# PAN-OS MCP server

> Enables AI clients to inspect, troubleshoot, and manage Palo Alto Networks PAN-OS firewalls and Panorama with token-efficient responses.

- Repository: https://github.com/Node804/node804-panos-mcp
- Page: https://hostedmcp.org/servers/node804/node804-panos-mcp
- Transport: —
- Stars: 1
- License: MIT

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `PANOS_ALLOW_SERIAL_CONNECTION` | no | no |  |
| `PANOS_API_KEY` | no | no |  |
| `PANOS_AUDIT_LOG` | no | no |  |
| `PANOS_HOST` | no | no |  |
| `PANOS_MODE` | no | no |  |
| `PANOS_SETUP_API_KEY` | no | no |  |
| `PANOS_TLS_CA` | no | no |  |
| `PANOS_TLS_VERIFY` | no | no |  |

## FAQ

### What is the default permission level of the server?

The server defaults to 'read' mode, which allows for read-only inspection, live troubleshooting, and aggregation summaries without any write capabilities.

### How can I enable write access for policy or object changes?

You must explicitly set the PANOS_MODE environment variable to 'standard', 'full', or 'admin' depending on the level of access required.

### How does the server handle security and TLS?

TLS verification is enabled by default to prevent man-in-the-middle attacks, and self-signed certificates require an explicit opt-out.