Palo Alto Policy Management MCP Server
Description
# Palo Alto Policy Management MCP Server [](https://smithery.ai/server/@DynamicEndpoints/palo-alto-policy-management-mcp-server) A Model Context Protocol (MCP) server for…
About
# Palo Alto Policy Management MCP Server [](https://smithery.ai/server/@DynamicEndpoints/palo-alto-policy-management-mcp-server) A Model Context Protocol (MCP) server for managing Palo Alto Networks firewall policies…
Details
- Author
- DynamicEndpoints
- Downloads
- 139
- Categories
- Other
Jump to
- Integration with Palo Alto Networks API via MCP
- Query security, NAT, QoS, decryption, and other rule types
- Create, update, and delete policy rules
- Built with TypeScript for type safety
- Easy installation via Smithery for Claude Desktop
- Supports multiple policy rule categories (DoS, SD-WAN, etc.)
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Palo Alto Policy Management MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install via Smithery (npx -y @smithery/cli install @DynamicEndpoints/palo-alto-policy-management-mcp-server --client claude) or clone the repository, run npm install, build with npm run build, then start with npm start. The server listens for MCP protocol commands. Prerequisites include Node.js v16+ and access to a Palo Alto Networks firewall.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"palo alto policy management mcp server": {
"Palo-Alto-Policy-Management-MCP-Server": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@DynamicEndpoints/palo-alto-policy-management-mcp-server",
"--client",
"claude"
]
}
}
}
}McpServers
{
"Palo-Alto-Policy-Management-MCP-Server": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@DynamicEndpoints/palo-alto-policy-management-mcp-server",
"--client",
"claude"
]
}
}Palo Alto Policy Management MCP Server
Features
- Integration with Palo Alto Networks API via MCP - Policy management capabilities - Built with TypeScript for type safety and better developer experienceAvailable Tools
Query Tools
-get_security_rules - Get security policy rules
- get_nat_rules - Get NAT policy rules
- get_qos_rules - Get QoS policy rules
- get_policy_based_forwarding_rules - Get policy-based forwarding rules
- get_decryption_rules - Get decryption policy rules
- get_tunnel_inspection_rules - Get tunnel inspection rules
- get_application_override_rules - Get application override rules
- get_authentication_rules - Get authentication policy rules
- get_dos_rules - Get DoS protection rules
- get_sdwan_rules - Get SD-WAN policy rules
Management Tools
-create_rule - Create a new policy rule
- update_rule - Update an existing policy rule
- delete_rule - Delete a policy rule
Prerequisites
- Node.js (v16 or higher recommended) - npm or yarn package manager - Access to a Palo Alto Networks firewallInstallation
Installing via Smithery
To install Palo Alto Policy Management Server for Claude Desktop automatically via Smithery: ``bash
npx -y @smithery/cli install @DynamicEndpoints/palo-alto-policy-management-mcp-server --client claude
`
1. Clone the repository:
`bash
git clone <repository-url>
cd paloalto-policy-server
`
2. Install dependencies:
`bash
npm install
`
Usage
Building the Project
To compile the TypeScript code:
`bash
npm run build
`
Running the Server
To start the MCP server:
`bash
npm start
`
The server will start and listen for MCP protocol commands.
Development
The project uses TypeScript and is structured as follows:
- src/ - Source code directory
- build/ - Compiled JavaScript output
- package.json - Project configuration and dependencies
- tsconfig.json - TypeScript configuration
Dependencies
Main dependencies include:
- @modelcontextprotocol/sdk - For MCP protocol implementation
- axios` - For making HTTP requests to the Palo Alto API
License
Please add appropriate license information.Contributing
Contributions are welcome! Please feel free to submit a Pull Request.Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
