Best Claude Apps

PanOS MCP Claude connector

Control Palo Alto Networks PA-Series firewalls and Panorama with AI. 117 tools across 16 modules: security policies, NAT, objects, VPN, logs, WildFire, GlobalProtect, decryption, and more. Supports staged commits and read-only inspection. For multi-firewall setups use the CLI mode — see github.com/apius-tech/Palo-MCP.

Add PanOS MCP to Claude

Open in Claude

Claude Desktop → Settings → Extensions → PanOS MCP

Step-by-step setup below All setup steps

PanOS MCP in Claude at a glance

Reads
70 tools
Decryption rules, device group nat rules, nat rules and 65 more
Creates & edits
32 tools
Decryption rules, device group nat rules, nat rules and 21 more
Deletes
15 tools
Decryption rules, device group nat rules, nat rules and 12 more

Counts come from the tool names in the official listing. See every tool

How a request travels Illustration, not a screenshot

  1. 1 · You ask

    “Create a PanOS MCP decryption rule for [what it is about].”

  2. 2 · Claude calls

    add_decryption_rule

    Adds a new decryption rule

  3. 3 · Runs locally

    Your computer

    Through the Claude desktop app

  4. 4 · Answer

    Reply in the chat

    Write tools can be set to ask you first

The prompt is our example and the tool is one from PanOS MCP’s list. Claude chooses tools itself, so real calls can differ.

Works in Claude Desktop for macOS Claude Desktop for Windows

How to add PanOS MCP to Claude

Claude desktop app macOS · Windows

  1. 1 Open the Claude desktop app and go to Settings → Extensions → Browse extensions.
  2. 2 Find PanOS MCP, click Install and fill in any settings it asks for.
  3. 3 Start a new chat and check PanOS MCP is switched on in the tools menu.

Desktop extensions run on your computer, so they do not work on claude.ai in the browser or on mobile.

PanOS MCP MCP tools

117

70 read, 32 write, 15 delete. The official listing gives tool names only, so the text beside each name is our summary of it, not the developer’s wording.

  • Workspace 1 tool

    • No read tools
    • commit Writes Commits items (our summary)

  • Decryption rules 4 tools

    • get_decryption_rules Pulls up a list of decryption rules (our summary)
    • add_decryption_rule Writes Adds a new decryption rule (our summary)
    • move_decryption_rule Writes Moves a decryption rule to a different place (our summary)
    • delete_decryption_rule Deletes Deletes a decryption rule (our summary)

  • Device group nat rules 4 tools

    • panorama_get_device_group_nat_rules Pulls up a list of device group nat rules (our summary)
    • panorama_add_device_group_nat_rule Writes Adds a new device group nat rule (our summary)
    • panorama_move_device_group_nat_rule Writes Moves a device group nat rule to a different place (our summary)
    • panorama_delete_device_group_nat_rule Deletes Deletes a device group nat rule (our summary)
Show 75 more groups · 108 tools, 40 that change data · nat rules, pbf rules, post rules, pre rules, qos rules, security rules, address groups, address objects, service groups, service objects, static routes, tags, configs, decryption rule disableds, devices, nat rule disableds, op commands, panoramas, pbf rule disableds, qos rule disableds, security rule disableds, firewalls, ha statuses, active sessions, admin roles, admins, antivirus versions, application filters, arp tables, auth profiles, certificates, collector groups, commit statuses, config logs, config xpaths, content versions, decryption profiles, device group hierarchies, device groups, dhcp leases, dns proxies, dos profiles, globalprotect configs, globalprotect users, interfaces, ipsec tunnels, license usages, licenses, log collectors, managed device softwares, managed devices, push statuses, routing tables, security profile groups, security profiles, shared address groups, shared address objects, shared profile groups, shared security profiles, shared service groups, shared service objects, system logs, system resources, template stacks, templates, threat logs, traffic logs, url categories, url filter logs, userid configs, userid groups, userid mappings, vlans, wildfire statuses, zones

  • Nat rules 4 tools

    • get_nat_rules Pulls up a list of nat rules (our summary)
    • add_nat_rule Writes Adds a new nat rule (our summary)
    • move_nat_rule Writes Moves a nat rule to a different place (our summary)
    • delete_nat_rule Deletes Deletes a nat rule (our summary)

  • Pbf rules 4 tools

    • get_pbf_rules Pulls up a list of pbf rules (our summary)
    • add_pbf_rule Writes Adds a new pbf rule (our summary)
    • move_pbf_rule Writes Moves a pbf rule to a different place (our summary)
    • delete_pbf_rule Deletes Deletes a pbf rule (our summary)

  • Post rules 4 tools

    • panorama_get_post_rules Pulls up a list of post rules (our summary)
    • panorama_add_post_rule Writes Adds a new post rule (our summary)
    • panorama_move_post_rule Writes Moves a post rule to a different place (our summary)
    • panorama_delete_post_rule Deletes Deletes a post rule (our summary)

  • Pre rules 4 tools

    • panorama_get_pre_rules Pulls up a list of pre rules (our summary)
    • panorama_add_pre_rule Writes Adds a new pre rule (our summary)
    • panorama_move_pre_rule Writes Moves a pre rule to a different place (our summary)
    • panorama_delete_pre_rule Deletes Deletes a pre rule (our summary)

  • Qos rules 4 tools

    • get_qos_rules Pulls up a list of qos rules (our summary)
    • add_qos_rule Writes Adds a new qos rule (our summary)
    • move_qos_rule Writes Moves a qos rule to a different place (our summary)
    • delete_qos_rule Deletes Deletes a qos rule (our summary)

  • Security rules 4 tools

    • get_security_rules Pulls up a list of security rules (our summary)
    • add_security_rule Writes Adds a new security rule (our summary)
    • move_security_rule Writes Moves a security rule to a different place (our summary)
    • delete_security_rule Deletes Deletes a security rule (our summary)

  • Address groups 3 tools

    • get_address_groups Pulls up a list of address groups (our summary)
    • add_address_group Writes Adds a new address group (our summary)
    • delete_address_group Deletes Deletes an address group (our summary)

  • Address objects 3 tools

    • get_address_objects Pulls up a list of address objects (our summary)
    • add_address_object Writes Adds a new address object (our summary)
    • delete_address_object Deletes Deletes an address object (our summary)

  • Service groups 3 tools

    • get_service_groups Pulls up a list of service groups (our summary)
    • add_service_group Writes Adds a new service group (our summary)
    • delete_service_group Deletes Deletes a service group (our summary)

  • Service objects 3 tools

    • get_service_objects Pulls up a list of service objects (our summary)
    • add_service_object Writes Adds a new service object (our summary)
    • delete_service_object Deletes Deletes a service object (our summary)

  • Static routes 3 tools

    • get_static_routes Pulls up a list of static routes (our summary)
    • add_static_route Writes Adds a new static route (our summary)
    • delete_static_route Deletes Deletes a static route (our summary)

  • Tags 3 tools

    • get_tags Pulls up a list of tags (our summary)
    • add_tag Writes Adds a new tag (our summary)
    • delete_tag Deletes Deletes a tag (our summary)

  • Configs 2 tools

    • No read tools
    • set_config Writes Edits an existing config (our summary)
    • delete_config Deletes Deletes a config (our summary)

  • Decryption rule disableds 1 tool

    • No read tools
    • set_decryption_rule_disabled Writes Edits an existing decryption rule disabled (our summary)

  • Devices 1 tool

    • No read tools
    • panorama_push_to_devices Writes Pushes devices (our summary)

  • Nat rule disableds 1 tool

    • No read tools
    • set_nat_rule_disabled Writes Edits an existing nat rule disabled (our summary)

  • Op commands 1 tool

    • No read tools
    • run_op_command Writes Runs an op command (our summary)

  • Panoramas 1 tool

    • No read tools
    • panorama_commit Writes Commits a panorama (our summary)

  • Pbf rule disableds 1 tool

    • No read tools
    • set_pbf_rule_disabled Writes Edits an existing pbf rule disabled (our summary)

  • Qos rule disableds 1 tool

    • No read tools
    • set_qos_rule_disabled Writes Edits an existing qos rule disabled (our summary)

  • Security rule disableds 1 tool

    • No read tools
    • set_security_rule_disabled Writes Edits an existing security rule disabled (our summary)

  • Firewalls 2 tools

    • get_firewall_info Opens one firewall with its details (our summary)
    • list_firewalls Pulls up a list of firewalls (our summary)
    • None

  • Ha statuses 2 tools

    • get_ha_status Opens one ha status with its details (our summary)
    • panorama_get_ha_status Opens one ha status with its details (our summary)
    • None

  • Active sessions 1 tool

    • get_active_sessions Pulls up a list of active sessions (our summary)
    • None

  • Admin roles 1 tool

    • get_admin_roles Pulls up a list of admin roles (our summary)
    • None

  • Admins 1 tool

    • get_admins Pulls up a list of admins (our summary)
    • None

  • Antivirus versions 1 tool

    • get_antivirus_version Opens one antivirus version with its details (our summary)
    • None

  • Application filters 1 tool

    • get_application_filters Pulls up a list of application filters (our summary)
    • None

  • Arp tables 1 tool

    • get_arp_table Opens one arp table with its details (our summary)
    • None

  • Auth profiles 1 tool

    • get_auth_profiles Pulls up a list of auth profiles (our summary)
    • None

  • Certificates 1 tool

    • get_certificates Pulls up a list of certificates (our summary)
    • None

  • Collector groups 1 tool

    • panorama_get_collector_groups Pulls up a list of collector groups (our summary)
    • None

  • Commit statuses 1 tool

    • panorama_get_commit_status Opens one commit status with its details (our summary)
    • None

  • Config logs 1 tool

    • get_config_logs Pulls up a list of config logs (our summary)
    • None

  • Config xpaths 1 tool

    • get_config_xpath Opens one config xpath with its details (our summary)
    • None

  • Content versions 1 tool

    • get_content_versions Pulls up a list of content versions (our summary)
    • None

  • Decryption profiles 1 tool

    • get_decryption_profiles Pulls up a list of decryption profiles (our summary)
    • None

  • Device group hierarchies 1 tool

    • panorama_get_device_group_hierarchy Opens one device group hierarchy with its details (our summary)
    • None

  • Device groups 1 tool

    • panorama_get_device_groups Pulls up a list of device groups (our summary)
    • None

  • Dhcp leases 1 tool

    • get_dhcp_leases Pulls up a list of dhcp leases (our summary)
    • None

  • Dns proxies 1 tool

    • get_dns_proxy Opens one dns proxy with its details (our summary)
    • None

  • Dos profiles 1 tool

    • get_dos_profiles Pulls up a list of dos profiles (our summary)
    • None

  • Globalprotect configs 1 tool

    • get_globalprotect_config Opens one globalprotect config with its details (our summary)
    • None

  • Globalprotect users 1 tool

    • get_globalprotect_users Pulls up a list of globalprotect users (our summary)
    • None

  • Interfaces 1 tool

    • get_interfaces Pulls up a list of interfaces (our summary)
    • None

  • Ipsec tunnels 1 tool

    • get_ipsec_tunnels Pulls up a list of ipsec tunnels (our summary)
    • None

  • License usages 1 tool

    • get_license_usage Opens one license usage with its details (our summary)
    • None

  • Licenses 1 tool

    • get_licenses Pulls up a list of licenses (our summary)
    • None

  • Log collectors 1 tool

    • panorama_get_log_collectors Pulls up a list of log collectors (our summary)
    • None

  • Managed device softwares 1 tool

    • panorama_get_managed_device_software Opens one managed device software with its details (our summary)
    • None

  • Managed devices 1 tool

    • panorama_get_managed_devices Pulls up a list of managed devices (our summary)
    • None

  • Push statuses 1 tool

    • panorama_get_push_status Opens one push status with its details (our summary)
    • None

  • Routing tables 1 tool

    • get_routing_table Opens one routing table with its details (our summary)
    • None

  • Security profile groups 1 tool

    • get_security_profile_groups Pulls up a list of security profile groups (our summary)
    • None

  • Security profiles 1 tool

    • get_security_profiles Pulls up a list of security profiles (our summary)
    • None

  • Shared address groups 1 tool

    • panorama_get_shared_address_groups Pulls up a list of shared address groups (our summary)
    • None

  • Shared address objects 1 tool

    • panorama_get_shared_address_objects Pulls up a list of shared address objects (our summary)
    • None

  • Shared profile groups 1 tool

    • panorama_get_shared_profile_groups Pulls up a list of shared profile groups (our summary)
    • None

  • Shared security profiles 1 tool

    • panorama_get_shared_security_profiles Pulls up a list of shared security profiles (our summary)
    • None

  • Shared service groups 1 tool

    • panorama_get_shared_service_groups Pulls up a list of shared service groups (our summary)
    • None

  • Shared service objects 1 tool

    • panorama_get_shared_service_objects Pulls up a list of shared service objects (our summary)
    • None

  • System logs 1 tool

    • get_system_logs Pulls up a list of system logs (our summary)
    • None

  • System resources 1 tool

    • get_system_resources Pulls up a list of system resources (our summary)
    • None

  • Template stacks 1 tool

    • panorama_get_template_stacks Pulls up a list of template stacks (our summary)
    • None

  • Templates 1 tool

    • panorama_get_templates Pulls up a list of templates (our summary)
    • None

  • Threat logs 1 tool

    • get_threat_logs Pulls up a list of threat logs (our summary)
    • None

  • Traffic logs 1 tool

    • get_traffic_logs Pulls up a list of traffic logs (our summary)
    • None

  • Url categories 1 tool

    • get_url_categories Pulls up a list of url categories (our summary)
    • None

  • Url filter logs 1 tool

    • get_url_filter_logs Pulls up a list of url filter logs (our summary)
    • None

  • Userid configs 1 tool

    • get_userid_config Opens one userid config with its details (our summary)
    • None

  • Userid groups 1 tool

    • get_userid_groups Pulls up a list of userid groups (our summary)
    • None

  • Userid mappings 1 tool

    • get_userid_mappings Pulls up a list of userid mappings (our summary)
    • None

  • Vlans 1 tool

    • get_vlans Pulls up a list of vlans (our summary)
    • None

  • Wildfire statuses 1 tool

    • get_wildfire_status Opens one wildfire status with its details (our summary)
    • None

  • Zones 1 tool

    • get_zones Pulls up a list of zones (our summary)
    • None

Read or write is our reading of each name. List checked 2026-10-20; developers can change tools at any time.

Things to ask Claude with PanOS MCP

Our suggestions, one for each kind of tool PanOS MCP offers. Not from Apius Technologies SA or Anthropic. Fill in the [brackets].

  • Create a PanOS MCP decryption rule for [what it is about].

    uses add_decryption_rule

  • Move the PanOS MCP decryption rule [name or link]: [what to change].

    uses move_decryption_rule

  • Turn these notes into PanOS MCP decryption rules, one per action item: [paste notes].

    uses add_decryption_rule

  • Open the PanOS MCP firewall [name or link] and give me the key points.

    uses get_firewall_info

  • Create a PanOS MCP device group nat rule for [what it is about].

    uses panorama_add_device_group_nat_rule

  • List the PanOS MCP firewalls and give me a short overview.

    uses list_firewalls

Security and access

Where requests go, whose account Claude uses, and what you control.

Runs

On your computer

A desktop extension runs locally through the Claude desktop app instead of on a remote server.

Control

You approve write tools

In Claude’s connector settings you can choose, tool by tool, whether Claude must ask before using it. Write tools are marked in the list above. See write tools

Policy

Privacy policy

Published by Apius Technologies SA and linked from the official listing. Read it ↗

Anthropic’s directory notes that it does not control which tools a developer exposes and cannot guarantee they work as intended or stay the same. Connect connectors you trust.

Reviews

No reviews yet. Used PanOS MCP with Claude? Tell others how it went.

Honest reviews only. We never pay for or edit ratings.

    Questions people ask

    What does the PanOS MCP connector do in Claude?

    Control Palo Alto Networks PA-Series firewalls and Panorama with AI. 117 tools across 16 modules: security policies, NAT, objects, VPN, logs, WildFire, GlobalProtect, decryption, and more. Supports staged commits and read-only inspection. For multi-firewall setups use the CLI mode — see github.com/apius-tech/Palo-MCP.

    Is the PanOS MCP connector official?

    It is made by Apius Technologies SA and carries the Anthropic verified mark in Anthropic’s directory. This site is independent and lists it from the official directory.

    How do I install PanOS MCP in Claude?

    PanOS MCP is a desktop extension. It runs on your computer through the Claude desktop app: open Settings → Extensions → Browse extensions, find PanOS MCP and install it.

    Can Claude change or delete my PanOS MCP data?

    Judging by tool names, 47 of its 117 tools can change data, including 15 that delete or remove things. The other 70 only read. In Claude you can choose, per tool, whether Claude must ask before using it.

    Loading…

    Browse all connectors →