Palo Alto Networks

Palo Alto Networks Anti-Spyware Signatures API

Anti-Spyware Signatures

GitHub OpenAPI
Business capability
Threat Detection & Response Management BC-620.30

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /anti-spyware-signatures List custom anti-spyware signatures · List anti-spyware signatures #
Ask an LLM
“Which custom anti-spyware signatures are defined in a folder?”
“Can I list spyware signatures scoped to a snippet or device?”
Tell an agent
List anti-spyware signatures in folder {folder}.
Show the first {limit} anti-spyware signatures on device {device}.
POST /anti-spyware-signatures Create a custom anti-spyware signature · Create an anti-spyware signature #
Ask an LLM
“How do I add my own spyware threat signature with a threat ID?”
“Can a custom spyware signature reference a CVE and set a default action?”
Tell an agent
Create anti-spyware signature {threatname} with threat ID {threat_id}.
Add spyware signature {threatname} ({threat_id}) at severity {severity} for CVE {cve}.
GET /anti-spyware-signatures/{id} Get an anti-spyware signature · Get an anti-spyware signature #
Ask an LLM
“What severity and default action does one anti-spyware signature have?”
“Can I read a spyware signature's pattern by its ID?”
Tell an agent
Get anti-spyware signature {id}.
Show the pattern and action of spyware signature {id}.
PUT /anti-spyware-signatures/{id} Update an anti-spyware signature · Update an anti-spyware signature #
Ask an LLM
“Can I change the default action on an existing spyware signature?”
“How do I raise the severity of a custom anti-spyware signature?”
Tell an agent
Update anti-spyware signature {id} ({threatname}, threat ID {threat_id}) to severity {severity}.
Set default action {default_action} on spyware signature {id} named {threatname}, threat ID {threat_id}.
DELETE /anti-spyware-signatures/{id} Delete an anti-spyware signature · Delete an anti-spyware signature #
Ask an LLM
“How do I remove a custom anti-spyware signature?”
“Is a deleted spyware signature recoverable?”
Tell an agent destructive · confirm first
Delete anti-spyware signature {id}.
Remove the custom spyware signature {id}.
GET /sse/config/v1/anti-spyware-signatures List custom anti-spyware signatures · List all anti-spyware signatures #
Ask an LLM
“Which custom anti-spyware signatures are in a Prisma Access folder?”
“Can I find an anti-spyware signature by name?”
Tell an agent
List the SSE config anti-spyware signatures in folder {folder}.
Find anti-spyware signature {name} in folder {folder}.
POST /sse/config/v1/anti-spyware-signatures Create a custom anti-spyware signature · Create an anti-spyware signature #
Ask an LLM
“How do I add my own anti-spyware signature for a new threat?”
“Can a custom spyware signature reference a CVE and set a severity?”
Tell an agent
Create anti-spyware signature {threatname} with threat ID {threat_id} in folder {folder}.
Add spyware signature {threatname} (ID {threat_id}) in {folder} with severity {severity} and CVE {cve}.
DELETE /sse/config/v1/anti-spyware-signatures/{id} Delete a custom anti-spyware signature · Delete an Anti-spyware signature #
Ask an LLM
“How do I delete a spyware signature through the SSE config v1 API?”
“Will deleting a spyware signature stop detection of that threat?”
Tell an agent destructive · confirm first
Delete SSE config anti-spyware signature {id}.
Remove the obsolete spyware signature {id}.
PUT /sse/config/v1/anti-spyware-signatures/{id} Edit a custom anti-spyware signature · Edit an Anti-spyware signature #
Ask an LLM
“Can I edit a custom spyware signature through the SSE config v1 endpoint?”
“Is it possible to update the severity of a custom anti-spyware signature?”
Tell an agent
Set default action {default_action} on anti-spyware signature {id}.
Update signature {id} to threat name {threatname}, threat ID {threat_id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-anti-spyware-signatures-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-anti-spyware-signatures-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-anti-spyware-signatures-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 2.0.0
  title: Security Services Anti-Spyware Signatures API
  description: These APIs are used for defining and managing security services configurations within Strata Cloud Manager.
  termsOfService: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  contact:
    email: support@paloaltonetworks.com
    name: Palo Alto Networks Technical Support
    url: https://support.paloaltonetworks.com
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/config/security/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
security:
- scmToken: []
tags:


# --- truncated at 32 KB (34 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-anti-spyware-signatures-api-openapi.yml