A Network Template is a configuration template that allows for the consistent and standardized configuration of switches across an organization's network infrastructure. It includes settings such as RADIUS and ntp servers, shared elements like iot or corporate networks, and port profiles for specific devices. Switch templates can be applied at the site level, and they make the initial setup of switches easy and adaptable to specific site or switch settings.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/mist-orgs-network-templates-api"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
contact:
email: tmunzer@juniper.net
name: Thomas Munzer
description: '> Version: **2606.1.1**
>
> Date: **July 10, 2026**
<div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>
---
## Additional Documentation
* [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)
* [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)
* [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)
## Helpful Resources
* [API Sandbox and Exercises](https://api-class.mist.com/)
* [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)
* [Python Script Examples](https://github.com/tmunzer/mist_library)
* [API Demo Apps](https://apps.mist-lab.fr/)
* [Juniper Blog](https://blogs.juniper.net/)
## Mist Web Browser Extension:
* Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)
* Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)
---'
license:
name: MIT
url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
title: Mist Orgs Network Templates API
version: 2606.1.1
x-logo:
altText: Juniper-MistAI
backgroundColor: '#FFFFFF'
url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
url: https://api.mist.com
- description: Mist Global 02
url: https://api.gc1.mist.com
- description: Mist Global 03
url: https://api.ac2.mist.com
- description: Mist Global 04
url: https://api.gc2.mist.com
- description: Mist Global 05
url: https://api.gc4.mist.com
- description: Mist EMEA 01
url: https://api.eu.mist.com
- description: Mist EMEA 02
url: https://api.gc3.mist.com
- description: Mist EMEA 03
url: https://api.ac6.mist.com
- description: Mist EMEA 04
url: https://api.gc6.mist.com
- description: Mist APAC 01
url: https://api.ac5.mist.com
- description: Mist APAC 02
url: https://api.gc5.mist.com
- description: Mist APAC 03
url: https://api.gc7.mist.com
security:
- apiToken: []
- csrfToken: []
tags:
- description: 'A Network Template is a configuration template that allows for the consistent and standardized configuration of switches across an organization''s network infrastructure.
It includes settings such as RADIUS and ntp servers, shared elements like iot or corporate networks, and port profiles for specific devices.
Switch templates can be applied at the site level, and they make the initial setup of switches easy and adaptable to specific site or switch settings.'
name: Orgs Network Templates
paths:
/api/v1/orgs/{org_id}/networktemplates:
parameters:
- $ref: '#/components/parameters/org_id'
get:
description: List organization network templates that provide switch network, port, management, routing, NAC, and service configuration at the organization level.
operationId: listOrgNetworkTemplates
parameters:
- $ref: '#/components/parameters/limit'
- $ref: '#/components/parameters/page'
responses:
'200':
$ref: '#/components/responses/NetworktemplatesArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listOrgNetworkTemplates
tags:
- Orgs Network Templates
post:
description: 'Create an organization network template with network, port usage, switch management, routing, NAC, and service configuration at the organization level.
Network templates can be applied to multiple sites within the organization to provide consistent network configuration across sites.
To assign a network template to a site, use the [Update Site](/#operations/updateSiteInfo) endpoint and specify the network template ID in the `networktemplate_id` field of the request body.'
operationId: createOrgNetworkTemplate
requestBody:
content:
application/json:
examples:
Example:
value:
additional_config_cmds:
- set snmp community public
dhcp_snooping:
all_networks: true
enable_arp_spoof_check: true
enable_ip_source_guard: true
enabled: true
networks:
- string
dns_servers:
- string
dns_suffix:
- string
import_org_networks:
- ap
mist_nac:
enabled: true
network: string
name: string
networks:
property1:
subnet: 192.168.1.0/24
vlan_id: 10
property2:
subnet: 192.168.1.0/24
vlan_id: 10
ntp_servers:
- string
port_usages:
dynamic:
mode: dynamic
reset_default_when: link_down
rules:
- equals: string
equals_any:
- string
expression: string
src: lldp_chassis_id
usage: string
property1:
all_networks: false
allow_dhcpd: true
bypass_auth_when_server_down: true
description: string
disable_autoneg: false
disabled: false
duplex: auto
enable_mac_auth: true
enable_qos: true
guest_network: string
mac_auth_only: true
mac_auth_protocol: pap
mac_limit: 0
mode: access
networks:
- string
persist_mac: false
poe_disabled: false
port_auth: dot1x
port_network: string
server_reject_network: null
speed: auto
storm_control:
no_broadcast: false
no_multicast: false
no_registered_multicast: false
no_unknown_unicast: false
percentage: 80
stp_edge: true
voip_network: string
property2:
all_networks: false
allow_dhcpd: true
bypass_auth_when_server_down: true
description: string
disable_autoneg: false
disabled: false
duplex: auto
enable_mac_auth: true
enable_qos: true
guest_network: string
mac_auth_only: true
mac_auth_protocol: pap
mac_limit: 0
mode: access
networks:
- string
persist_mac: false
poe_disabled: false
port_network: string
server_reject_network: null
speed: auto
storm_control:
no_broadcast: false
no_multicast: false
no_registered_multicast: false
no_unknown_unicast: false
percentage: 80
stp_edge: true
voip_network: string
switch_mgmt:
config_revert_timer: 10
protect_re:
enabled: false
root_password: string
tacacs:
acct_servers:
- host: 198.51.100.1
port: '49'
secret: string
timeout: 10
enabled: true
network: string
tacplus_servers:
- host: 198.51.100.1
port: '49'
secret: string
timeout: 10
vrf_config:
enabled: false
vrf_instances:
property1:
extra_routes:
property1:
via: 192.0.2.10
property2:
via: 198.51.100.1
networks:
- string
property2:
extra_routes:
property1:
via: 198.51.100.1
property2:
via: 198.51.100.10
networks:
- string
schema:
$ref: '#/components/schemas/network_template'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Networktemplate'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: createOrgNetworkTemplate
tags:
- Orgs Network Templates
/api/v1/orgs/{org_id}/networktemplates/{networktemplate_id}:
parameters:
- $ref: '#/components/parameters/org_id'
- $ref: '#/components/parameters/networktemplate_id'
delete:
description: Delete an organization network template by template ID so it can no longer be applied to sites or site groups.
operationId: deleteOrgNetworkTemplate
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteOrgNetworkTemplate
tags:
- Orgs Network Templates
get:
description: Retrieve details for a specific organization network template, including network, port usage, switch management, routing, NAC, and service defaults.
operationId: getOrgNetworkTemplate
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/network_template'
description: OK
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: getOrgNetworkTemplate
tags:
- Orgs Network Templates
put:
description: Update an organization network template, including network, port usage, switch management, routing, NAC, and service defaults.
operationId: updateOrgNetworkTemplate
parameters: []
requestBody:
content:
application/json:
examples:
Example:
value:
additional_config_cmds:
- set snmp community public
dhcp_snooping:
all_networks: true
enable_arp_spoof_check: true
enable_ip_source_guard: true
enabled: true
networks:
- string
dns_servers:
- string
dns_suffix:
- string
extra_routes:
property1:
via: string
property2:
via: string
group_tags: {}
import_org_networks:
- ap
mist_nac:
enabled: true
network: string
name: string
networks:
property1:
subnet: 192.168.1.0/24
vlan_id: 10
property2:
subnet: 192.168.1.0/24
vlan_id: 10
ntp_servers:
- string
port_usages:
dynamic:
mode: dynamic
reset_default_when: link_down
rules:
- equals: string
equals_any:
- string
expression: string
src: lldp_chassis_id
usage: string
property1:
all_networks: false
allow_dhcpd: true
bypass_auth_when_server_down: true
description: string
disable_autoneg: false
disabled: false
duplex: auto
enable_mac_auth: true
enable_qos: true
guest_network: string
mac_auth_only: true
mac_auth_protocol: pap
mac_limit: 0
mode: access
networks:
- string
persist_mac: false
poe_disabled: false
port_auth: dot1x
port_network: string
server_reject_network: null
speed: auto
storm_control:
no_broadcast: false
no_multicast: false
no_registered_multicast: false
no_unknown_unicast: false
percentage: 80
stp_edge: true
voip_network: string
property2:
all_networks: false
allow_dhcpd: true
bypass_auth_when_server_down: true
description: string
disable_autoneg: false
disabled: false
duplex: auto
enable_mac_auth: true
enable_qos: true
guest_network: string
mac_auth_only: true
mac_auth_protocol: pap
mac_limit: 0
mode: access
networks:
- string
persist_mac: false
poe_disabled: false
port_network: string
server_reject_network: null
speed: auto
storm_control:
no_broadcast: false
no_multicast: false
no_registered_multicast: false
no_unknown_unicast: false
percentage: 80
stp_edge: true
voip_network: string
switch_mgmt:
config_revert_timer: 10
protect_re:
enabled: false
root_password: string
tacacs:
acct_servers:
- host: 198.51.100.1
port: '49'
secret: string
timeout: 10
enabled: true
network: string
tacplus_servers:
- host: 198.51.100.1
port: '49'
secret: string
timeout: 10
vrf_config:
enabled: false
vrf_instances:
property1:
extra_routes:
property1:
via: 198.51.100.1
property2:
via: 198.51.100.2
networks:
- string
property2:
extra_routes:
property1:
via: 198.51.100.1
property2:
via: 198.51.100.2
networks:
- string
schema:
$ref: '#/components/schemas/network_template'
description: Request Body
responses:
'200':
content:
application/json:
examples:
Example:
value:
additional_config_cmds:
- set snmp community public
dhcp_snooping:
all_networks: true
enable_arp_spoof_check: true
enable_ip_source_guard: true
enabled: true
networks:
- string
dns_servers:
- string
dns_suffix:
- string
extra_routes:
property1:
via: string
property2:
via: string
import_org_networks:
- ap
mist_nac:
enabled: true
network: string
name: string
networks:
property1:
subnet: 192.168.1.0/24
vlan_id: 10
property2:
subnet: 192.168.1.0/24
vlan_id: 10
ntp_servers:
- string
port_usages:
dynamic:
mode: dynamic
reset_default_when: link_down
rules:
- equals: string
equals_any:
- string
expression: string
src: lldp_chassis_id
usage: string
property1:
all_networks: false
allow_dhcpd: true
bypass_auth_when_server_down: true
description: string
disable_autoneg: false
disabled: false
duplex: auto
enable_mac_auth: true
enable_qos: true
guest_network: string
mac_auth_only: true
mac_auth_protocol: pap
mac_limit: 0
mode: access
networks:
- string
persist_mac: false
poe_disabled: false
port_auth: dot1x
port_network: string
server_reject_network: null
speed: auto
storm_control:
no_broadcast: false
no_multicast: false
no_registered_multicast: false
no_unknown_unicast: false
percentage: 80
stp_edge: true
voip_network: string
property2:
all_networks: false
allow_dhcpd: true
bypass_auth_when_server_down: true
description: string
disable_autoneg: false
disabled: false
duplex: auto
enable_mac_auth: true
enable_qos: true
guest_network: string
mac_auth_only: true
mac_auth_protocol: pap
mac_limit: 0
mode: access
networks:
- string
persist_mac: false
poe_disabled: false
port_network: string
server_reject_network: null
speed: auto
storm_control:
no_broadcast: false
no_multicast: false
no_registered_multicast: false
no_unknown_unicast: false
percentage: 80
stp_edge: true
voip_network: string
switch_mgmt:
config_revert_timer: 10
protect_re:
enabled: false
root_password: string
tacacs:
acct_servers:
- host: 198.51.100.1
port: '49'
secret: string
timeout: 10
enabled: true
network: string
tacplus_servers:
- host: 198.51.100.1
port: '49'
secret: string
timeout: 10
vrf_config:
enabled: false
vrf_instances:
property1:
extra_routes:
property1:
via: 198.51.100.1
property2:
via: 198.51.100.2
networks:
- string
property2:
extra_routes:
property1:
via: 198.51.100.1
property2:
via: 198.51.100.2
networks:
- string
schema:
$ref: '#/components/schemas/network_template'
description: OK
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateOrgNetworkTemplate
tags:
- Orgs Network Templates
components:
schemas:
radius_acct_port:
anyOf:
- maximum: 65545
minimum: 1
type: integer
- type: string
description: RADIUS Auth Port, value from 1 to 65535, default is 1813
junos_port_config_duplex:
default: auto
description: 'enum: `auto`, `full`, `half`'
enum:
- auto
- full
- half
type: string
switch_port_usage_dynamic_rule:
additionalProperties: false
description: Dynamic port usage rule evaluated against LLDP, RADIUS, or peer MAC attributes
properties:
description:
description: Optional description of the rule
type: string
equals:
description: Exact value that the selected source attribute must match
type: string
equals_any:
$ref: '#/components/schemas/switch_port_usage_dynamic_rule_equals_any'
description: List of values where any match satisfies this dynamic rule
expression:
description: '"[0:3]":"abcdef" -> "abc"
"split(.)[1]": "a.b.c" -> "b"
"split(-)[1][0:3]: "a1234-b5678-c90" -> "b56"'
type: string
src:
$ref: '#/components/schemas/switch_port_usage_dynamic_rule_src'
description: Source attribute evaluated by this dynamic rule
usage:
description: Port usage name to apply when this dynamic rule matches
type: string
required:
- src
type: object
switch_vrf_instances:
additionalProperties:
$ref: '#/components/schemas/switch_vrf_instance'
description: Property key is the network name
examples:
- guest:
extra_routes:
0.0.0.0/0:
via: 192.168.31.1
networks:
- guest
type: object
switch_mist_nac:
additionalProperties: false
description: Mist NAC RadSec settings for a switch
properties:
enabled:
description: Whether Mist NAC RadSec is enabled for the switch
type: boolean
network:
description: Switch network used for Mist NAC RadSec connectivity
type: string
type: object
snmp_usm:
additionalProperties: false
description: SNMPv3 User-based Security Model configuration
properties:
engine_type:
$ref: '#/components/schemas/snmp_usm_engine_type'
description: SNMP engine type used for this USM configuration
remote_engine_id:
description: Required only if `engine_type`==`remote_engine`
examples:
- 00:00:00:0b:00:00:70:10:6f:08:b6:3f
type: string
users:
$ref: '#/components/schemas/snmp_usm_users'
description: SNMPv3 USM users for this engine
type: object
org_id:
description: Unique identifier of a Mist organization
examples:
- a97c1b22-a4e9-411e-9bfd-d8695a0f9e61
format: uuid
readOnly: true
type: string
tacacs_auth_server:
additionalProperties: false
description: TACACS+ authentication server settings
properties:
host:
description: Address or hostname of the TACACS+ authentication server
type: string
port:
description: TCP port used by the TACACS+ authentication server
type: string
secret:
description: Shared secret used with this TACACS+ authentication server
format: password
type: string
timeout:
default: 10
description: TACACS+ authentication server timeout, in seconds
type: integer
type: object
switch_radius_config_auth_server_selection:
default: ordered
description: 'Selection strategy for RADIUS authentication servers. enum: `ordered`, `unordered`'
enum:
- ordered
- unordered
type: string
sw_routing_policies:
additionalProperties:
$ref: '#/components/schemas/sw_routing_policy'
description: Switch routing policies keyed by routing policy name
type: object
switch_bgp_config_hold_time:
description: Hold time is three times the interval at which keepalive messages are sent. It indicates to the peer the length of time that it should consider the sender valid. Must be 0 or a number in the range 3-65535.
oneOf:
- $ref: '#/components/schemas/switch_bgp_config_hold_time_zero'
- $ref: '#/components/schemas/switch_bgp_config_hold_time_integer'
radius_acct_server:
additionalProperties: false
description: RADIUS accounting server settings
properties:
host:
description: Address or hostname of the RADIUS accounting server
examples:
- 1.2.3.4
type: string
keywrap_enabled:
description: Whether RADIUS keywrap is enabled for messages sent to this accounting server
type: boolean
keywrap_format:
$ref: '#/components/schemas/radius_keywrap_format'
description: Encoding format for RADIUS keywrap KEK and MACK values
keywrap_kek:
description: RADIUS keywrap key encryption key (KEK)
examples:
- '1122334455'
type: string
keywrap_mack:
description: RADIUS keywrap message authentication code key (MACK)
examples:
- '1122334455'
type: string
port:
$ref: '#/components/schemas/radius_acct_port'
description: UDP port used by the RADIUS accounting server
secret:
description: Shared secret used with this RADIUS accounting server
examples:
- testing123
format: password
type: string
required:
- host
- secret
type: object
acl_tag_spec:
additionalProperties: false
description: Layer 4 protocol and destination-port match constraint for an ACL tag
properties:
port_range:
default: '0'
description: Matched dst port, "0" means any
type: string
protocol:
default: any
description: '`tcp` / `udp` / `icmp` / `icmp6` / `gre` / `any` / `:protocol_number`, `protocol_number` is between 1-254, default is `any` `protocol_number` is between 1-254'
type: string
type: object
switch_port_usage_dynamic_vlan_networks:
description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
examples:
- - corp
- user
items:
type: string
type: array
ntp_servers:
description: List of NTP servers specific to this device. By default, those in Site Settings will be used
items:
type: string
type: array
junos_port_config:
additionalProperties: false
description: Junos switch port configuration
properties:
ae_disable_lacp:
description: To disable LACP support for the AE interface
type: boolean
ae_idx:
description: Users could force to use the designated AE name
type: integer
ae_lacp_force_up:
default: false
description: 'If `aggregated`==`true`, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only'
type: boolean
ae_lacp_passive:
default: false
description: If `aggregated`==`true`, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used
type: boolean
ae_lacp_slow:
description: To use slow timeout
type: boolean
aggregated:
default: false
description: Whether this port is configured as an aggregated Ethernet member
type: boolean
critical:
default: false
description: To generate port up/down alarm
type: boolean
description:
description: H
# --- truncated at 32 KB (153 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist/refs/heads/main/openapi/mist-orgs-network-templates-api-openapi.yml