcp-server --client claude
1. Clone the repository:
bash`
git clone <repository-url>
cd paloalto-policy-server
2. Install dependencies:
bash``
npm install
bash
To start the MCP server:
npm start
The server will start and listen for MCP protocol commands.
get_security_rules
Get security policy rules
get_nat_rules
Get NAT policy rules
get_qos_rules
Get QoS policy rules
get_policy_based_forwarding_rules
Get policy-based forwarding rules
get_decryption_rules
Get decryption policy rules
get_tunnel_inspection_rules
Get tunnel inspection rules
get_application_override_rules
Get application override rules
get_authentication_rules
Get authentication policy rules
get_dos_rules
Get DoS protection rules
get_sdwan_rules
Get SD-WAN policy rules
create_rule
Create a new policy rule
update_rule
Update an existing policy rule
delete_rule
Delete a policy rule
- get_security_rules - Get security policy rules
- get_nat_rules - Get NAT policy rules
- get_qos_rules - Get QoS policy rules
- get_policy_based_forwarding_rules - Get policy-based forwarding rules
- get_decryption_rules - Get decryption policy rules
- get_tunnel_inspection_rules - Get tunnel inspection rules
- get_application_override_rules - Get application override rules
- get_authentication_rules - Get authentication policy rules
- get_dos_rules - Get DoS protection rules
- get_sdwan_rules - Get SD-WAN policy rules
- create_rule - Create a new policy rule
- update_rule - Update an existing policy rule
- delete_rule - Delete a policy rule
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"palo alto policy management mcp server": {
"Palo-Alto-Policy-Management-MCP-Server": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@DynamicEndpoints/palo-alto-policy-management-mcp-server",
"--client",
"claude"
]
}
}
}
}McpServers
{
"Palo-Alto-Policy-Management-MCP-Server": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@DynamicEndpoints/palo-alto-policy-management-mcp-server",
"--client",
"claude"
]
}
}Features
- Integration with Palo Alto Networks API via MCP - Policy management capabilities - Built with TypeScript for type safety and better developer experienceAvailable Tools
Query Tools
-get_security_rules - Get security policy rules
- get_nat_rules - Get NAT policy rules
- get_qos_rules - Get QoS policy rules
- get_policy_based_forwarding_rules - Get policy-based forwarding rules
- get_decryption_rules - Get decryption policy rules
- get_tunnel_inspection_rules - Get tunnel inspection rules
- get_application_override_rules - Get application override rules
- get_authentication_rules - Get authentication policy rules
- get_dos_rules - Get DoS protection rules
- get_sdwan_rules - Get SD-WAN policy rules
Management Tools
-create_rule - Create a new policy rule
- update_rule - Update an existing policy rule
- delete_rule - Delete a policy rule
Prerequisites
- Node.js (v16 or higher recommended) - npm or yarn package manager - Access to a Palo Alto Networks firewallInstallation
Installing via Smithery
To install Palo Alto Policy Management Server for Claude Desktop automatically via Smithery: ``bash
npx -y @smithery/cli install @DynamicEndpoints/palo-alto-policy-management-mcp-server --client claude
`
1. Clone the repository:
`bash
git clone <repository-url>
cd paloalto-policy-server
`
2. Install dependencies:
`bash
npm install
`
Usage
Building the Project
To compile the TypeScript code:
`bash
npm run build
`
Running the Server
To start the MCP server:
`bash
npm start
`
The server will start and listen for MCP protocol commands.
Development
The project uses TypeScript and is structured as follows:
- src/ - Source code directory
- build/ - Compiled JavaScript output
- package.json - Project configuration and dependencies
- tsconfig.json - TypeScript configuration
Dependencies
Main dependencies include:
- @modelcontextprotocol/sdk - For MCP protocol implementation
- axios` - For making HTTP requests to the Palo Alto API
License
Please add appropriate license information.Contributing
Contributions are welcome! Please feel free to submit a Pull Request.Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
