rust-panosmcp v0.1.0
rust-panosmcp v0.1.0
The first production-oriented release of the async Rust MCP server for standalone Palo Alto Networks PAN-OS firewalls.
Highlights
- Strict HTTPS PAN-OS XML API client with custom CA and exact leaf pinning.
- Read-only facts, operational-command, and configuration tools.
- Bearer-protected Streamable HTTP with exact device and tool scopes.
- Guarded candidate configuration stage, diff, validation, commit, discard, and reconciliation lifecycle.
- Hardened systemd and distroless-container packaging.
- Reproducible binary archive, supply-chain policy checks, fuzz targets, and benchmark evidence.
Compatibility and scope
- PAN-OS 12.1.5 has real-device strict-HTTPS read, full MCP, and reversible guarded-mutation evidence.
- PAN-OS 10.2, 11.1, 11.2, and 12.1 have representative parser-envelope coverage.
- v0.1 supports standalone firewalls through the XML API.
- Panorama, templates, device groups, commit-all, multi-vsys, HA-aware workflows, SSH/set-format automation, and OAuth discovery are not included.
Binary artifact
The attached archive targets x86_64-unknown-linux-gnu. Verify the attached SHA-256 checksum before extraction.
Archive SHA-256:
bd608858953c61e82a54c4f3f2ec401621b38aae3079917c66e9e4fb2fc06ade
Container image
Published multi-architecture tags:
ghcr.io/fastrevmd-lab/rust-panosmcp:0.1.0ghcr.io/fastrevmd-lab/rust-panosmcp:0.1ghcr.io/fastrevmd-lab/rust-panosmcp:latest
Immutable manifest digest:
sha256:4ab600bceb5fe5d7dba98d8cf83992c869b714796ff7232bb783f20704c134f6
The image includes build provenance and an SBOM.
Provenance
- Source commit:
1adcd325efb910481d285b1744491f49091e776c - Final CI: https://github.com/fastrevmd-lab/rust-panosmcp/actions/runs/29116198694
- Image release workflow: https://github.com/fastrevmd-lab/rust-panosmcp/actions/runs/29117366499
Operational guidance, compatibility claims, backup and restore, upgrades, and rollback procedures are included in the archive and repository documentation.