openapi: 3.2.0
info:
title: Mesh Policy Engine Intermediary Manager API
version: 6.0.0
x-provenance:
method: harvested
authored_by: Cisco Security Cloud Control
harvested_by: API Evangelist
harvested_on: '2026-08-19'
first_party: true
note: Published by Cisco. Retrieved unmodified except for this x-provenance block.
provider_published: true
x-evidence:
- type: source
url: https://github.com/CiscoDevNet/scc-public-api-docs/blob/main/specs/mesh-policy.yaml
- type: raw
url: https://raw.githubusercontent.com/CiscoDevNet/scc-public-api-docs/main/specs/mesh-policy.yaml
servers:
- url: https://api.security.cisco.com/pinacl/api
security:
- BearerJWT: []
tags:
- name: Intermediary Manager
paths:
/topology/manager/cdo:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getIntermediaryManagerIds
parameters:
- in: query
name: cursor
schema:
type: string
- in: query
name: count
required: true
schema:
format: int32
maximum: 256
minimum: 1
type: integer
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerIdPage'
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get all Intermediary managers
tags:
- Intermediary Manager
patch:
description: 'Roles allowed: support,topology-rw'
operationId: updateIntermediaryManagerHosts
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerUpdateApi'
required: true
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Update Intermediary manager hosts
tags:
- Intermediary Manager
post:
description: 'Roles allowed: support,topology-rw'
operationId: createCdoManager
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CdoManagerRequest'
required: true
responses:
'201':
description: Created
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Create an intermediary manager for CDO
tags:
- Intermediary Manager
/topology/manager/cdo/asa/gateway-set:
post:
description: 'Roles allowed: support,topology-rw'
operationId: createAsaGatewaySetForCdoManager
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CdoAsaGatewaySetRequest'
required: true
responses:
'201':
description: Created
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Create a gateway set for CDO ASA
tags:
- Intermediary Manager
/topology/manager/cdo/gateway-set/{gwSetId}/manager:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getIntermediaryManagerIdForGatewaySet
parameters:
- in: path
name: gwSetId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerIdResponse'
description: Ok
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get Intermediary manager for a gateway set
tags:
- Intermediary Manager
/topology/manager/cdo/{managerId}:
delete:
description: 'Roles allowed: support,topology-rw'
operationId: deleteIntermediaryManager
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Delete Intermediary manager
tags:
- Intermediary Manager
/topology/manager/cdo/{managerId}/credential-name:
patch:
description: 'Roles allowed: support,topology-rw,internal'
operationId: updateIntermediaryManagerCredentialName
parameters:
- in: path
name: managerId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CredentialNameRequest'
required: true
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Update Credential Name used by Intermediary Manager
tags:
- Intermediary Manager
/topology/manager/cdo/{managerId}/gateway-sets:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getGatewaySetsForIntermediaryManager
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/GatewaySets'
description: Ok
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get gateway sets for an Intermediary manager
tags:
- Intermediary Manager
/topology/manager/cdo/{managerId}/status:
put:
description: 'Roles allowed: support,topology-rw,internal'
operationId: updateIntermediaryManagerStatus
parameters:
- in: path
name: managerId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerStatusRequest'
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Activate /Deactivate Intermediary Manager
tags:
- Intermediary Manager
/topology/manager/multi-cloud-defense:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getIntermediaryManagerIds_1
parameters:
- in: query
name: cursor
schema:
type: string
- in: query
name: count
required: true
schema:
format: int32
maximum: 256
minimum: 1
type: integer
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerIdPage'
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get all Intermediary managers
tags:
- Intermediary Manager
patch:
description: 'Roles allowed: support,topology-rw'
operationId: updateIntermediaryManagerHosts_1
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerUpdateApi'
required: true
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Update Intermediary manager hosts
tags:
- Intermediary Manager
post:
description: 'Lower host priority field values indicate higher priorities during any actions performed by PINACL.
Roles allowed: support,topology-rw'
operationId: createMultiCloudDefenseManager
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/MultiCloudDefenseManagerApi'
required: true
responses:
'201':
description: Created
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Create Multi Cloud Defense manager
tags:
- Intermediary Manager
/topology/manager/multi-cloud-defense/gateway-set/{gwSetId}/manager:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getIntermediaryManagerIdForGatewaySet_1
parameters:
- in: path
name: gwSetId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerIdResponse'
description: Ok
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get Intermediary manager for a gateway set
tags:
- Intermediary Manager
/topology/manager/multi-cloud-defense/rule-set:
post:
description: 'Create a ruleset for multi cloud defense.
Roles allowed: support,topology-rw'
operationId: createMultiCloudDefenseRuleSet
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/RuleSetApi'
required: true
responses:
'201':
description: Created
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Create Multi Cloud Defense Rule set
tags:
- Intermediary Manager
/topology/manager/multi-cloud-defense/{managerId}:
delete:
description: 'Roles allowed: support,topology-rw'
operationId: deleteIntermediaryManager_1
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Delete Intermediary manager
tags:
- Intermediary Manager
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getMultiCloudDefenseManager
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/MultiCloudDefenseManagerApi'
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get Multi Cloud Defense manager
tags:
- Intermediary Manager
/topology/manager/multi-cloud-defense/{managerId}/credential-name:
patch:
description: 'Roles allowed: support,topology-rw,internal'
operationId: updateIntermediaryManagerCredentialName_1
parameters:
- in: path
name: managerId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CredentialNameRequest'
required: true
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Update Credential Name used by Intermediary Manager
tags:
- Intermediary Manager
/topology/manager/multi-cloud-defense/{managerId}/gateway-sets:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getGatewaySetsForIntermediaryManager_1
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/GatewaySets'
description: Ok
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get gateway sets for an Intermediary manager
tags:
- Intermediary Manager
/topology/manager/multi-cloud-defense/{managerId}/status:
put:
description: 'Roles allowed: support,topology-rw,internal'
operationId: updateIntermediaryManagerStatus_1
parameters:
- in: path
name: managerId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerStatusRequest'
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Activate /Deactivate Intermediary Manager
tags:
- Intermediary Manager
/topology/manager/pensando-dsc:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getIntermediaryManagerIds_2
parameters:
- in: query
name: cursor
schema:
type: string
- in: query
name: count
required: true
schema:
format: int32
maximum: 256
minimum: 1
type: integer
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerIdPage'
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get all Intermediary managers
tags:
- Intermediary Manager
patch:
description: 'Roles allowed: support,topology-rw'
operationId: updateIntermediaryManagerHosts_2
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerUpdateApi'
required: true
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Update Intermediary manager hosts
tags:
- Intermediary Manager
post:
description: 'Lower host priority field values indicate higher priorities during any actions performed by PINACL.
Roles allowed: support,topology-rw'
operationId: createPensandoDscManager
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/PensandoDscManagerApi'
required: true
responses:
'201':
description: Created
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Create Pensando DSC manager
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getIntermediaryManagerIds_3
parameters:
- in: query
name: cursor
schema:
type: string
- in: query
name: count
required: true
schema:
format: int32
maximum: 256
minimum: 1
type: integer
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerIdPage'
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get all Intermediary managers
tags:
- Intermediary Manager
patch:
description: 'Roles allowed: support,topology-rw'
operationId: updateIntermediaryManagerHosts_3
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerUpdateApi'
required: true
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Update Intermediary manager hosts
tags:
- Intermediary Manager
post:
description: 'Lower host priority field values indicate higher priorities during any actions performed by PINACL.
Roles allowed: support,topology-rw'
operationId: createPensandoDscPdtManager
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/PensandoDscPdtManagerApi'
required: true
responses:
'201':
description: Created
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Create Pensando DSC PDT manager
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/address/infra:
patch:
description: 'Retire subnet zone.
Roles allowed: support,topology-rw'
operationId: retireSubnetZone
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/AddressApi'
required: true
responses:
'202':
content:
application/json:
schema:
$ref: '#/components/schemas/PsmPdtRetireZoneResponse'
description: Accepted
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Retire Infra Subnet
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/address/infra/{address}:
delete:
description: 'Delete Infra Subnet.
Roles allowed: support,topology-rw'
operationId: deleteSubnetZone
parameters:
- in: path
name: address
required: true
schema:
type: string
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Delete Infra Subnet
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/gateway-set/{gwSetId}/manager:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getIntermediaryManagerIdForGatewaySet_3
parameters:
- in: path
name: gwSetId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/IntermediaryManagerIdResponse'
description: Ok
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get Intermediary manager for a gateway set
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/policy-details/{managerId}:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getPolicyInformationForManager
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/PensandoDscPdtManagerApi'
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get Policy details for Pensando DSC-PDT manager
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/{managerId}:
delete:
description: 'Roles allowed: support,topology-rw'
operationId: deleteIntermediaryManager_3
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Delete Intermediary manager
tags:
- Intermediary Manager
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getPensandoDscPdtManager
parameters:
- in: path
name: managerId
required: true
schema:
type: string
- in: query
name: includeMetadata
schema:
type: boolean
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/PensandoDscPdtManagerApi'
description: Ok
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get Pensando DSC manager
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/{managerId}/credential-name:
patch:
description: 'Roles allowed: support,topology-rw,internal'
operationId: updateIntermediaryManagerCredentialName_3
parameters:
- in: path
name: managerId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CredentialNameRequest'
required: true
responses:
'204':
description: No Content
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Update Credential Name used by Intermediary Manager
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/{managerId}/gateway-sets:
get:
description: 'Roles allowed: support,topology-rw,topology-ro'
operationId: getGatewaySetsForIntermediaryManager_3
parameters:
- in: path
name: managerId
required: true
schema:
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/GatewaySets'
description: Ok
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'500':
description: Internal Server Error
summary: Get gateway sets for an Intermediary manager
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/{managerId}/pdt/{pdtId}:
delete:
description: 'Delete pdt from psm.
Roles allowed: support,topology-rw'
operationId: deletePdtFromPsm
parameters:
- in: path
name: managerId
required: true
schema:
type: string
- in: path
name: pdtId
required: true
schema:
type: string
responses:
'202':
content:
application/json:
schema:
$ref: '#/components/schemas/TopologyRequestsResponse'
description: Accepted
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Delete pdt from psm
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/{managerId}/pdt/{pdtId}/addresses/app:
patch:
description: 'Delete application addresses from pdt.
Roles allowed: support,topology-rw'
operationId: deleteAddressesFromAppPolicy
parameters:
- in: path
name: managerId
required: true
schema:
type: string
- in: path
name: pdtId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/AddressesApi'
required: true
responses:
'202':
content:
application/json:
schema:
$ref: '#/components/schemas/TopologyRequestResponse'
description: Accepted
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Delete app addresses from pdt
tags:
- Intermediary Manager
post:
description: 'Add addresses to app policy for given managerId and pdtId.
Roles allowed: support,topology-rw'
operationId: addAddressesToAppPolicy
parameters:
- in: path
name: managerId
required: true
schema:
type: string
- in: path
name: pdtId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/AddressWithExactMatch'
required: true
responses:
'202':
content:
application/json:
schema:
$ref: '#/components/schemas/PsmPdtAddAddressResponse'
description: Accepted
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Add application addresses to a pdt
tags:
- Intermediary Manager
/topology/manager/pensando-dsc-pdt/{managerId}/pdt/{pdtId}/addresses/infra:
patch:
description: 'Delete infra address from a pdt.
Roles allowed: support,topology-rw'
operationId: deleteAddressesFromInfraPolicy
parameters:
- in: path
name: managerId
required: true
schema:
type: string
- in: path
name: pdtId
required: true
schema:
type: string
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/AddressApi'
required: true
responses:
'202':
content:
application/json:
schema:
$ref: '#/components/schemas/TopologyRequestResponse'
description: Accepted
'400':
description: Bad Request
'401':
description: Unauthorized
'403':
description: Forbidden
'404':
description: Not Found
'409':
description: Conflict
'500':
description: Internal Server Error
summary: Delete infra address from a pdt
tags:
- Intermediary Manager
post:
description: 'Roles allowed: support,topology-rw'
operationId: a
# --- truncated at 32 KB (64 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cisco-secure-firewall/refs/heads/main/openapi/cisco-secure-firewall-intermediary-manager-api-openapi.yml