Palo Alto Networks Assets API

{'$ref': 'desc/assets/assets.md'}

Operations 7

POST /assets/get_assets_internet_exposure Palo Alto Networks Get Internet-exposed Assets #
POST /assets/get_asset_internet_exposure Palo Alto Networks Get Single Asset Details #
POST /assets/list_assets Palo Alto Networks List Assets #
GET /v1/assets List Assets #
GET /v1/assets/id Describe Asset #
GET /api/assets Palo Alto Networks List Scanned Assets #
GET /api/assets/{id} Palo Alto Networks Get Asset Details #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-assets-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-assets-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Palo Alto Networks Assets API
  x-refined-note:
  - x-description-source differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Assets across 5 of this provider''s published API definitions: palo-alto-cortex-xpanse-api-openapi-original.yml, palo-alto-cortex-xsiam-api-openapi-original.yml, palo-alto-dspm-dspm-openapi.json, palo-alto-networks-assets-api-openapi.yml, palo-alto-saas-security-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api-{fqdn}/public_api/v1
  description: Cortex Xpanse tenant API endpoint.
  variables:
    fqdn:
      description: Tenant FQDN from the Xpanse settings page (e.g., example.xpanse.paloaltonetworks.com).
      default: example.xpanse.paloaltonetworks.com
- url: https://api.dig.security
  description: Dig Security public API
- url: PATH_TO_CONSOLE
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
  description: AIOps for NGFW BPA API production server.
- url: https://api.aperture.paloaltonetworks.com
  description: SaaS Security (Aperture) API production server.
tags:
- name: Assets
  description: Internet-exposed asset discovery and enumeration.
paths:
  /assets/get_assets_internet_exposure:
    post:
      operationId: getAssetsInternetExposure
      summary: Palo Alto Networks Get Internet-exposed Assets
      description: Returns a list of assets with internet exposure discovered by Xpanse. Assets include servers, cloud instances, network devices, and any internet-facing infrastructure. Supports filtering by asset type, business unit, tags, and exposure classification. Use this endpoint to inventory all externally visible infrastructure.
      tags:
      - Assets
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                request_data:
                  type: object
                  properties:
                    filters:
                      type: array
                      items:
                        $ref: '#/components/schemas/Filter'
                      description: Filter criteria for asset list.
                    search_from:
                      type: integer
                      default: 0
                    search_to:
                      type: integer
                      default: 100
                    sort:
                      $ref: '#/components/schemas/SortOrder'
            examples:
              GetAssetsInternetExposureRequestExample:
                summary: Default getAssetsInternetExposure request
                x-microcks-default: true
                value:
                  request_data:
                    filters:
                    - field: example-field
                      operator: contains
                      value: example-value
                    search_from: 0
                    search_to: 100
                    sort:
                      field: example-field
                      keyword: asc
      responses:
        '200':
          description: Internet-exposed assets returned successfully.
          content:
            application/json:
              schema:
                type: object
                properties:
                  reply:
                    type: object
                    properties:
                      total_count:
                        type: integer
                      result_count:
                        type: integer
                      assets_internet_exposure:
                        type: array
                        items:
                          $ref: '#/components/schemas/AssetInternetExposure'
              examples:
                GetAssetsInternetExposure200Example:
                  summary: Default getAssetsInternetExposure 200 response
                  x-microcks-default: true
                  value:
                    reply:
                      total_count: 214
                      result_count: 275
                      assets_internet_exposure:
                      - asm_id_list:
                        - '594748'
                        asset_name: Branch Policy 81
                        asset_type: UNMANAGED_NETWORK_DEVICE
                        ip_address:
                        - 10.131.211.150
                        - 10.237.60.87
                        domain:
                        - example-domain_item
                        ipv6_address:
                        - 10.147.211.139
                        cloud_id: '583636'
                        cloud_provider: Azure
                        externally_detected_providers:
                        - example-externally_detected_providers_item
                        business_units:
                        - example-business_units_item
                        tags:
                        - key: example-key
                          value: example-value
                        - key: example-key
                          value: example-value
                        created: 919
                        last_observed: 958
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
      security:
      - xpanseAuth: []
    servers:
    - url: https://api-{fqdn}/public_api/v1
      description: Cortex Xpanse tenant API endpoint.
      variables:
        fqdn:
          description: Tenant FQDN from the Xpanse settings page (e.g., example.xpanse.paloaltonetworks.com).
          default: example.xpanse.paloaltonetworks.com
  /assets/get_asset_internet_exposure:
    post:
      operationId: getAssetInternetExposure
      summary: Palo Alto Networks Get Single Asset Details
      description: Returns detailed information about a specific internet-exposed asset identified by its asset ID. Includes all services, certificates, observations, and associated business context data.
      tags:
      - Assets
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - request_data
              properties:
                request_data:
                  type: object
                  required:
                  - asm_id_list
                  properties:
                    asm_id_list:
                      type: array
                      items:
                        type: string
                      description: List of asset IDs to retrieve details for.
            examples:
              GetAssetInternetExposureRequestExample:
                summary: Default getAssetInternetExposure request
                x-microcks-default: true
                value:
                  request_data:
                    asm_id_list:
                    - '595684'
      responses:
        '200':
          description: Asset details returned successfully.
          content:
            application/json:
              schema:
                type: object
                properties:
                  reply:
                    type: object
                    properties:
                      total_count:
                        type: integer
                      result_count:
                        type: integer
                      assets_internet_exposure:
                        type: array
                        items:
                          $ref: '#/components/schemas/AssetInternetExposureDetail'
              examples:
                GetAssetInternetExposure200Example:
                  summary: Default getAssetInternetExposure 200 response
                  x-microcks-default: true
                  value:
                    reply:
                      total_count: 12
                      result_count: 106
                      assets_internet_exposure:
                      - example-assets_internet_exposure_item
                      - example-assets_internet_exposure_item
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
      security:
      - xpanseAuth: []
    servers:
    - url: https://api-{fqdn}/public_api/v1
      description: Cortex Xpanse tenant API endpoint.
      variables:
        fqdn:
          description: Tenant FQDN from the Xpanse settings page (e.g., example.xpanse.paloaltonetworks.com).
          default: example.xpanse.paloaltonetworks.com
  /assets/list_assets:
    post:
      operationId: listAssets
      summary: Palo Alto Networks List Assets
      description: Returns a list of assets discovered and tracked by XSIAM. Assets represent devices, cloud resources, users, and service accounts observed in the environment. Supports filtering by asset type, operating system, and risk score.
      tags:
      - Assets
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                request_data:
                  type: object
                  properties:
                    filters:
                      type: array
                      items:
                        $ref: '#/components/schemas/Filter_2'
                    search_from:
                      type: integer
                      default: 0
                    search_to:
                      type: integer
                      default: 100
                    sort:
                      $ref: '#/components/schemas/SortOrder_2'
            examples:
              ListAssetsRequestExample:
                summary: Default listAssets request
                x-microcks-default: true
                value:
                  request_data:
                    filters:
                    - field: example-field
                      operator: eq
                      value: example-value
                    - field: example-field
                      operator: eq
                      value: example-value
                    search_from: 0
                    search_to: 100
                    sort:
                      field: example-field
                      keyword: desc
      responses:
        '200':
          description: Assets returned successfully.
          content:
            application/json:
              schema:
                type: object
                properties:
                  reply:
                    type: object
                    properties:
                      total_count:
                        type: integer
                      result_count:
                        type: integer
                      assets:
                        type: array
                        items:
                          $ref: '#/components/schemas/Asset'
              examples:
                ListAssets200Example:
                  summary: Default listAssets 200 response
                  x-microcks-default: true
                  value:
                    reply:
                      total_count: 379
                      result_count: 575
                      assets:
                      - asset_id: '172266'
                        asset_name: Production Policy 57
                        asset_type: DEVICE
                        operating_system: Ubuntu 22.04
                        ip_addresses:
                        - 10.89.140.152
                        risk_score: 6.34
                        first_seen: 751
                        last_seen: 24
                        tags:
                        - critical-asset
                        sources:
                        - example-sources_item
                        - example-sources_item
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
      security:
      - xsiamAuth: []
    servers:
    - url: https://api-{fqdn}/public_api/v1
      description: Cortex XSIAM tenant API endpoint.
      variables:
        fqdn:
          description: Tenant FQDN from the XSIAM settings page (e.g., example.xsiam.paloaltonetworks.com).
          default: example.xsiam.paloaltonetworks.com
  /v1/assets:
    get:
      tags:
      - Assets
      operationId: get-assets
      parameters:
      - name: firstDetectedOn.equals
        in: query
        required: false
        schema:
          type: string
          format: date-time
      - name: firstDetectedOn.greaterThanOrEqual
        in: query
        required: false
        schema:
          type: string
          format: date-time
      - name: firstDetectedOn.greaterThan
        in: query
        required: false
        schema:
          type: string
          format: date-time
      - name: firstDetectedOn.lessThanOrEqual
        in: query
        required: false
        schema:
          type: string
          format: date-time
      - name: firstDetectedOn.lessThan
        in: query
        required: false
        schema:
          type: string
          format: date-time
      - name: region.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: region.equals
        in: query
        required: false
        schema:
          type: string
      - name: region.contains
        in: query
        required: false
        schema:
          type: string
      - name: region.notContain
        in: query
        required: false
        schema:
          type: string
      - name: cloudProvider.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
            enum:
            - AWS
            - AZURE
            - GCP
            - SNOWFLAKE
            - FILE_SHARE
            - O365
      - name: cloudProvider.equals
        in: query
        required: false
        schema:
          type: string
          enum:
          - AWS
          - AZURE
          - GCP
          - SNOWFLAKE
          - FILE_SHARE
          - O365
      - name: serviceType.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
            enum:
            - ATHENA
            - AURORA
            - AWS_BACKUP
            - DOCUMENTDB
            - DYNAMODB
            - DAX
            - EMR
            - EBS
            - EFS
            - ELASTICACHE
            - FSX
            - KINESIS_DELIVERY_STREAM
            - MEMORYDB
            - NEPTUNE
            - QLDB
            - RDS
            - REDSHIFT
            - S3
            - TIMESTREAM
            - OPENSEARCH
            - OPENSEARCH_SERVERLESS
            - COSMOS_DB
            - SYNAPSE
            - CACHE_FOR_REDIS
            - MARIA_DB
            - MYSQL_SERVER
            - POSTGRESQL_SERVER
            - SQL_SERVER
            - STORAGE_ACCOUNT
            - SQL_MANAGED_INSTANCE
            - ANF
            - CLOUD_STORAGE
            - CLOUD_SQL
            - BIG_QUERY
            - FILE_STORE
            - CLOUD_SPANNER
            - MEMORY_STORE
            - BIG_TABLE
            - FIRE_STORE
            - UNMANAGED_AWS_MYSQL
            - UNMANAGED_AWS_ORACLE_SERVER
            - UNMANAGED_AWS_MONGO_DB
            - UNMANAGED_AWS_POSTGRESQL
            - UNMANAGED_AWS_REDIS
            - UNMANAGED_AWS_SQLITE
            - UNMANAGED_AWS_MS_SQL
            - UNMANAGED_AWS_MARIA_DB
            - UNMANAGED_AWS_NEO4_J
            - UNMANAGED_AWS_ELASTIC
            - UNMANAGED_AWS_COCKROACH_DB
            - UNMANAGED_AWS_AEROSPIKE
            - UNMANAGED_AWS_SCYLLA_DB
            - UNMANAGED_AZURE_MYSQL
            - UNMANAGED_AZURE_ORACLE_SERVER
            - UNMANAGED_AZURE_MONGO_DB
            - UNMANAGED_AZURE_POSTGRESQL
            - UNMANAGED_AZURE_REDIS
            - UNMANAGED_AZURE_SQLITE
            - UNMANAGED_AZURE_MS_SQL
            - UNMANAGED_AZURE_MARIA_DB
            - UNMANAGED_AZURE_NEO4_J
            - UNMANAGED_AZURE_ELASTIC
            - UNMANAGED_AZURE_COCKROACH_DB
            - UNMANAGED_AZURE_AEROSPIKE
            - UNMANAGED_AZURE_SCYLLA_DB
            - UNMANAGED_GCP_MYSQL
            - UNMANAGED_GCP_ORACLE_SERVER
            - UNMANAGED_GCP_MONGO_DB
            - UNMANAGED_GCP_POSTGRESQL
            - UNMANAGED_GCP_REDIS
            - UNMANAGED_GCP_SQLITE
            - UNMANAGED_GCP_MS_SQL
            - UNMANAGED_GCP_MARIA_DB
            - UNMANAGED_GCP_NEO4_J
            - UNMANAGED_GCP_ELASTIC
            - UNMANAGED_GCP_COCKROACH_DB
            - UNMANAGED_GCP_AEROSPIKE
            - UNMANAGED_GCP_SCYLLA_DB
            - SNOWFLAKE_DB
            - FILE_SHARE
            - ONE_DRIVE
            - SHARE_POINT
            - AZURE_OPEN_AI_DEPLOYMENT
            - VERTEX_ENDPOINT
            - BEDROCK_PROVISIONED_THROUGHPUT
            - BEDROCK_AGENT
            - UNMANAGED_AI_AWS_FALCON
            - UNMANAGED_AI_AWS_LLAMA
            - UNMANAGED_AI_AWS_TRANSFORMERSLLAMA
            - UNMANAGED_AI_AWS_GEMMA
            - UNMANAGED_AI_AWS_GPT2
            - UNMANAGED_AI_AWS_MISTRAL
            - UNMANAGED_AI_AWS_PHI
            - UNMANAGED_AI_AWS_QWEN2
            - UNMANAGED_AI_AWS_ROBERTA
            - UNMANAGED_AI_AWS_JAMBA
            - UNMANAGED_AI_AZURE_FALCON
            - UNMANAGED_AI_AZURE_LLAMA
            - UNMANAGED_AI_AZURE_TRANSFORMERSLLAMA
            - UNMANAGED_AI_AZURE_GEMMA
            - UNMANAGED_AI_AZURE_GPT2
            - UNMANAGED_AI_AZURE_MISTRAL
            - UNMANAGED_AI_AZURE_PHI
            - UNMANAGED_AI_AZURE_QWEN2
            - UNMANAGED_AI_AZURE_ROBERTA
            - UNMANAGED_AI_AZURE_JAMBA
            - UNMANAGED_AI_GCP_FALCON
            - UNMANAGED_AI_GCP_LLAMA
            - UNMANAGED_AI_GCP_TRANSFORMERSLLAMA
            - UNMANAGED_AI_GCP_GEMMA
            - UNMANAGED_AI_GCP_GPT2
            - UNMANAGED_AI_GCP_MISTRAL
            - UNMANAGED_AI_GCP_PHI
            - UNMANAGED_AI_GCP_QWEN2
            - UNMANAGED_AI_GCP_ROBERTA
            - UNMANAGED_AI_GCP_JAMBA
      - name: serviceType.equals
        in: query
        required: false
        schema:
          type: string
          enum:
          - ATHENA
          - AURORA
          - AWS_BACKUP
          - DOCUMENTDB
          - DYNAMODB
          - DAX
          - EMR
          - EBS
          - EFS
          - ELASTICACHE
          - FSX
          - KINESIS_DELIVERY_STREAM
          - MEMORYDB
          - NEPTUNE
          - QLDB
          - RDS
          - REDSHIFT
          - S3
          - TIMESTREAM
          - OPENSEARCH
          - OPENSEARCH_SERVERLESS
          - COSMOS_DB
          - SYNAPSE
          - CACHE_FOR_REDIS
          - MARIA_DB
          - MYSQL_SERVER
          - POSTGRESQL_SERVER
          - SQL_SERVER
          - STORAGE_ACCOUNT
          - SQL_MANAGED_INSTANCE
          - ANF
          - CLOUD_STORAGE
          - CLOUD_SQL
          - BIG_QUERY
          - FILE_STORE
          - CLOUD_SPANNER
          - MEMORY_STORE
          - BIG_TABLE
          - FIRE_STORE
          - UNMANAGED_AWS_MYSQL
          - UNMANAGED_AWS_ORACLE_SERVER
          - UNMANAGED_AWS_MONGO_DB
          - UNMANAGED_AWS_POSTGRESQL
          - UNMANAGED_AWS_REDIS
          - UNMANAGED_AWS_SQLITE
          - UNMANAGED_AWS_MS_SQL
          - UNMANAGED_AWS_MARIA_DB
          - UNMANAGED_AWS_NEO4_J
          - UNMANAGED_AWS_ELASTIC
          - UNMANAGED_AWS_COCKROACH_DB
          - UNMANAGED_AWS_AEROSPIKE
          - UNMANAGED_AWS_SCYLLA_DB
          - UNMANAGED_AZURE_MYSQL
          - UNMANAGED_AZURE_ORACLE_SERVER
          - UNMANAGED_AZURE_MONGO_DB
          - UNMANAGED_AZURE_POSTGRESQL
          - UNMANAGED_AZURE_REDIS
          - UNMANAGED_AZURE_SQLITE
          - UNMANAGED_AZURE_MS_SQL
          - UNMANAGED_AZURE_MARIA_DB
          - UNMANAGED_AZURE_NEO4_J
          - UNMANAGED_AZURE_ELASTIC
          - UNMANAGED_AZURE_COCKROACH_DB
          - UNMANAGED_AZURE_AEROSPIKE
          - UNMANAGED_AZURE_SCYLLA_DB
          - UNMANAGED_GCP_MYSQL
          - UNMANAGED_GCP_ORACLE_SERVER
          - UNMANAGED_GCP_MONGO_DB
          - UNMANAGED_GCP_POSTGRESQL
          - UNMANAGED_GCP_REDIS
          - UNMANAGED_GCP_SQLITE
          - UNMANAGED_GCP_MS_SQL
          - UNMANAGED_GCP_MARIA_DB
          - UNMANAGED_GCP_NEO4_J
          - UNMANAGED_GCP_ELASTIC
          - UNMANAGED_GCP_COCKROACH_DB
          - UNMANAGED_GCP_AEROSPIKE
          - UNMANAGED_GCP_SCYLLA_DB
          - SNOWFLAKE_DB
          - FILE_SHARE
          - ONE_DRIVE
          - SHARE_POINT
          - AZURE_OPEN_AI_DEPLOYMENT
          - VERTEX_ENDPOINT
          - BEDROCK_PROVISIONED_THROUGHPUT
          - BEDROCK_AGENT
          - UNMANAGED_AI_AWS_FALCON
          - UNMANAGED_AI_AWS_LLAMA
          - UNMANAGED_AI_AWS_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AWS_GEMMA
          - UNMANAGED_AI_AWS_GPT2
          - UNMANAGED_AI_AWS_MISTRAL
          - UNMANAGED_AI_AWS_PHI
          - UNMANAGED_AI_AWS_QWEN2
          - UNMANAGED_AI_AWS_ROBERTA
          - UNMANAGED_AI_AWS_JAMBA
          - UNMANAGED_AI_AZURE_FALCON
          - UNMANAGED_AI_AZURE_LLAMA
          - UNMANAGED_AI_AZURE_TRANSFORMERSLLAMA
          - UNMANAGED_AI_AZURE_GEMMA
          - UNMANAGED_AI_AZURE_GPT2
          - UNMANAGED_AI_AZURE_MISTRAL
          - UNMANAGED_AI_AZURE_PHI
          - UNMANAGED_AI_AZURE_QWEN2
          - UNMANAGED_AI_AZURE_ROBERTA
          - UNMANAGED_AI_AZURE_JAMBA
          - UNMANAGED_AI_GCP_FALCON
          - UNMANAGED_AI_GCP_LLAMA
          - UNMANAGED_AI_GCP_TRANSFORMERSLLAMA
          - UNMANAGED_AI_GCP_GEMMA
          - UNMANAGED_AI_GCP_GPT2
          - UNMANAGED_AI_GCP_MISTRAL
          - UNMANAGED_AI_GCP_PHI
          - UNMANAGED_AI_GCP_QWEN2
          - UNMANAGED_AI_GCP_ROBERTA
          - UNMANAGED_AI_GCP_JAMBA
      - name: digTagKey.contains
        in: query
        required: false
        schema:
          type: string
      - name: digTagValue.contains
        in: query
        required: false
        schema:
          type: string
      - name: lifecycle.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
            enum:
            - RUNNING
            - STOPPED
            - DELETED
      - name: lifecycle.equals
        in: query
        required: false
        schema:
          type: string
          enum:
          - RUNNING
          - STOPPED
          - DELETED
      - name: label.in
        in: query
        required: false
        schema:
          type: array
          items:
            type: string
      - name: label.equals
        in: query
        required: false
        schema:
          type: string
      - name: label.hasAny
        in: query
        required: false
        schema:
          type: boolean
      - name: openRisksCount.equals
        in: query
        required: false
        schema:
          type: integer
          format: int32
      - name: openRisksCount.greaterThan
        in: query
        required: false
        schema:
          type: integer
          format: int32
      - name: openRisksCount.lessThan
        in: query
        required: false
        schema:
          type: integer
          format: int32
      - name: openRisksCount.lessThanOrEqual
        in: query
        required: false
        schema:
          type: integer
          format: int32
      - name: openRisksCount.greaterThanOrEqual
        in: query
        required: false
        schema:
          type: integer
          format: int32
      - name: openToWorld.equals
        in: query
        required: false
        schema:
          type: boolean
      - name: sort
        in: query
        description: 'Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.'
        required: false
        schema:
          type: string
          description: 'Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.'
      - name: page
        in: query
        required: false
        schema:
          type: string
          default: '0'
      - name: size
        in: query
        required: false
        schema:
          maximum: 50
          type: integer
          default: 20
      - name: dig-api-key
        in: header
        description: Dig token header
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Returns a list of assets
          headers:
            X-Total-Count:
              description: The total number of items in the page
              style: simple
              schema:
                type: integer
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/AssetDTO'
      summary: List Assets
      description: 'List Assets. GET /v1/assets on the Assets API. Takes 29 query parameters. Documented responses: 200.'
      x-description-source: desc/assets/get.md
    servers:
    - url: https://api.dig.security
      description: Dig Security public API
    - url: PATH_TO_CONSOLE
  /v1/assets/id:
    get:
      tags:
      - Assets
      operationId: get-assets-id
      parameters:
      - name: id
        in: query
        required: true
        schema:
          type: string
      - name: dig-api-key
        in: header
        description: Dig token header
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AssetDTO'
      summary: Describe Asset
      description: 'Describe Asset. GET /v1/assets/id on the Assets API. Takes 1 query parameter. Documented responses: 200.'
      x-description-source: desc/assets/id_get.md
    servers:
    - url: https://api.dig.security
      description: Dig Security public API
    - url: PATH_TO_CONSOLE
  /api/assets:
    get:
      operationId: listAssets
      summary: Palo Alto Networks List Scanned Assets
      description: Returns a paginated list of assets scanned across connected SaaS applications. Assets include files, folders, emails, and other content objects. Supports filtering by application, asset type, and exposure level indicating who can access the asset.
      tags:
      - Assets
      parameters:
      - name: app_id
        in: query
        description: Filter assets by SaaS application ID.
        schema:
          type: string
        example: '651878'
      - name: type
        in: query
        description: Filter by asset type.
        schema:
          type: string
          enum:
          - file
          - folder
          - email
          - calendar_event
          - contact
        example: file
      - name: exposure
        in: query
        description: Filter by exposure level.
        schema:
          type: string
          enum:
          - private
          - internal
          - external
          - public
        example: internal
      - name: offset
        in: query
        description: Number of results to skip for pagination.
        schema:
          type: integer
          default: 0
        example: 0
      - name: limit
        in: query
        description: Maximum number of assets to return per page.
        schema:
          type: integer
          default: 50
          maximum: 200
        example: 50
      responses:
        '200':
          description: Assets returned.
          content:
            application/json:
              schema:
                type: object
                properties:
                  total:
                    type: integer
                  offset:
                    type: integer
                  limit:
                    type: integer
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/Asset_2'
              examples:
                ListAssets200Example:
                  summary: Default listAssets 200 response
                  x-microcks-default: true
                  value:
                    total: 903
                    offset: 933
                    limit: 396
                    items:
                    - id: example-id
                      name: Production Policy 38
                      type: calendar_event
                      app_id: '972712'
                      app_name: Production Sensor 05
                      owner: example-owner
                      exposure: external
                      size_bytes: 550
                      dlp_violations:
                      - example-dlp_violations_item
                      - example-dlp_violations_item
                      created_at: '2024-12-03T07:42:31Z'
                      updated_at: '2026-05-28T11:46:06Z'
                      last_scanned_at: '2026-10-13T08:39:47Z'
        '400':
          description: Invalid query parameters.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse_3'
              examples:
                ListAssets400Example:
                  summary: Default listAssets 400 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Configured monitoring network blocked investigation applied activity.
                    request_id: 5cc3d66e-5479-4e15-bd64-849adde3cb60
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse_3'
              examples:
                ListAssets401Example:
                  summary: Default listAssets 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Configured monitoring network blocked investigation applied activity.
                    request_id: 5cc3d66e-5479-4e15-bd64-849adde3cb60
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse_3'
              examples:
                ListAssets403Example:
                  summary: Default listAssets 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Configured monitoring network blocked investigation applied activity.
                    request_id: 5cc3d66e-5479-4e15-bd64-849adde3cb60
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse_3'
              examples:
                ListAssets500Example:
                  summary: Default listAssets 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Configured monitoring network blocked investigation applied activity.
                    request_id: 5cc3d66e-5479-4e15-bd64-849adde3cb60
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
      security:
      - oauth2Bearer: []
    servers:
    - url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
      description: AIOps for NGFW BPA API production server.
  /api/assets/{id}:
    get:
      operationId: getAsset
      summary: Palo Alto Networks Get Asset Details
      description: Returns detailed information about a specific scanned asset including its current exposure, collaborators with access, DLP policy violations, and scan history.
      tags:
      - Assets
      parameters:
      - name: id
        in: path
        required: true
        description: Unique identifier of the asset.
        schema:
          type: string
        exa

# --- truncated at 32 KB (58 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-assets-api-openapi.yml