Skip to content

rust-panosmcp v0.1.0

Choose a tag to compare

@fastrevmd-lab fastrevmd-lab released this 10 Jul 21:12
· 158 commits to main since this release

rust-panosmcp v0.1.0

The first production-oriented release of the async Rust MCP server for standalone Palo Alto Networks PAN-OS firewalls.

Highlights

  • Strict HTTPS PAN-OS XML API client with custom CA and exact leaf pinning.
  • Read-only facts, operational-command, and configuration tools.
  • Bearer-protected Streamable HTTP with exact device and tool scopes.
  • Guarded candidate configuration stage, diff, validation, commit, discard, and reconciliation lifecycle.
  • Hardened systemd and distroless-container packaging.
  • Reproducible binary archive, supply-chain policy checks, fuzz targets, and benchmark evidence.

Compatibility and scope

  • PAN-OS 12.1.5 has real-device strict-HTTPS read, full MCP, and reversible guarded-mutation evidence.
  • PAN-OS 10.2, 11.1, 11.2, and 12.1 have representative parser-envelope coverage.
  • v0.1 supports standalone firewalls through the XML API.
  • Panorama, templates, device groups, commit-all, multi-vsys, HA-aware workflows, SSH/set-format automation, and OAuth discovery are not included.

Binary artifact

The attached archive targets x86_64-unknown-linux-gnu. Verify the attached SHA-256 checksum before extraction.

Archive SHA-256:

bd608858953c61e82a54c4f3f2ec401621b38aae3079917c66e9e4fb2fc06ade

Container image

Published multi-architecture tags:

  • ghcr.io/fastrevmd-lab/rust-panosmcp:0.1.0
  • ghcr.io/fastrevmd-lab/rust-panosmcp:0.1
  • ghcr.io/fastrevmd-lab/rust-panosmcp:latest

Immutable manifest digest:

sha256:4ab600bceb5fe5d7dba98d8cf83992c869b714796ff7232bb783f20704c134f6

The image includes build provenance and an SBOM.

Provenance

Operational guidance, compatibility claims, backup and restore, upgrades, and rollback procedures are included in the archive and repository documentation.