Palo Alto Networks

Palo Alto Networks Applications API

The Applications API from Palo Alto Networks — 48 operation(s) for applications.

GitHub OpenAPI

Operations 48

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /seb-api/v1/applications List all secure browser applications · List all applications #
Ask an LLM
“Can I see every application defined in the Secure Enterprise Browser console across all types?”
“Is it possible to search secure browser applications by name or URL and page through them?”
Tell an agent
List all secure browser applications whose URL contains {url}.
Show secure browser applications of every type named like {name}, sorted by {sort}.
GET /seb-api/v1/applications/{id} Get a secure browser application by ID · Get an application by ID #
Ask an LLM
“What is configured on a single secure browser application when I only know its ID?”
“Can I view the draft rather than the active version of a secure browser application?”
Tell an agent
Fetch secure browser application {id} without specifying its type.
Get the {configurationVersion} configuration of secure browser application {id}.
DELETE /seb-api/v1/applications/{id} Delete a secure browser application by ID · Delete an application by ID #
Ask an LLM
“Can I permanently remove one secure browser application using just its ID?”
“Is deleting a secure browser application by ID reversible?”
Tell an agent destructive · confirm first
Permanently delete secure browser application {id} by its ID alone.
Remove the secure browser app with ID {id}, no type needed.
GET /seb-api/v1/applications/type/{type} List secure browser applications of one type · List applications by type #
Ask an LLM
“Which secure browser applications exist of a particular type, like private or non-web apps?”
“Can I filter the applications of a single type by name?”
Tell an agent
List all secure browser applications of type {type}.
Find {type} applications in the secure browser named {name}.
POST /seb-api/v1/applications/type/{type} Create a secure browser application · Create an application #
Ask an LLM
“How do I add a single new custom application to the Secure Enterprise Browser console?”
“Is there a limit on how many URLs custom, private and non-web apps can hold combined?”
Tell an agent
Create one new secure browser application of type {type}.
Add a single {type} app to the secure browser management console.
GET /seb-api/v1/applications/type/{type}/{id} Get a secure browser application within a type · Get an application by ID by type #
Ask an LLM
“Can I fetch a secure browser application by ID scoped to its type?”
“What does the active configuration of a specific private app look like?”
Tell an agent
Get the {type} secure browser application {id}.
Show the {configurationVersion} version of {type} app {id}.
PATCH /seb-api/v1/applications/type/{type}/{id} Partially update a secure browser application · Update an application #
Ask an LLM
“Can I change a few attributes of a secure browser application and leave the rest untouched?”
“Does editing a secure browser app's URLs count toward the 15,000-URL tenant limit?”
Tell an agent
Patch the {type} secure browser application {id} with only the changed attributes.
Update secure browser app {id} of type {type}.
DELETE /seb-api/v1/applications/type/{type}/{id} Delete a secure browser application of a type · Delete an application by type #
Ask an LLM
“Can I remove a secure browser app when I know both its type and ID?”
“What happens when I delete a non-web application from the secure browser?”
Tell an agent destructive · confirm first
Delete the {type} secure browser application {id}.
Remove {type} app {id} from the secure browser console.
GET /seb-api/v1/applications/categories List secure browser application categories · List application categories #
Ask an LLM
“What application categories are available in the Secure Enterprise Browser?”
“Which categories can I assign to a secure browser app?”
Tell an agent
List the secure browser application categories.
Show me every category available for browser applications.
POST /seb-api/v1/applications/bulk-create/{type} Bulk create secure browser applications · Bulk create applications #
Ask an LLM
“Can I add many secure browser applications of one type in a single request?”
“Is there a faster way to load dozens of private apps into the secure browser at once?”
Tell an agent
Bulk create several {type} applications in the secure browser.
Import a batch of {type} apps into the secure browser console in one call.
POST /seb-api/v1/applications/bulk-delete Bulk delete secure browser applications · Bulk delete applications #
Ask an LLM
“Can I delete many secure browser applications at once in a single atomic operation?”
“If one ID in a bulk delete fails, are the other apps still removed?”
Tell an agent destructive · confirm first
Bulk delete the secure browser applications {appIds}.
Permanently remove all of these browser app IDs at once: {appIds}.
GET /sse/config/v1/applications List Prisma Access application objects in a folder · List applications #
Ask an LLM
“Which custom application objects are defined in a Prisma Access config folder?”
“Can I page through Prisma Access application objects with limit and offset?”
Tell an agent
List Prisma Access application objects in folder {folder}.
Find the Prisma Access application named {name} in folder {folder}.
POST /sse/config/v1/applications Create a Prisma Access application object · Create an application #
Ask an LLM
“How do I define a custom App-ID application in a Prisma Access folder with its risk and category?”
“Can I mark a new Prisma Access application as evasive or used by malware?”
Tell an agent
Create Prisma Access application {name} in folder {folder} with category {category}, subcategory {subcategory}, technology {technology} and risk {risk}.
Add a custom app {name} to Prisma Access folder {folder} with a TCP timeout of {tcp_timeout} seconds.
DELETE /sse/config/v1/applications/{id} Delete a Prisma Access application object · Delete an application #
Ask an LLM
“Can I remove a custom application object from Prisma Access configuration?”
“What gets deleted when I drop a Prisma Access App-ID object?”
Tell an agent destructive · confirm first
Delete Prisma Access application object {id}.
Remove the custom Prisma Access app {id} from the config.
GET /sse/config/v1/applications/{id} Get a Prisma Access application object · Get an application by ID #
Ask an LLM
“What risk level and characteristics does a given Prisma Access application object have?”
“Can I look up one Prisma Access App-ID object by its identifier?”
Tell an agent
Get Prisma Access application object {id}.
Show the category and risk of Prisma Access app {id}.
PUT /sse/config/v1/applications/{id} Edit a Prisma Access application object · Edit an application #
Ask an LLM
“Can I change the risk rating of an existing Prisma Access application object?”
“Is it possible to adjust session timeouts on a custom Prisma Access app?”
Tell an agent
Edit Prisma Access application {id} and set its risk to {risk}.
Change the UDP timeout of Prisma Access app {id} to {udp_timeout} seconds.
GET /mt/monitor/adem/v1/applications List applications monitored by Autonomous DEM · Palo Alto Networks List Monitored Applications #
Ask an LLM
“Which applications is Autonomous DEM probing with synthetic tests?”
“What synthetic tests are configured for a monitored application?”
Tell an agent
List the applications configured for monitoring in Autonomous DEM.
Show the ADEM synthetic tests for monitored application {app_id}.
POST /appid/api/v1/download/app Download the application inventory as CSV · Download Application Inventory #
Ask an LLM
“Can I export the complete Prisma Cloud application inventory to a CSV file?”
“Is it possible to download only apps with a certain business criticality from the inventory?”
Tell an agent
Download the application inventory CSV filtered to business owner {businessOwner}.
Export the inventory of {environment} applications as a CSV.
GET /appid/api/v1/app/criteria Download all application discovery criteria · Get Discovery Criteria #
Ask an LLM
“What discovery criteria group my assets into applications?”
“Can I include deleted discovery criteria when listing them?”
Tell an agent
Download all application discovery criteria, predefined and custom.
List discovery criteria with deleted ones included set to {fetch_deleted}.
POST /appid/api/v1/app/criteria Create custom application discovery criteria · Create Discovery Criteria #
Ask an LLM
“How do I define a custom filter that groups scanned assets into a new application?”
“Can creating discovery criteria also create the application definition?”
Tell an agent
Create discovery criteria {name} for application {app} with metadata {metadata}.
Add custom discovery criteria {name} for {app} and set create_definition to {create_definition}.
GET /appid/api/v1/app/criteria/{id} Get an application's discovery criteria · Get Application Discovery Criteria by ID #
Ask an LLM
“Which discovery criteria were used to find a particular application?”
“Can I see the asset filter behind one app in the application inventory?”
Tell an agent
Get the discovery criteria for application {id}.
Show how application {id} was discovered.
DELETE /appid/api/v1/app/criteria/{id} Delete application discovery criteria · Delete Discovery Criteria #
Ask an LLM
“Can I remove a custom discovery criteria that I no longer need?”
“What permission do I need to delete discovery criteria?”
Tell an agent destructive · confirm first
Delete discovery criteria {id}.
Remove the application discovery rule with criteria ID {id}.
PATCH /appid/api/v1/app/criteria/{id} Update application discovery criteria · Update Discovery Criteria #
Ask an LLM
“Can I rename or change the filter of an existing discovery criteria?”
“Is it possible to point existing discovery criteria at a different application?”
Tell an agent
Update discovery criteria {id} to name {name}, application {app} and metadata {metadata}.
Change the metadata filter on discovery criteria {id} to {metadata}.
GET /appid/api/v1/download/app/{id} Download an application's details as CSV · Download Application Details #
Ask an LLM
“Can I export the alerts, vulnerabilities or assets of one application to CSV?”
“Which file types can I choose when downloading an application's details?”
Tell an agent
Download the {file_type} details CSV for application {id}.
Export application {id} details as a {file_type} file.
GET /appid/api/v1/download/app/config/{id} Download an Application Bill of Materials · Download Application ABOM #
Ask an LLM
“How do I get the Application Bill of Materials for an app?”
“Can I download an ABOM listing an application's assets and vulnerabilities as CSV?”
Tell an agent
Download the ABOM for application {id}.
Get the application bill of materials CSV for app {id}.
POST /appid/api/v2/app List discovered applications in the inventory · Get All Applications #
Ask an LLM
“Which applications has Prisma Cloud discovered in my Application Inventory?”
“Can I filter discovered applications by owner or business criticality?”
Tell an agent
List discovered applications owned by {owner}.
Show inventory applications in environment {environment} with criticality {businessCriticality}.
GET /appid/api/v2/app/{id} Get a discovered application's details · Get Application by ID #
Ask an LLM
“What details does the inventory hold for one discovered application?”
“Can I look up an Application Inventory entry by its ID?”
Tell an agent
Get inventory details for discovered application {id}.
Show the owner and environment of inventory app {id}.
POST /appid/api/v2/app/{id}/assets List assets that belong to an application · Get Assets Associated with an Application #
Ask an LLM
“Which cloud assets are associated with a discovered application?”
“Can I filter and page through the assets of one application?”
Tell an agent
List the assets associated with application {id}.
Get the next page of assets for application {id} using token {nextPageToken}.
POST /appid/api/v2/app/{id}/vulnerabilities List vulnerabilities in an application · Get Vulnerabilities in an Application #
Ask an LLM
“What vulnerabilities affect a discovered application?”
“Can I filter an application's vulnerabilities before paging through them?”
Tell an agent
List the vulnerabilities found in application {id}.
Show vulnerabilities for application {id} matching {filters}.
POST /appid/api/v2/app/{id}/alerts List alerts for an application · Get Alerts for an Application #
Ask an LLM
“Which security alerts are open against a discovered application?”
“Can I see the alert details for one app in the inventory?”
Tell an agent
List the alerts for application {id}.
Show alerts on application {id} matching {filters}.
GET /appid/api/v2/app/summary Get application inventory statistics · Get Application Summary #
Ask an LLM
“How many applications have been discovered in my environment overall?”
“What are the total vulnerability counts across all discovered applications?”
Tell an agent
Get the application summary statistics for my environment.
Show how many apps and vulnerabilities the inventory has in total.
POST /appid/api/v2/app/{id}/grouped-counts Get an application's risk counts · Get Risk Count of an Application #
Ask an LLM
“What is the grouped risk count for a single application?”
“Can I get risk counts for one app narrowed by filters?”
Tell an agent
Get the risk counts for application {id}.
Show grouped risk counts for application {id} using filters {filters}.
GET /appid/api/v2/tags List tags used for application discovery · List Tags #
Ask an LLM
“Which tags are used to scan and discover applications?”
“What asset tags drive application discovery in Prisma Cloud?”
Tell an agent
List the tags used to discover applications.
Show me every discovery tag for the application inventory.
POST /appid/search/api/v1/app Search applications with an RQL query · Get Applications by RQL #
Ask an LLM
“Can I find discovered applications by writing an RQL query against the application inventory?”
“Which applications match a saved RQL search over a given time range?”
Tell an agent
Run the RQL application search {query}.
Search applications with RQL {query} over time range {timeRange}.
POST /appid/search/api/v1/app/risk Get an application's vulnerabilities and alerts by query · Get Vulnerabilities and Alerts for an Application #
Ask an LLM
“What vulnerabilities and alerts are tied to the assets behind one application, found through the search API?”
“Can I pull an application's combined risk findings, vulnerabilities plus alerts, in a single search call?”
Tell an agent
Search the vulnerabilities and alerts on the assets of application {applicationId}.
Return combined vulnerability and alert findings for application {applicationId} matching {query}.
POST /appid/search/api/v1/app/service Count assets, vulnerabilities and alerts per service · Get Vulnerabilities and Alerts for a Service #
Ask an LLM
“How many assets, vulnerabilities and alerts does each service inside an application have?”
“Can I break an application's risk down service by service?”
Tell an agent
Show per-service counts of assets, vulnerabilities and alerts for application {applicationId}.
Break down risk by service for application {applicationId} using search {query}.
GET /appid/app/service/{id} Get an application's assets and services · Get Assets and Services of an Application #
Ask an LLM
“Which assets and services make up a given application, along with the alerts on those assets?”
“Can I see the service map of one application from its ID?”
Tell an agent
List the assets and services that belong to application {id}.
Show the services of application {id} with the alerts raised on their assets.
GET /api/applications List SaaS apps connected to SaaS Security · Palo Alto Networks List Connected SaaS Applications #
Ask an LLM
“Which SaaS applications are connected to my SaaS Security tenant?”
“How many active incidents and scanned assets does each connected SaaS app have?”
Tell an agent
List the SaaS applications connected to SaaS Security.
Show connection status for each connected SaaS app.
GET /v2/applications List ZTNA-protected applications · Palo Alto Networks List ZTNA-protected Applications #
Ask an LLM
“Which private applications are protected by ZTNA?”
“What connector group provides access to each ZTNA application?”
Tell an agent
List all ZTNA-protected applications.
Show the private resources exposed through ZTNA and their connector groups.
POST /v2/applications Create a ZTNA application · Palo Alto Networks Create ZTNA Application #
Ask an LLM
“How do I publish a private application through ZTNA with a connector group?”
“Can I enable ZTNA access to a new app immediately on creation?”
Tell an agent
Create ZTNA application {name} for {fqdn} using connector group {group_id}.
Protect {fqdn} with ZTNA as {name} via group {group_id}, exposing ports {ports}.
GET /v2/applications/{app_id} Get a ZTNA application · Palo Alto Networks Get ZTNA Application #
Ask an LLM
“Which FQDN and ports does a specific ZTNA application expose?”
“Is ZTNA access enabled for a particular application?”
Tell an agent
Get ZTNA application {app_id}.
Show the ports and protocols of ZTNA app {app_id}.
PUT /v2/applications/{app_id} Update a ZTNA application · Palo Alto Networks Update ZTNA Application #
Ask an LLM
“Can I move a ZTNA application to a different connector group?”
“Is it possible to change the FQDN a ZTNA application points to?”
Tell an agent
Update ZTNA application {app_id} to use connector group {group_id}.
Point ZTNA app {app_id} named {name} at {fqdn}.
DELETE /v2/applications/{app_id} Delete a ZTNA application · Palo Alto Networks Delete ZTNA Application #
Ask an LLM
“Can I stop protecting a private app with ZTNA by deleting its definition?”
“What happens to user access when a ZTNA application is removed?”
Tell an agent destructive · confirm first
Delete ZTNA application {app_id}.
Remove the ZTNA definition for app {app_id}.
GET /applications List Strata Cloud Manager application objects · List applications #
Ask an LLM
“Which application objects are defined in a Strata Cloud Manager folder, snippet or device?”
“Can I list config application objects scoped to a snippet?”
Tell an agent
List Strata Cloud Manager applications in snippet {snippet}.
Show SCM application objects defined on device {device}.
POST /applications Create a Strata Cloud Manager application · Create an application #
Ask an LLM
“How can I add a custom application object to Strata Cloud Manager configuration?”
“Which fields are required for a new SCM application, like category and risk?”
Tell an agent
Create Strata Cloud Manager application {name} with category {category} and risk {risk}.
Add SCM app {name} in category {category}, risk {risk}, with parent app {parent_app}.
GET /applications/{id} Get a Strata Cloud Manager application · Get the application by id #
Ask an LLM
“What does an existing Strata Cloud Manager application object contain?”
“Can I fetch an SCM application object by its UUID?”
Tell an agent
Get Strata Cloud Manager application {id}.
Show the SCM application object with UUID {id}.
PUT /applications/{id} Update a Strata Cloud Manager application · Update an application #
Ask an LLM
“Can I recategorize an existing Strata Cloud Manager application object?”
“Is it possible to flag an SCM application as prone to misuse after creating it?”
Tell an agent
Update Strata Cloud Manager application {id} with name {name}, category {category} and risk {risk}.
Change the description of SCM application {id} named {name} to {description}.
DELETE /applications/{id} Delete a Strata Cloud Manager application · Delete an application #
Ask an LLM
“Can I delete a custom application object from Strata Cloud Manager?”
“What happens to an SCM application once I delete it by UUID?”
Tell an agent destructive · confirm first
Delete Strata Cloud Manager application {id}.
Remove SCM application object {id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-applications-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-applications-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-applications-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Applications API
  x-refined-note:
  - x-logo differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Applications across 9 of this provider''s published API definitions: palo-alto-access-browser-mgmt-prismaaccess-browser-management-latest-openapi.yaml, palo-alto-access-prisma-access-config-applications-openapi.yaml, palo-alto-autonomous-dem-api-openapi-original.yml, palo-alto-cspm-applicationconfigmicroservice-openapi.json, palo-alto-cspm-applicationsearchmicroservice-openapi.json, palo-alto-networks-applications-api-openapi.yml…'
servers:
- url: https://api.sase.paloaltonetworks.com
- url: https://api.sase.paloaltonetworks.com/adem/telemetry/v2
  description: Autonomous DEM telemetry API server.
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
  description: AIOps for NGFW BPA API production server.
- url: https://api.aperture.paloaltonetworks.com
  description: SaaS Security (Aperture) API production server.
- url: https://api.strata.paloaltonetworks.com/config/objects/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
- url: https://api.sase.paloaltonetworks.com/ztna
  description: SASE ZTNA Connector API production server.
tags:


# --- truncated at 32 KB (197 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-applications-api-openapi.yml