Palo Alto Networks

Palo Alto Networks Code to Cloud API

Use code to cloud dashboard to get a continuously updated snapshot view into the security posture of your cloud environment, streamline tracking and reporting. You can use the following APIs to get the trendline datapoints for deploytime and runtime respectively.

Documentation GitHub OpenAPI

Operations 2

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /c2c/api/v1/deploy/trend Get the 30-day deploy-time vulnerability trend · List Deploy Trend #

Ask an LLM

“How have critical and high image vulnerabilities trended over the last 30 days?”

“What does the daily deployment vulnerability count look like for my registries?”

Tell an agent

Show the 30-day deploy-time vulnerability trend.

Get daily counts of open critical and high deployment vulnerabilities.

GET /c2c/api/v1/runtime/trend Get the 30-day runtime alert trend · List Runtime Trend #

Ask an LLM

“How have open critical and high runtime alerts trended this month?”

“What's the daily count of attack path and policy alerts over 30 days?”

Tell an agent

Show the 30-day runtime alert trend.

Get daily open runtime alert counts for critical and high severity.

Specifications

⚙

OpenAPI

https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-code-to-cloud-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-code-to-cloud-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: pcs-code-to-cloud Code to Cloud API
  version: 1.0.0-SNAPSHOT
  description: Use code to cloud dashboard to get a continuously updated snapshot view into the security posture of your cloud environment, streamline tracking and reporting. You can use the following APIs to get the trendline datapoints for deploytime and runtime respectively.
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:
- name: Code to Cloud
  description: Use code to cloud dashboard to get a continuously updated snapshot view into the security posture of your cloud environment, streamline tracking and reporting. You can use the following APIs to get the trendline datapoints for deploytime and runtime respectively.
paths:
  /c2c/api/v1/deploy/trend:
    get:
      tags:
      - Code to Cloud
      summary: List Deploy Trend
      description: 'Get the last 30 day trend of open deployment vulnerabilities with 1 data point for each day. The API will return the critical and high severity vulnerability count for Container Registry Image, ECR Image, Azure Registry Image, Google Container Registry Image and Google Artifact Image. The timestamp values are in epoch format and in milliseconds.


        **Note:** You need System Admin or System Admin Read Only role to access this API.

        :::info

        This endpoint is available on the Prisma Cloud Darwin release only.

        :::'
      operationId: code-to-cloud-list-deploy-trend
      parameters: []
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeployTrendResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: Too Many Requests
      security:
      - x-redlock-auth: []
      x-public: 'true'
      x-ga: 23.10.2-darwin
  /c2c/api/v1/runtime/trend:
    get:
      tags:
      - Code to Cloud
      summary: List Runtime Trend
      description: 'Get the last 30 days runtime trend of open alerts with 1 data point for each day. The API returns the open alert count of critical and high severity incidents for Policy Category and Attack Path policies. The timestamp values are in epoch format and in milliseconds.


        **Note:** You need System Admin or System Admin Read Only role to access this API.

        :::info

        This endpoint is available on the Prisma Cloud Darwin release only.

        :::'
      operationId: code-to-cloud-list-runtime-trend
      parameters: []
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RuntimeTrendResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: Too Many Requests
      security:
      - x-redlock-auth: []
      x-public: 'true'
      x-ga: 23.10.2-darwin
components:
  schemas:
    RuntimeTrendResponse:
      type: array
      items:
        type: object
        properties:
          timestamp:
            type: long
          alerts:
            type: number
    Error:
      type: object
      properties:
        code:
          type: string
        message:
          type: string
        target:
          type: string
    DeployTrendResponse:
      type: array
      items:
        type: object
        properties:
          timestamp:
            type: long
          vulnerabilities:
            type: number
    ErrorResponse:
      type: object
      properties:
        error:
          $ref: '#/components/schemas/Error'
  securitySchemes:
    x-redlock-auth:
      description: The x-redlock-auth value is a JSON Web Token (JWT).
      in: header
      name: x-redlock-auth
      type: apiKey