Palo Alto Networks

Palo Alto Networks Assets API

{'$ref': 'desc/assets/assets.md'}

GitHub OpenAPI

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /assets/get_assets_internet_exposure List internet-exposed assets found by Xpanse · Palo Alto Networks Get Internet-exposed Assets #
Ask an LLM
“Which of our servers and cloud instances are visible from the internet according to Xpanse?”
“Can I filter internet-exposed assets by business unit or tag?”
Tell an agent
List all internet-exposed assets Xpanse has discovered.
Inventory externally visible assets using Xpanse filters {request_data}.
POST /assets/get_asset_internet_exposure Get details of one internet-exposed asset · Palo Alto Networks Get Single Asset Details #
Ask an LLM
“What services, certificates and observations does Xpanse show for one exposed asset?”
“Can I see the business context attached to a single internet-facing asset?”
Tell an agent
Get Xpanse exposure details for the asset in {request_data}.
Show certificates and services of the internet-exposed asset identified by {request_data}.
POST /assets/list_assets List assets tracked by XSIAM · Palo Alto Networks List Assets #
Ask an LLM
“What devices, users and service accounts has XSIAM observed in my environment?”
“Can I filter XSIAM assets by operating system or risk score?”
Tell an agent
List the assets XSIAM is tracking.
List XSIAM assets matching filter {request_data}.
GET /v1/assets List DSPM cloud data assets with filters · List Assets #
Ask an LLM
“Which data stores in my cloud are open to the world according to DSPM?”
“Can I list DSPM assets that have more than a certain number of open risks?”
Tell an agent
List DSPM assets in region {region} on cloud provider {cloudProvider}.
Show DSPM assets with open-to-world set to {openToWorld} using API key {key}.
GET /v1/assets/id Describe a DSPM data asset · Describe Asset #
Ask an LLM
“What does DSPM know about one specific data asset?”
“Can I describe a single DSPM asset by its id?”
Tell an agent
Describe DSPM asset {id}.
Get DSPM details for asset {id} using API key {key}.
GET /api/assets List files and content scanned in SaaS apps · Palo Alto Networks List Scanned Assets #
Ask an LLM
“Which files and folders in our connected SaaS apps are shared publicly?”
“Can I list SaaS Security scanned assets for one application only?”
Tell an agent
List SaaS scanned assets in app {app_id} with exposure {exposure}.
Show scanned SaaS assets of type {type}.
GET /api/assets/{id} Get a scanned SaaS asset's exposure and violations · Palo Alto Networks Get Asset Details #
Ask an LLM
“Who has access to a particular file scanned by SaaS Security?”
“What DLP violations and scan history exist for one SaaS asset?”
Tell an agent
Show exposure, collaborators and DLP violations for SaaS asset {id}.
Get the scan history of SaaS asset {id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-assets-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-assets-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-assets-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Assets API
  x-refined-note:
  - x-description-source differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Assets across 5 of this provider''s published API definitions: palo-alto-cortex-xpanse-api-openapi-original.yml, palo-alto-cortex-xsiam-api-openapi-original.yml, palo-alto-dspm-dspm-openapi.json, palo-alto-networks-assets-api-openapi.yml, palo-alto-saas-security-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api-{fqdn}/public_api/v1
  description: Cortex Xpanse tenant API endpoint.
  variables:
    fqdn:
      description: Tenant FQDN from the Xpanse settings page (e.g., example.xpanse.paloaltonetworks.com).
      default: example.xpanse.paloaltonetworks.com
- url: https://api.dig.security
  description: Dig Security public API
- url: PATH_TO_CONSOLE
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
  description: AIOps for NGFW BPA API production server.
- url: https://api.aperture.paloaltonetworks.com
  description: SaaS Security (Aperture) API production server.
tags:


# --- truncated at 32 KB (58 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-assets-api-openapi.yml