Palo Alto Networks Agent Scores API
Agent and endpoint experience score monitoring for tracking the health and experience of monitored user devices.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-agentscores-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Palo Alto Networks Agent Scores API
contact:
name: Palo Alto Networks Developer Support
url: https://pan.dev/
license:
name: Proprietary
url: https://www.paloaltonetworks.com/legal
version: '1.0'
description: 'Operations tagged AgentScores across 2 of this provider''s published API definitions: palo-alto-autonomous-dem-api-openapi-original.yml, palo-alto-networks-agentscores-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.sase.paloaltonetworks.com/adem/telemetry/v2
description: Autonomous DEM telemetry API server.
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
tags:
- name: AgentScores
description: Agent and endpoint experience score monitoring for tracking the health and experience of monitored user devices.
paths:
/mt/monitor/adem/v1/agents/scores:
get:
operationId: getAgentScores
summary: Palo Alto Networks Get Agent and Endpoint Scores
description: Returns experience scores for monitored agents and their host endpoints. Each agent score reflects the overall digital experience quality from that user's device including endpoint health, network conditions, and application responsiveness.
tags:
- AgentScores
parameters:
- name: start_time
in: query
description: Start of the time range in ISO 8601 format.
schema:
type: string
format: date-time
example: '2025-01-28T23:44:20Z'
- name: end_time
in: query
description: End of the time range in ISO 8601 format.
schema:
type: string
format: date-time
example: '2026-07-14T21:36:35Z'
- name: time_range
in: query
description: Relative time range shorthand.
schema:
type: string
enum:
- last_1_hour
- last_4_hours
- last_24_hours
- last_7_days
- last_30_days
example: last_24_hours
- name: user_id
in: query
description: Filter by user email address or identifier.
schema:
type: string
example: '519732'
- name: site_name
in: query
description: Filter by site name.
schema:
type: string
example: Production Gateway 79
- name: offset
in: query
schema:
type: integer
default: 0
example: 0
- name: limit
in: query
schema:
type: integer
default: 100
maximum: 1000
example: 100
responses:
'200':
description: Agent scores returned successfully.
content:
application/json:
schema:
type: object
properties:
data:
type: array
items:
$ref: '#/components/schemas/AgentScore'
total:
type: integer
offset:
type: integer
limit:
type: integer
examples:
GetAgentScores200Example:
summary: Default getAgentScores 200 response
x-microcks-default: true
value:
data:
- timestamp: '2024-03-05T03:27:52Z'
agent_id: '771821'
user_id: '954963'
device_name: Primary Agent 31
site_name: Staging Policy 66
overall_score: 61
endpoint_score: 31
network_score: 15
cpu_usage_pct: 66.06
memory_usage_pct: 24.27
sample_count: 361
total: 624
offset: 1
limit: 373
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'500':
$ref: '#/components/responses/InternalServerError'
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
security:
- oauth2: []
servers:
- url: https://api.sase.paloaltonetworks.com/adem/telemetry/v2
description: Autonomous DEM telemetry API server.
components:
responses:
Forbidden:
description: Insufficient permissions for this operation.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
InternalServerError:
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
BadRequest:
description: Invalid request parameters or body.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
Unauthorized:
description: Missing or invalid OAuth2 access token.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
schemas:
ErrorResponse:
type: object
properties:
_errors:
type: array
items:
type: object
properties:
code:
type: string
example: example-code
message:
type: string
example: Firewall incident blocked blocked firewall configured firewall.
details:
type: object
example: {}
example:
- code: example-code
message: Security detected monitoring activity firewall violation activity.
details: {}
_request_id:
type: string
example: '921009'
AgentScore:
type: object
properties:
timestamp:
type: string
format: date-time
description: Time bucket for the aggregated score.
example: '2024-03-05T03:27:52Z'
agent_id:
type: string
description: Unique ADEM agent identifier.
example: '771821'
user_id:
type: string
description: User identifier associated with the agent.
example: '954963'
device_name:
type: string
description: Hostname of the endpoint device.
example: Primary Agent 31
site_name:
type: string
description: Site name where the agent is located.
example: Staging Policy 66
overall_score:
type: integer
minimum: 0
maximum: 100
description: Overall experience score for this agent.
example: 61
endpoint_score:
type: integer
minimum: 0
maximum: 100
description: Endpoint hardware and software health score.
example: 31
network_score:
type: integer
minimum: 0
maximum: 100
description: Network connectivity quality score.
example: 15
cpu_usage_pct:
type: number
description: CPU usage percentage on the endpoint.
example: 66.06
memory_usage_pct:
type: number
description: Memory usage percentage on the endpoint.
example: 24.27
sample_count:
type: integer
description: Number of measurement samples in this time bucket.
example: 361
securitySchemes:
oauth2:
type: oauth2
description: OAuth 2.0 client credentials flow for obtaining an access token. Requires a client ID and client secret from the Palo Alto Networks SASE identity provider.
flows:
clientCredentials:
tokenUrl: https://auth.apps.paloaltonetworks.com/oauth2/access_token
scopes: {}
oauth2Bearer:
type: http
scheme: bearer
bearerFormat: JWT
description: OAuth 2.0 Bearer token for SASE platform authentication. Obtain using the client_credentials grant with your SASE service account client ID and client secret.
x-refined-from:
- palo-alto-autonomous-dem-api-openapi-original.yml
- palo-alto-networks-agentscores-api-openapi.yml