Palo Alto Networks

Palo Alto Networks Address Groups API

Address Groups

GitHub OpenAPI

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /address-groups List address groups · List address groups #
Ask an LLM
“Which address groups exist in a given folder?”
“Can I find an address group by name within a snippet?”
Tell an agent
List the address groups in folder {folder}.
Find address group {name} in snippet {snippet}.
POST /address-groups Create an address group · Create an address group #
Ask an LLM
“How do I create a new address group with a description and tags?”
“What's required to set up an address group, just an ID and name?”
Tell an agent
Create address group {name} with ID {id}.
Create address group {name} (ID {id}) tagged {tag} and described as {description}.
GET /address-groups/{id} Get an address group · Get an address group #
Ask an LLM
“What's configured on a specific address group?”
“Can I fetch a single address group by its ID?”
Tell an agent
Get address group {id}.
Show me the details of address group {id}.
PUT /address-groups/{id} Update an address group · Update an address group #
Ask an LLM
“Can I rename an existing address group or change its tags?”
“What can I edit on an address group after it's created?”
Tell an agent
Rename address group {id} to {name}.
Update address group {id} ({name}) with tags {tag}.
DELETE /address-groups/{id} Delete an address group · Delete an address group #
Ask an LLM
“How do I remove an address group I no longer use?”
“Can I delete an address group by its ID?”
Tell an agent destructive · confirm first
Delete address group {id}.
Remove address group {id} permanently.
GET /sse/config/v1/address-groups List firewall address groups · Palo Alto Networks List Address Groups #
Ask an LLM
“Which address groups are configured on my firewall, static and dynamic?”
“Can I see which address groups exist in a particular vsys or device group?”
Tell an agent
List every address group on the firewall.
Show the address group named {name}.
POST /sse/config/v1/address-groups Create a static or dynamic address group · Palo Alto Networks Create Address Group #
Ask an LLM
“Can I build an address group that picks up addresses automatically by tag?”
“What is needed to group several address objects into one new static group?”
Tell an agent
Create static address group {name} with member addresses {static}.
Create dynamic address group {name} in folder {folder} that matches the tag filter {dynamic}.
GET /sse/config/v1/address-groups/{id} Get an address group · Palo Alto Networks Get Address Group #
Ask an LLM
“What members or filter does a specific address group have?”
“Can I fetch one address group by its ID?”
Tell an agent
Fetch the SSE config address group {id} with its static members or dynamic filter.
Show the members of address group {id}.
PUT /sse/config/v1/address-groups/{id} Replace an address group definition · Palo Alto Networks Update Address Group #
Ask an LLM
“How do I change the members of an existing static address group?”
“Can I rewrite the tag filter on a dynamic address group I already have?”
Tell an agent
Replace the static members of address group {id} ({name}) with {static}.
Change the dynamic tag filter of address group {id} ({name}) to {dynamic}.
DELETE /sse/config/v1/address-groups/{id} Delete a firewall address group · Palo Alto Networks Delete Address Group #
Ask an LLM
“Is it possible to remove an address group without deleting the address objects inside it?”
“Can I delete a static or dynamic address group from the SSE config by its ID?”
Tell an agent destructive · confirm first
Delete the SSE config address group {id}.
Remove static or dynamic address group {id} and leave its member addresses in place.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-address-groups-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-address-groups-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-address-groups-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 2.0.0
  title: Objects Address Groups API
  description: These APIs are used for defining and managing policy object configurations within Strata Cloud Manager.
  termsOfService: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  contact:
    email: support@paloaltonetworks.com
    name: Palo Alto Networks Technical Support
    url: https://support.paloaltonetworks.com
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/config/objects/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
security:
- scmToken: []
tags:


# --- truncated at 32 KB (36 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-address-groups-api-openapi.yml