pan-os-mcp by cdot65 for Palo Alto: safety score

D 44 Provisional Not reviewed Not tested

pan-os-mcp by cdot65 is a community MCP server for Palo Alto with 4 read, 0 write and 0 destructive tools. It does not have a read-only mode and its access requirements are unknown; its provisional OpsMCP grade is D (44%), last checked 16 Oct 2026.

Last checked 16 Oct 2026.

Model Context Protocol (MCP) server for PAN-OS firewalls

Publisher's description

Not listed under a registry name in this fetch.

Access not scored. 3 of 4 factors scored.

Not hands-on tested. No test date, notes, or observed write behavior.

Palo Alto GitHub Report this listing

Can it change or delete things?

The extracted tools are read-only. No write or destructive tool was found.

Classified from the tool name, or from the description when the name has no listed verb.

4 tools

Tool	Class
`retrieve_address_objects` Get address objects configured on the Palo Alto Networks firewall. from the description (get)	Read
`retrieve_security_policies` Get security policies configured on the Palo Alto Networks firewall. from the description (get)	Read
`retrieve_security_zones` Get security zones configured on the Palo Alto Networks firewall. from the description (get)	Read
`show_system_info` Get system information from the Palo Alto Networks firewall. from the description (get)	Read

Score

44 of 100 points (44%). A factor that was not scored counts as 0 of its full weight.

OpsMCP rubric 2026-10-16.3. Checked 16 Oct 2026.
Factor	Points	Full weight	Status
Tool capability	35	35	Scored
Access	unknown	25	Not scored
Maintenance	2	20	Scored
Publisher	7	20	Scored

Tool capability

4 read, 0 write, 0 destructive.

Access

Part	Value	Points	Where this came from
Scope	unknown	unknown	unknown
Where it runs	unknown	unknown	unknown
Credentials	unknown	unknown	unknown

Maintenance

Part	Value	Points
Last commit	526 days	0 of 8
Releases	no releases	0 of 6
Issues	0 closed / 1 issues (0.00)	2 of 6

Publisher

Part	Value	Points	Where this came from
Who publishes it	Individual	3 of 8	GitHub owner type is User (cdot65).
Registry listing	Not listed	2 of 5	No latest registry entry from search='pan-os-mcp' had repository github.com/cdot65/pan-os-mcp.
License	No key required	0 of 4	GitHub reports no license.
Stars	15	1 of 2	15 GitHub stars.
Repository age	561 days	1 of 1	Repository created 2025-04-03T14:02:36Z.

How the rubric works

What this score does not cover

This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.

Access needed

Environment variables: unknown. The registry entry does not list any.

Maintenance

Archived: no
Last commit: 7 May 2025 · f451d16
Latest release: no releases
Issues: 1 open · 0 closed
Stars: 15
License: none published
Repository created: 3 Apr 2025

npm and PyPI

npm: No npm package in the registry entry.
PyPI: No PyPI package in the registry entry.
Maintainers: unknown

Install

Source: readme. This is the published command, not a rewritten one.

uv pip install .
pip install .

Other Palo Alto servers

pan-mcp-relay by PaloAltoNetworks

Badge

The SVG is generated for this server. The embed links to this server page.

Embed snippet

[![OpsMCP D provisional](https://opsmcp.dev/badge/cdot65-pan-os-mcp.svg)](https://opsmcp.dev/servers/cdot65-pan-os-mcp/)

Sources for this listing

github:pan-os mcp in:name,description

No latest registry entry from search='pan-os-mcp' had repository github.com/cdot65/pan-os-mcp.