The Node804 PAN-OS MCP Server is an open-source Model Context Protocol server for Palo Alto Networks PAN-OS firewalls and Panorama. It gives AI assistants a safer way to inspect, troubleshoot, summarize, and, when explicitly enabled, modify firewall and Panorama configuration.

The project is built for real network and security operations, where response size, access control, auditability, and TLS behavior matter as much as feature coverage.

The firewall project really started the morning of the ransomware incident, when one of the paths the threat actor used to move around the network turned out to be a legacy VPN appliance that nobody had been watching closely. Replacing the perimeter was already on the roadmap. After the incident it became the roadmap.