Palo Alto MCP servers: safety scores compared
OpsMCP lists 2 MCP servers for Palo Alto. The highest provisional grade is D (pan-os-mcp by cdot65 and pan-mcp-relay by PaloAltoNetworks), and 0 have a read-only mode.
Is there an official Palo Alto MCP server?
pan-mcp-relay by PaloAltoNetworks (PaloAltoNetworks) is published by a GitHub owner on the OpsMCP official-vendor allowlist.
| Server | Grade | Read, write, destructive | Read-only mode | Last commit | Publisher type |
|---|---|---|---|---|---|
| pan-os-mcp by cdot65 | D 44 Provisional | 4 read, 0 write, 0 destructive | not found | 7 May 2025 | Individual |
| pan-mcp-relay by PaloAltoNetworks | D 14 Provisional | Tools unknown | not found | 22 Sep 2025 | Official vendor |