Palo Alto Networks

Palo Alto Networks Certificates API

The Certificates API from Palo Alto Networks — 15 operation(s) for certificates.

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 18

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /sse/config/v1/certificates List certificates in a Prisma Access SSE folder · List certificates #
Ask an LLM
“Which certificates are configured in a given Prisma Access folder on the SSE config API?”
“Can I look up an SSE-managed certificate by name within one folder?”
Tell an agent
List the SSE config certificates in folder {folder}.
Find the SSE certificate named {name} in folder {folder}.
POST /sse/config/v1/certificates Generate a certificate in a Prisma Access SSE folder · Create certificates #
Ask an LLM
“How do I generate a new certificate inside a Prisma Access folder with the SSE config API?”
“Can the SSE config API mint a certificate authority certificate for a folder?”
Tell an agent
Generate SSE certificate {certificate_name} for common name {common_name} in folder {folder} using {algorithm} and digest {digest}.
In SSE folder {folder}, create certificate {certificate_name} for {common_name} valid for {day_till_expiration} days.
DELETE /sse/config/v1/certificates/{id} Delete a certificate from Prisma Access SSE config · Delete certificates #
Ask an LLM
“How do I remove a certificate from the Prisma Access SSE configuration?”
“Is deleting an SSE config certificate done by its ID?”
Tell an agent destructive · confirm first
Delete SSE config certificate {id}.
Remove certificate {id} from the Prisma Access SSE configuration.
POST /sse/config/v1/certificates:import Import a certificate into a Prisma Access SSE folder · Import a certificate #
Ask an LLM
“Can I upload an existing certificate file into a Prisma Access SSE folder?”
“What formats does the SSE config certificate import take, and can I include a private key?”
Tell an agent
Import certificate file {certificate_file} as {name} in {format} format into SSE folder {folder}.
Import {name} into SSE folder {folder} with key file {key_file} and passphrase {passphrase}, format {format}, from {certificate_file}.
GET /certificates List Strata Cloud Manager certificates · List certificates #
Ask an LLM
“Which certificates are attached to a particular snippet or device in Strata Cloud Manager?”
“Can I page through all managed firewall certificates with limit and offset?”
Tell an agent
List the certificates configured on device {device}.
Show certificates defined in snippet {snippet}.
POST /certificates Generate a signed certificate in Strata Cloud Manager · Generate a certificate #
Ask an LLM
“How do I generate a certificate signed by an existing CA in Strata Cloud Manager configuration?”
“Can I add subject alternative names like a hostname or IP when generating a managed certificate?”
Tell an agent
Generate certificate {certificate_name} for {common_name} signed by {signed_by}, using {algorithm} with digest {digest}.
Create a CA-signed certificate {certificate_name} for hostname {hostname}, signer {signed_by}.
POST /certificates:import Import a certificate into Strata Cloud Manager · Import a certificate #
Ask an LLM
“How do I bring my own certificate file into Strata Cloud Manager configuration without choosing a folder?”
“Does the Strata Cloud Manager certificate import accept an encrypted private key with a passphrase?”
Tell an agent
Import {certificate_file} as managed certificate {name} in {format} format.
Upload managed certificate {name} from {certificate_file} with private key {key_file}, format {format}.
GET /certificates/{id} Get a Strata Cloud Manager certificate · Get a certificate #
Ask an LLM
“How can I view the settings of one managed certificate by its ID?”
“What details does Strata Cloud Manager return for a single configured certificate?”
Tell an agent
Get managed certificate {id}.
Show me the configuration of certificate {id} in Strata Cloud Manager.
DELETE /certificates/{id} Delete a Strata Cloud Manager certificate · Delete a certificate #
Ask an LLM
“How do I delete a certificate object from Strata Cloud Manager configuration?”
“Can a managed certificate be removed by ID outside a Prisma Access SSE folder?”
Tell an agent destructive · confirm first
Delete managed certificate {id}.
Remove certificate {id} from Strata Cloud Manager.
POST /certificates/{id}:export Export a managed certificate · Export a certificate #
Ask an LLM
“How do I export a certificate from Strata Cloud Manager in a specific format?”
“Can I protect an exported certificate with a passphrase?”
Tell an agent
Export certificate {id} in {format} format.
Export certificate {id} as {format}, protected with passphrase {passphrase}.
GET /outagedetection/v1/certificates List certificates in the outage detection inventory · Retrieve all certificate data #
Ask an LLM
“What certificates are in my outage detection inventory, filtered by subject?”
“Can I leave superseded certificate versions out of the inventory listing?”
Tell an agent
List inventory certificates whose subject matches {subject}.
Pull the certificate inventory, excluding superseded instances: {excludeSupersededInstances}.
GET /outagedetection/v1/certificates/{id} Get an inventory certificate's details · Get a certificate details #
Ask an LLM
“How do I see the details of one certificate in the outage detection inventory?”
“Can I include the ownership tree when looking up a single inventory certificate?”
Tell an agent
Get details for inventory certificate {id}.
Show inventory certificate {id} with its ownership tree.
GET /outagedetection/v1/certificates/{id}/contents Download a certificate in PEM or DER · Download a certificate #
Ask an LLM
“How do I download a certificate from the inventory as a PEM file?”
“Can the downloaded PEM include the CA chain with the root certificate first?”
Tell an agent
Download certificate {id} in {format} format.
Download certificate {id} as PEM with chain order {chainOrder}.
POST /outagedetection/v1/certificates/validation Request TLS validation of certificates · Request validation for a set of #
Ask an LLM
“How do I trigger a TLS validation check for specific certificates in my inventory?”
“Can I submit several certificates for validation in one request?”
Tell an agent
Submit certificates {certificateIds} for TLS validation.
Revalidate the TLS status of certificate IDs {certificateIds}.
POST /outagedetection/v1/certificates/retirement Retire certificates from active use · Retire certificates #
Ask an LLM
“How do I retire certificates I no longer use in the outage detection inventory?”
“Can retired certificates also be added to a blocklist?”
Tell an agent destructive · confirm first
Retire certificates {certificateIds}.
Retire certificates {certificateIds} and add them to the blocklist: {addToBlocklist}.
POST /outagedetection/v1/certificates/recovery Recover retired certificates · Recover a set of certificates #
Ask an LLM
“Is it possible to bring back certificates I retired by mistake?”
“Does recovering a retired certificate also restore its previous versions?”
Tell an agent
Recover retired certificates {certificateIds}.
Restore retired certificates {certificateIds} and associate them with applications {applicationIds}.
POST /outagedetection/v1/certificates/deletion Permanently delete retired certificates · Delete a set of retired certificates #
Ask an LLM
“How do I permanently purge retired certificates from the inventory?”
“Can I delete a certificate for good once it has been retired?”
Tell an agent destructive · confirm first
Permanently delete retired certificates {certificateIds}.
Purge the retired certificates {certificateIds} from inventory.
POST /outagedetection/v1/certificatesearch Search certificates by field criteria · Retrieve certificate data matching search criteria #
Ask an LLM
“Which of my certificates expire soon or use a weak signature hash algorithm?”
“Can I search certificates by issuer common name and sort the results?”
Tell an agent
Search certificates matching expression {expression}.
Search certificates with {expression}, ordered by {ordering}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-certificates-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-certificates-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-certificates-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Certificates API
  x-refined-note:
  - x-logo differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Certificates across 3 of this provider''s published API definitions: palo-alto-access-prisma-access-config-certificates-openapi.yaml, palo-alto-scm-config-cloudngfw-identity-identity-services-openapi.yaml, palo-alto-scm-config-ngts-tlsprotect-cloud-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.sase.paloaltonetworks.com
- url: https://api.strata.paloaltonetworks.com/config/identity/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
- url: https://api.strata.paloaltonetworks.com/ngts
  description: Strata Cloud Manager API
tags:


# --- truncated at 32 KB (91 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-certificates-api-openapi.yml