Juniper Mist AI Orgs Setting API

API Calls to manage the Mist Organization Settings

OpenAPI Specification

mist-ai-orgs-setting-api-openapi.yml Raw ↑
openapi: 3.1.0
info:
  contact:
    email: tmunzer@juniper.net
    name: Thomas Munzer
  description: '> Version: **2604.1.1**

    >

    > Date: **May 13, 2026**

    <div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>


    ---

    ## Additional Documentation

    * [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)

    * [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)

    * [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)


    ## Helpful Resources

    * [API Sandbox and Exercises](https://api-class.mist.com/)

    * [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)

    * [Python Script Examples](https://github.com/tmunzer/mist_library)

    * [API Demo Apps](https://apps.mist-lab.fr/)

    * [Juniper Blog](https://blogs.juniper.net/)


    ## Mist Web Browser Extension:

    * Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)

    * Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)


    ---'
  license:
    name: MIT
    url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
  title: Mist Admins Orgs Setting API
  version: 2604.1.1
  x-logo:
    altText: Juniper-MistAI
    backgroundColor: '#FFFFFF'
    url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
  url: https://api.mist.com
- description: Mist Global 02
  url: https://api.gc1.mist.com
- description: Mist Global 03
  url: https://api.ac2.mist.com
- description: Mist Global 04
  url: https://api.gc2.mist.com
- description: Mist Global 05
  url: https://api.gc4.mist.com
- description: Mist EMEA 01
  url: https://api.eu.mist.com
- description: Mist EMEA 02
  url: https://api.gc3.mist.com
- description: Mist EMEA 03
  url: https://api.ac6.mist.com
- description: Mist EMEA 04
  url: https://api.gc6.mist.com
- description: Mist APAC 01
  url: https://api.ac5.mist.com
- description: Mist APAC 02
  url: https://api.gc5.mist.com
- description: Mist APAC 03
  url: https://api.gc7.mist.com
security:
- apiToken: []
- basicAuth: []
- basicAuth: []
  csrfToken: []
tags:
- description: API Calls to manage the Mist Organization Settings
  name: Orgs Setting
paths:
  /api/v1/orgs/{org_id}/setting:
    parameters:
    - $ref: '#/components/parameters/org_id'
    get:
      description: Get Org Settings
      operationId: getOrgSettings
      responses:
        '200':
          $ref: '#/components/responses/OrgSetting'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: getOrgSettings
      tags:
      - Orgs Setting
    put:
      description: Update Org Settings
      operationId: updateOrgSettings
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/org_setting'
        description: Request Body
      responses:
        '200':
          content:
            application/json:
              examples:
                Example:
                  value:
                    auto_device_naming:
                      enable: true
                      rules:
                      - match_device: ap
                        prefix: MIST-
                        src: lldp_port_desc
                    auto_deviceprofile_assignment:
                      enable: true
                      rules:
                      - expression: string
                        model: string
                        prefix: string
                        src: name
                        subnet: string
                        suffix: string
                        value: string
                    auto_site_assignment:
                      enable: true
                      rules:
                      - expression: string
                        model: string
                        prefix: string
                        src: name
                        subnet: string
                        suffix: string
                        value: string
                    cacerts:
                    - string
                    cloudshark:
                      apitoken: string
                      url: string
                    device_cert:
                      cert: string
                      key: string
                    disable_pcap: true
                    installer:
                      allow_all_sites: true
                      extra_site_ids:
                      - b069b358-4c97-5319-1f8c-7c5ca64d6ab1
                      grace_period: 0
                    mgmt:
                      mxtunnel_ids:
                      - b069b358-4c97-5319-1f8c-7c5ca64d6ab1
                      use_mxtunnel: true
                      use_wxtunnel: true
                    modified_time: 0
                    msp_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1
                    name: string
                    password_policy:
                      enabled: true
                      expiry_in_days: 365
                      min_length: 8
                      requires_special_char: true
                      requires_two_factor_auth: true
                    pcap:
                      bucket: string
                      max_pkt_len: 0
                    pcap_bucket_verified: true
                    remote_syslog:
                      enabled: true
                      send_to_all_servers: true
                      servers:
                      - facility: change-log
                        host: string
                        port: 0
                        protocol: udp
                        severity: critical
                        tag: string
                    security:
                      disable_local_ssh: true
                      fips_zeroize_password: string
                      limit_ssh_access: true
                    tags:
                    - string
                    ui_idle_timeout: 0
              schema:
                $ref: '#/components/schemas/org_setting'
          description: OK
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: updateOrgSettings
      tags:
      - Orgs Setting
  /api/v1/orgs/{org_id}/setting/blacklist:
    parameters:
    - $ref: '#/components/parameters/org_id'
    delete:
      description: Delete Org Blacklist Station Clients
      operationId: deleteOrgWirelessClientsBlocklist
      responses:
        '200':
          $ref: '#/components/responses/OK'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: deleteOrgWirelessClientsBlocklist
      tags:
      - Orgs Setting
    post:
      description: "Create Org Blacklist Client List. \n\nIf there is already a blacklist, this API will replace it with the new one. \n\nMax number of blacklist clients is 1000. \n\nRetrieve the current blacklisted clients from `blacklist_url` under Org:Setting\n"
      operationId: createOrgWirelessClientsBlocklist
      requestBody:
        content:
          application/json:
            examples:
              Example:
                value:
                  macs:
                  - 18-65-90-de-f4-c6
                  - 84-89-ad-5d-69-0d
            schema:
              $ref: '#/components/schemas/mac_addresses'
        description: Request Body
      responses:
        '200':
          $ref: '#/components/responses/MacsArray'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: createOrgWirelessClientsBlocklist
      tags:
      - Orgs Setting
  /api/v1/orgs/{org_id}/setting/pcap_bucket/setup:
    parameters:
    - $ref: '#/components/parameters/org_id'
    post:
      description: 'Provide Customer Bucket Name


        Setting up Custom PCAP Bucket Involves the following:

        * provide the bucket name

        * we’ll attempt to write a file MIST_TOKEN

        * you have to verify the ownership of the bucket by providing the content of the MIST_TOKEN'
      operationId: setOrgCustomBucket
      requestBody:
        content:
          application/json:
            examples:
              Example:
                value:
                  bucket: company-private-pcap
            schema:
              $ref: '#/components/schemas/pcap_bucket'
        description: Request Body
      responses:
        '200':
          $ref: '#/components/responses/PcapBucketConfig'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: setOrgCustomBucket
      tags:
      - Orgs Setting
  /api/v1/orgs/{org_id}/setting/pcap_bucket/verify:
    parameters:
    - $ref: '#/components/parameters/org_id'
    post:
      description: 'Verify Customer PCAP Bucket


        **Note**: If successful, a "VERIFIED" file will be created in the bucket'
      operationId: verifyOrgCustomBucket
      requestBody:
        content:
          application/json:
            examples:
              Example:
                value:
                  bucket: company-private-pcap
                  verify_token: eyJhbGciOiJIUzI1J9.eyJzdWIiOiIxMjM0joiMjgxOG5MDIyfQ.2rzcRvMA3Eg09NnjCAC-1EWMRtxAnFDM
            schema:
              $ref: '#/components/schemas/pcap_bucket_verify'
        description: Request Body
      responses:
        '200':
          $ref: '#/components/responses/OK'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: verifyOrgCustomBucket
      tags:
      - Orgs Setting
components:
  schemas:
    synthetictest_config_custom_probe:
      additionalProperties: false
      properties:
        aggressiveness:
          $ref: '#/components/schemas/synthetictest_config_aggressiveness'
        target:
          description: Can be URL (e.g. http://x.com, https://x.com:8080/path/to/resource), IP address, or IP:port combination
          examples:
          - 10.3.5.3:8080
          type: string
        threshold:
          description: In milliseconds
          examples:
          - 100
          type: integer
        type:
          $ref: '#/components/schemas/synthetictest_config_custom_probe_type'
      type: object
    switch_auto_upgrade_custom_versions:
      additionalProperties:
        type: string
      description: Custom version to be used. The Property Key is the switch hardware and the property value is the firmware version
      examples:
      - QFX5120-32C: 23.4R2-S2.1
        QFX5130-32CD: 23.4R2-S2.3
      type: object
    org_setting_junos_shell_access_read:
      default: none
      description: 'enum: `admin`, `viewer`, `none`'
      enum:
      - admin
      - none
      - viewer
      type: string
    simple_alert_dhcp_failure:
      additionalProperties: false
      properties:
        client_count:
          default: 10
          type: integer
        duration:
          default: 10
          description: failing within minutes
          maximum: 60
          minimum: 5
          type: integer
        incident_count:
          default: 20
          type: integer
      type: object
    time_of_day:
      default: any
      description: '`any` / HH:MM (24-hour format)'
      examples:
      - '12:00'
      type: string
    strings:
      items:
        type: string
      type: array
      uniqueItems: true
    account_juniper_info:
      properties:
        accounts:
          $ref: '#/components/schemas/juniper_accounts'
      type: object
    org_setting_gateway_mgmt_host_in_policy:
      additionalProperties: false
      properties:
        tenants:
          $ref: '#/components/schemas/strings'
      type: object
    app_probing_apps:
      description: APp-keys from [List Applications](/#operations/listApplications)
      examples:
      - - facebook
      items:
        type: string
      type: array
    marvis_self_driving:
      additionalProperties: false
      description: Self-driving network automation settings per domain
      properties:
        wan:
          $ref: '#/components/schemas/marvis_self_driving_domain'
        wired:
          $ref: '#/components/schemas/marvis_self_driving_domain'
        wireless:
          $ref: '#/components/schemas/marvis_self_driving_domain'
      type: object
    juniper_srx_auto_upgrade_custom_versions:
      additionalProperties:
        description: Firmware version to deploy on the specified SRX hardware
        examples:
        - 23.4R2-S2.1
        type: string
      description: Property key is the SRX Hardware model (e.g. "SRX4600")
      type: object
    idp_machine_cert_lookup_field:
      default: automatic
      description: 'allow customer to choose the EAP-TLS client certificate''s field to use for IDP Machine Groups lookup. enum: `automatic`, `cn`, `dns`'
      enum:
      - automatic
      - cn
      - dns
      type: string
    synthetictest_config_aggressiveness:
      default: auto
      description: 'enum: `auto`, `high`, `low`'
      enum:
      - auto
      - high
      - med
      - low
      type: string
    synthetictest_config_vlan_vlan_ids:
      examples:
      - - 10
        - 20
        - '{{vlan}}'
      items:
        $ref: '#/components/schemas/vlan_id_with_variable'
      type: array
    org_setting_auto_deviceprofile_assignment:
      additionalProperties: false
      properties:
        enable:
          type: boolean
        rules:
          $ref: '#/components/schemas/org_setting_auto_deviceprofile_assignment_rules'
      type: object
    optic_port_config:
      additionalProperties:
        $ref: '#/components/schemas/optic_port_config_port'
      description: Property key is the interface name or range (e.g. `et-0/0/47`, `et-0/0/48-49`)
      type: object
    org_setting_jcloud:
      additionalProperties: false
      properties:
        org_apitoken:
          description: JCloud Org Token
          type: string
        org_apitoken_name:
          description: JCloud Org Token Name
          type: string
        org_id:
          description: JCloud Org ID
          type: string
      type: object
    ssr_proxy:
      additionalProperties: false
      description: SSR proxy configuration to talk to Mist
      properties:
        disabled:
          default: false
          examples:
          - true
          type: boolean
        url:
          examples:
          - https://proxy.corp.com:8080/
          type: string
      type: object
    org_setting_cloudshark:
      additionalProperties: false
      properties:
        apitoken:
          examples:
          - accbd6f10c6d05c3
          type: string
        url:
          description: If using CS Enterprise
          examples:
          - https://cloudshark.hosted.domain
          type: string
      type: object
    org_setting_mist_nac_fingerprinting_wireless_coa:
      description: 'enum: `reauth`, `disconnect`'
      enum:
      - reauth
      - disconnect
      type: string
    radsec_certs_ap:
      description: RADSec certificates for AP
      items:
        examples:
        - '-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----'
        type: string
      type: array
    org_setting_junos_shell_access_helpdesk:
      default: none
      description: 'enum: `admin`, `viewer`, `none`'
      enum:
      - admin
      - none
      - viewer
      type: string
    pcap_bucket_verify:
      properties:
        bucket:
          examples:
          - company-private-pcap
          type: string
        verify_token:
          examples:
          - eyJhbGciOiJIUzI1J9.eyJzdWIiOiIxMjM0joiMjgxOG5MDIyfQ.2rzcRvMA3Eg09NnjCAC-1EWMRtxAnFDM
          type: string
      required:
      - bucket
      - verify_token
      type: object
    cacerts:
      description: List of PEM-encoded ca certs
      items:
        examples:
        - '-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----'
        type: string
      type: array
    org_setting_gateway_mgmt_overlay_ip:
      additionalProperties: false
      properties:
        ip:
          description: When it's going overlay, a routable IP to overlay will be required
          type: string
        node1_ip:
          description: For SSR HA cluster, another IP for node1 will be required, too
          type: string
      type: object
    org_setting_gateway_mgmt_app_probing:
      additionalProperties: false
      properties:
        apps:
          $ref: '#/components/schemas/app_probing_apps'
      type: object
    org_setting_wireless_pma:
      additionalProperties: false
      properties:
        enabled:
          default: true
          type: boolean
      type: object
    gateway_mgmt_host_out_policy:
      additionalProperties: false
      properties:
        path_preference:
          type: string
      type: object
    org_setting_celona:
      additionalProperties: false
      properties:
        api_key:
          examples:
          - $2a$04$OkaLCoJn6rDjR8ha.oduQVDST3.kJNIrte
          type: string
        api_prefix:
          examples:
          - cc3273fcb016470e
          type: string
      type: object
    org_setting_installer_extra_site_ids:
      items:
        examples:
        - 4ac1dcf4-9d8b-7211-65c4-057819f0862b
        format: uuid
        type: string
      type: array
    response_http401:
      additionalProperties: false
      properties:
        detail:
          examples:
          - Authentication credentials were not provided.
          type: string
      type: object
    org_setting_auto_assignment_rule:
      additionalProperties: false
      description: Auto_rules in org settings
      properties:
        create_new_site_if_needed:
          default: false
          description: If `src`==`geoip`. By default, a claimed device only gets assigned if the site exists to auto-create the site, enable this
          type: boolean
        expression:
          description: "If `src`==`name`, `src`==`lldp_system_name`, `src`==`dns_suffix`  \n      \"[0:3]\"            // \"abcdef\" -> \"abc\"  \n      \"split(.)[1]\"      // \"a.b.c\" -> \"b\"  \n      \"split(-)[1][0:3]\" // \"a1234-b5678-c90\" -> \"b56\"'"
          examples:
          - split(.)[1]
          type:
          - string
          - 'null'
        gatewaytemplate_id:
          description: If `src`==`geoip` and `create_new_site_if_needed`==`true`. If a gateway template is desired for this newly created site
          type: string
        match_country:
          description: If `src`==`geoip`
          type: string
        match_device_type:
          $ref: '#/components/schemas/device_type_default_ap'
        match_model:
          description: Optional/additional filter
          type: string
        model:
          description: If `src`==`model`
          type: string
        prefix:
          description: If `src`==`name`
          examples:
          - XX-
          type:
          - string
          - 'null'
        src:
          $ref: '#/components/schemas/org_setting_auto_site_assignment_src'
        subnet:
          description: If `src`==`subnet` or `ext_ip`==`ext_ip`
          type: string
        suffix:
          description: If `src`==`name`
          examples:
          - -YY
          type:
          - string
          - 'null'
        value:
          description: "If \n  * `src`==`ext_ip`, `src`==`subnet` or `src`==`model`, the site name\n  * `src`==`geoip`: site name for the device to be assigned to (\\\"city\\\" / \\\"city+country\\\" / ...)\""
          type: string
      required:
      - src
      type: object
    org_setting_auto_device_naming:
      additionalProperties: false
      properties:
        enable:
          type: boolean
        rules:
          $ref: '#/components/schemas/org_setting_auto_device_naming_rules'
      type: object
    org_setting_switch_mgmt:
      additionalProperties: false
      properties:
        ap_affinity_threshold:
          default: 12
          description: If the field is set in both site/setting and org/setting, the value from site/setting will be used.
          examples:
          - 10
          type: integer
      type: object
    org_setting_pcap:
      additionalProperties: false
      properties:
        bucket:
          examples:
          - myorg_pcap
          type: string
        max_pkt_len:
          default: 128
          description: Max_len of non-management packets to capture
          examples:
          - 128
          maximum: 128
          type: integer
      type: object
    org_setting_junos_shell_access_write:
      default: admin
      description: 'enum: `admin`, `viewer`, `none`'
      enum:
      - admin
      - none
      - viewer
      type: string
    simple_alert:
      additionalProperties: false
      description: Set of heuristic rules will be enabled when marvis subscription is not available. It triggers when, in a Z minute window, there are more than Y distinct client encountering over X failures
      properties:
        arp_failure:
          $ref: '#/components/schemas/simple_alert_arp_failure'
        dhcp_failure:
          $ref: '#/components/schemas/simple_alert_dhcp_failure'
        dns_failure:
          $ref: '#/components/schemas/simple_alert_dns_failure'
      type: object
    synthetictest_config_lan_networks_networks:
      description: List of networks to be used for synthetic tests
      examples:
      - - pos-stations
        - pos-machines
      items:
        type: string
      type: array
    org_setting_gateway_mgmt:
      additionalProperties: false
      properties:
        app_probing:
          $ref: '#/components/schemas/org_setting_gateway_mgmt_app_probing'
        app_usage:
          description: consumes uplink bandwidth, requires WA license
          type: boolean
        fips_enabled:
          default: false
          type: boolean
        host_in_policies:
          $ref: '#/components/schemas/org_setting_gateway_mgmt_host_in_policies'
        host_out_policies:
          $ref: '#/components/schemas/org_setting_gateway_mgmt_host_out_policies'
        overlay_ip:
          $ref: '#/components/schemas/org_setting_gateway_mgmt_overlay_ip'
      type: object
    org_setting_mist_nac_fingerprinting:
      additionalProperties: false
      description: Allows customer to enable client fingerprinting for policy enforcement
      properties:
        enabled:
          default: false
          description: enable/disable writes to NAC DDB fingerprint table
          type: boolean
        generate_coa:
          default: false
          description: enable/disable CoA triggers on fingerprint change for wired clients, always port-bounce
          type: boolean
        generate_wireless_coa:
          default: false
          description: enable/disable CoA triggers on fingerprint change for wireless clients
          type: boolean
        wireless_coa_type:
          $ref: '#/components/schemas/org_setting_mist_nac_fingerprinting_wireless_coa'
      type: object
    org_setting_tags:
      description: List of tags
      items:
        type: string
      type: array
    org_setting_junos_shell_access:
      additionalProperties: false
      description: "junos_shell_access: Manages role-based web-shell access.  \nWhen junos_shell access is not defined (Default) - No additional users are configured and web-shell uses default `mist` user to login.  \nWhen junos_shell_access is defined - Additional users mist-web-admin (admin permission), mist-web-viewer(viewer permission) are configured on the device and web-shell logs in with the mist-web-admin/mist-web-viewer user depending upon the shell access level. Setting the shell access level to \"none\", disables web-shell access for that specific role.\n"
      properties:
        admin:
          $ref: '#/components/schemas/org_setting_junos_shell_access_admin'
        helpdesk:
          $ref: '#/components/schemas/org_setting_junos_shell_access_helpdesk'
        read:
          $ref: '#/components/schemas/org_setting_junos_shell_access_read'
        write:
          $ref: '#/components/schemas/org_setting_junos_shell_access_write'
      type: object
    pcap_bucket:
      properties:
        bucket:
          examples:
          - company-private-pcap
          type: string
      required:
      - bucket
      type: object
    org_setting_junos_shell_access_admin:
      default: admin
      description: 'enum: `admin`, `viewer`, `none`'
      enum:
      - admin
      - none
      - viewer
      type: string
    org_setting_api_policy:
      additionalProperties: false
      properties:
        no_reveal:
          default: false
          description: "By default, API hides password/secrets when the user doesn't have write access\n  * `true`: API will hide passwords/secrets for all users\n  * `false`: API will hide passwords/secrets for read-only users"
          type: boolean
      type: object
    vlan_id_with_variable:
      oneOf:
      - type: string
      - maximum: 4094
        minimum: 1
        type: integer
    org_setting_mist_nac_server_cert:
      additionalProperties: false
      description: radius server cert to be presented in EAP TLS
      properties:
        cert:
          examples:
          - '-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----'
          type: string
        key:
          examples:
          - '-----BEGIN PRI...'
          type: string
        password:
          description: private key password (optional)
          type: string
      type: object
    org_setting_auto_device_naming_rules:
      items:
        $ref: '#/components/schemas/org_setting_auto_device_naming_rule'
      type:
      - array
      - 'null'
    org_setting_mist_nac_idp:
      additionalProperties: false
      properties:
        exclude_realms:
          $ref: '#/components/schemas/org_setting_mist_nac_idp_exclude_realms'
        id:
          $ref: '#/components/schemas/id'
        user_realms:
          $ref: '#/components/schemas/org_setting_mist_nac_idp_user_realms'
      type: object
    org_setting_mist_nac_mdm:
      additionalProperties: false
      description: MDM (Mobile Device Management) CoA configuration
      properties:
        coa_type:
          $ref: '#/components/schemas/nac_coa_type'
      type: object
    org_setting_marvis:
      additionalProperties: false
      properties:
        self_driving:
          $ref: '#/components/schemas/marvis_self_driving'
      type: object
    gateway_mgmt_host_out_policy_syslog_server:
      additionalProperties: false
      description: Allows to define the host_out_policy per Syslog Server. The Property key is the Syslog name
      properties:
        host:
          examples:
          - 103.35.3.5
          type: string
        path_preference:
          examples:
          - dc_only
          type: string
        server_name:
          examples:
          - dc_syslog_server
          type: string
      type: object
    msp_id:
      examples:
      - b9d42c2e-88ee-41f8-b798-f009ce7fe909
      format: uuid
      readOnly: true
      type: string
    simple_alert_arp_failure:
      additionalProperties: false
      properties:
        client_count:
          default: 10
          type: integer
        duration:
          default: 20
          description: failing within minutes
          maximum: 60
          minimum: 5
          type: integer
        incident_count:
          default: 10
          type: integer
      type: object
    org_setting_auto_deviceprofile_assignment_rules:
      items:
        $ref: '#/components/schemas/org_setting_auto_assignment_rule'
      type:
      - array
      - 'null'
    org_setting_jcloud_ra:
      additionalProperties: false
      description: JCloud Routing Assurance connexion
      properties:
        org_apitoken:
          description: JCloud Routing Assurance Org Token
          type: string
        org_apitoken_name:
          description: JCloud Routing Assurance Org Token Name
          type: string
        org_id:
          description: JCloud Routing Assurance Org ID
          type: string
      type: object
    created_time:
      description: When the object has been created, in epoch
      format: double
      readOnly: true
      type: number
    synthetictest_config:
      additionalProperties: false
      properties:
        aggressiveness:
          $ref: '#/components/schemas/synthetictest_config_aggressiveness'
        custom_probes:
          $ref: '#/components/schemas/synthetictest_config_custom_probes'
        disabled:
          default: false
          type: boolean
        lan_networks:
          $ref: '#/components/schemas/synthetictest_config_lan_networks'
        vlans:
          $ref: '#/components/schemas/synthetictest_config_vlans'
        wan_speedtest:
          $ref: '#/components/schemas/synthetictest_config_wan_speedtest'
      type: object
    org_setting_mist_nac_ip_version:
      default: v4
      description: 'by default, NAS devices(switches/aps) and proxies(mxedge) are configured to reach mist-nac via IPv4. enum: `v4`, `v6`'
      enum:
      - v4
      - v6
      type: string
    mac_addresses_macs:
      examples:
      - - 683b679ac024
      items:
        type: string
      minItems: 1
      type: array
      uniqueItems: true
    org_setting_cradlepoint:
      additionalProperties: false
      properties:
        cp_api_id:
          examples:
          - 84446d61-2206-4ea5-855a-0043f980be54
          readOnly: true
          type: string
        cp_api_key:
          examples:
          - 79c329da9893e34099c7d8ad5cb9c941
          readOnly: true
          type: string
        ecm_api_id:
          examples:
          - 73446d61-2206-4ea5-855a-0043f980be62
          readOnly: true
          type: string
        ecm_api_key:
          examples:
          - 68b329da9893e34099c7d8ad5cb9c940
          readOnly: true
          type: string
        enable_lldp:
          readOnly: true
          type: boolean
      readOnly: true
      type: object
    org_setting_auto_site_assignment_rules:
      items:
        $ref: '#/components/schemas/org_setting_auto_assignment_rule'
      type:
      - array
      - 'null'
    org_setting_device_cert:
      additionalProperties: false
      description: common device cert, optional
      properties:
        cert:
          examples:
          - '-----BEGIN CERTIFICATE-----\nMIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE\n-----END CERTIFICATE-----'
          type: string
        key:
          examples:
          - '-----BEGIN PRI...'
          type: string
      type: object
    mxedge_mgmt_oob_ip_type:
      default: dhcp
      description: 'enum: `dhcp`, `disabled`, `static`'
      enum:
      - dhcp
      - disabled
      - static
    

# --- truncated at 32 KB (68 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist-ai/refs/heads/main/openapi/mist-ai-orgs-setting-api-openapi.yml