Palo Alto Networks App Catalog API
SaaS application catalog and metadata.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-app-catalog-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Palo Alto Networks App Catalog API
version: '1.0'
contact:
name: Palo Alto Networks Developer Support
url: https://pan.dev/
license:
name: Proprietary
url: https://www.paloaltonetworks.com/legal
description: 'Operations tagged App Catalog across 2 of this provider''s published API definitions: palo-alto-networks-app-catalog-api-openapi.yml, palo-alto-sspm-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
- url: https://api.sase.paloaltonetworks.com/sspm
description: SASE SSPM API production server.
security:
- oauth2Bearer: []
tags:
- name: App Catalog
description: SaaS application catalog and metadata.
paths:
/v1/app-catalog:
get:
operationId: listAppCatalog
summary: Palo Alto Networks List SaaS Application Catalog
description: Returns the catalog of SaaS applications supported for SSPM posture assessment. Each entry describes the application, the number of available posture checks, and supported compliance frameworks.
tags:
- App Catalog
parameters:
- name: category
in: query
description: Filter by application category.
schema:
type: string
example: advanced
- name: offset
in: query
description: Number of results to skip for pagination.
schema:
type: integer
default: 0
example: 0
- name: limit
in: query
description: Maximum number of catalog entries to return.
schema:
type: integer
default: 50
maximum: 200
example: 50
responses:
'200':
description: Application catalog returned.
content:
application/json:
schema:
type: object
properties:
total:
type: integer
items:
type: array
items:
$ref: '#/components/schemas/CatalogApp'
examples:
ListAppCatalog200Example:
summary: Default listAppCatalog 200 response
x-microcks-default: true
value:
total: 731
items:
- app_type: standard
display_name: John Wilson
category: custom
check_count: 923
compliance_frameworks:
- example-compliance_frameworks_item
- example-compliance_frameworks_item
logo_url: https://login.acme-systems.org/083bb0
- app_type: standard
display_name: John Wilson
category: custom
check_count: 923
compliance_frameworks:
- example-compliance_frameworks_item
- example-compliance_frameworks_item
logo_url: https://login.acme-systems.org/083bb0
'401':
description: Invalid or missing Bearer token.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
ListAppCatalog401Example:
summary: Default listAppCatalog 401 response
x-microcks-default: true
value:
error: example-error
message: Malware violation rule blocked detected endpoint policy detected.
request_id: f7942ddd-4571-4f6e-a8a1-00c0f9d7dfb4
'403':
description: Insufficient permissions.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
ListAppCatalog403Example:
summary: Default listAppCatalog 403 response
x-microcks-default: true
value:
error: example-error
message: Malware violation rule blocked detected endpoint policy detected.
request_id: f7942ddd-4571-4f6e-a8a1-00c0f9d7dfb4
'500':
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
ListAppCatalog500Example:
summary: Default listAppCatalog 500 response
x-microcks-default: true
value:
error: example-error
message: Malware violation rule blocked detected endpoint policy detected.
request_id: f7942ddd-4571-4f6e-a8a1-00c0f9d7dfb4
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
components:
schemas:
CatalogApp:
type: object
properties:
app_type:
type: string
description: Application type identifier used for onboarding.
example: standard
display_name:
type: string
description: Human-readable application name.
example: John Wilson
category:
type: string
description: Application category (e.g., collaboration, crm, storage).
example: custom
check_count:
type: integer
description: Number of posture checks available for this application.
example: 923
compliance_frameworks:
type: array
items:
type: string
description: Compliance frameworks covered by checks for this application.
example:
- example-compliance_frameworks_item
- example-compliance_frameworks_item
logo_url:
type: string
format: uri
description: URL to the application logo.
example: https://login.acme-systems.org/083bb0
ErrorResponse:
type: object
properties:
error:
type: string
description: Error code identifying the error type.
example: example-error
message:
type: string
description: Human-readable description of the error.
example: Malware violation rule blocked detected endpoint policy detected.
request_id:
type: string
description: Request identifier for support correlation.
example: f7942ddd-4571-4f6e-a8a1-00c0f9d7dfb4
securitySchemes:
oauth2Bearer:
type: http
scheme: bearer
bearerFormat: JWT
description: OAuth 2.0 Bearer token for SASE platform authentication. Obtain using the client_credentials grant with your SASE service account client ID and client secret.
x-refined-from:
- palo-alto-networks-app-catalog-api-openapi.yml
- palo-alto-sspm-api-openapi-original.yml