Docs
IntegrationsMCP Services

Palo Alto MCP Integration

Learn how to integrate Palo Alto (PAN-OS) with Cokpit using MCP service

Palo Alto (PAN-OS) Credentials

Step 1: Generate API Key or Service Account

Example: API Key

  1. Log in to your Palo Alto firewall or Panorama management UI.
  2. Create a service account or generate an API key for the integration user.
  3. Record the API key and the management API base URL.

💡 Tip: Create a read-only or least-privileged API user unless write access is explicitly required.

Step 2: Add Palo Alto Credentials to Cokpit (MCP)

  1. Open Cokpit and go to Integrations → Security → Palo Alto (MCP).
  2. Click Add secret.
  1. Fill in the required fields:
    • Enter a unique Secret Name
    • Enter PAN-OS API Key
    • Enter PAN-OS API Base URL
  2. Click Submit.

Security Best Practices

  • Use least-privileged API accounts
  • Rotate API keys regularly
  • Restrict API access by IP/network where possible
  • Monitor API usage and logs