Palo Alto Networks

Palo Alto Networks Compliance Standards API

You can create your own custom compliance standards that are tailored to your own business needs, standards, and organizational policies. When defining a custom compliance standard, you can add requirements and sections. A custom compliance standard that has a minimum of one requirement and one section can be associated with policies that check for adherence to your standards.

GitHub OpenAPI
Business capability
Regulatory Compliance Management BC-130.10

Operations 15

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /compliance List compliance standards · List Compliance Standards #
Ask an LLM
“Which compliance standards, built-in and custom, are available in my Prisma Cloud tenant?”
“Can I see every custom compliance standard my team has created alongside the system ones?”
Tell an agent
List all compliance standards, both system and custom.
Show me every compliance standard in the tenant.
POST /compliance Create a custom compliance standard · Add Compliance Standard #
Ask an LLM
“How do I create my own compliance standard for internal controls?”
“Can I give a new custom compliance standard a description when I create it?”
Tell an agent
Create a custom compliance standard named {name}.
Add a new compliance standard {name} described as {description}.
GET /compliance/{complianceId} Get a compliance standard · Get Compliance Standard by ID #
Ask an LLM
“What are the details of a specific compliance standard, like how many policies are assigned?”
“Who created a given compliance standard and when was it last modified?”
Tell an agent
Get compliance standard {complianceId}.
Show the details and assigned policy count for standard {complianceId}.
PUT /compliance/{complianceId} Update a compliance standard · Update Compliance Standard #
Ask an LLM
“Can I rename an existing custom compliance standard?”
“How do I change the description of a compliance standard I already created?”
Tell an agent
Rename compliance standard {complianceId} to {name}.
Update standard {complianceId} with name {name} and description {description}.
DELETE /compliance/{complianceId} Delete a compliance standard · Delete Compliance Standard #
Ask an LLM
“How do I remove a custom compliance standard we no longer use?”
“Can I delete a compliance standard by its ID?”
Tell an agent destructive · confirm first
Delete compliance standard {complianceId}.
Remove the compliance standard with ID {complianceId} from the tenant.
POST /compliance/clone/{complianceId} Clone a compliance standard · Clone Compliance Standard #
Ask an LLM
“Can I copy an existing compliance standard to start a customized version of it?”
“How do I duplicate a built-in standard under a new name?”
Tell an agent
Clone compliance standard {complianceId} as {name}.
Make a copy of standard {complianceId} called {name} with description {description}.
GET /compliance/{complianceId}/requirement List requirements in a compliance standard · List Compliance Requirements #
Ask an LLM
“What requirements make up a particular compliance standard?”
“Can I list every requirement under one standard ID?”
Tell an agent
List the requirements of compliance standard {complianceId}.
Show all requirements defined in standard {complianceId}.
POST /compliance/{complianceId}/requirement Add a requirement to a compliance standard · Add Compliance Requirement #
Ask an LLM
“How do I add a new requirement to my custom compliance standard?”
“Does a new compliance requirement need both a name and a requirement number?”
Tell an agent
Add requirement {requirementId} named {name} to standard {complianceId}.
Create requirement {name} (number {requirementId}) in standard {complianceId} described as {description}.
GET /compliance/requirement/{requirementId} Get a compliance requirement · Get Compliance Requirement by ID #
Ask an LLM
“What does a specific compliance requirement contain and which standard does it belong to?”
“Can I look up one requirement by its ID?”
Tell an agent
Get compliance requirement {requirementId}.
Show details of requirement {requirementId}.
PUT /compliance/requirement/{requirementId} Update a compliance requirement · Update Compliance Requirement #
Ask an LLM
“Can I rename or renumber a requirement in my custom standard?”
“How do I change a compliance requirement's view order?”
Tell an agent
Update requirement {requirementId} with name {name} and number {number}.
Set the view order of requirement {requirementId} to {viewOrder}, keeping name {name} and number {number}.
DELETE /compliance/requirement/{requirementId} Delete a compliance requirement · Delete Compliance Requirement #
Ask an LLM
“How do I remove a requirement from a custom compliance standard?”
“Can I delete one compliance requirement by ID?”
Tell an agent destructive · confirm first
Delete compliance requirement {requirementId}.
Remove requirement {requirementId} from its standard.
GET /compliance/{requirementId}/section List sections of a compliance requirement · List Compliance Requirement Sections #
Ask an LLM
“What sections sit under a given compliance requirement?”
“Can I list all the sections for one requirement ID?”
Tell an agent
List the sections of requirement {requirementId}.
Show every section defined under compliance requirement {requirementId}.
POST /compliance/{requirementId}/section Add a section to a compliance requirement · Add Compliance Requirement Section #
Ask an LLM
“How do I add a section to a requirement and map policies to it?”
“Can I attach policy IDs when creating a new compliance section?”
Tell an agent
Add section {sectionId} to requirement {requirementId}.
Create a section {sectionId} under requirement {requirementId} with policies {associatedPolicyIds}.
PUT /compliance/requirement/section/{sectionId} Update a compliance requirement section · Update Compliance Requirement Section #
Ask an LLM
“Can I change which policies are associated with an existing compliance section?”
“How do I edit the description of a section I already added?”
Tell an agent
Set the associated policies of section {sectionId} to {associatedPolicyIds}.
Update the description of compliance section {sectionId} to {description}.
DELETE /compliance/requirement/section/{sectionId} Delete a compliance requirement section · Delete Compliance Requirement Section #
Ask an LLM
“How do I remove a section from a compliance requirement?”
“Can I delete a compliance section by its ID?”
Tell an agent destructive · confirm first
Delete compliance section {sectionId}.
Remove section {sectionId} from its requirement.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-compliance-standards-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-compliance-standards-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-compliance-standards-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  contact: {}
  description: 'Access Keys are a secure way to enable programmatic access to the Prisma Cloud API. By default, only

    the System Admin has API access and can enable API access for other administrators. If you have API access,

    you can create up to two access keys. Create an access key for a limited time period and regenerate your API

    keys periodically to minimize exposure and follow security best practices.'
  title: Prisma Cloud Access Keys API Overview Compliance Standards…
  version: Latest
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
tags:
- description: 'You can create your own custom compliance standards that are tailored to your own business needs,

    standards, and organizational policies. When defining a custom compliance standard, you can add

    requirements and sections. A custom compliance standard that has a minimum of one requirement and one

    section can be associated with policies that check for adherence to your standards.'
  name: Compliance Standards
paths:
  /compliance:
    get:
      description: Returns all system supported and custom compliance standards.
      operationId: get-all-standards
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                items:
                  $ref: '#/components/schemas/ComplianceStandardModel'
                type: array
          description: successful operation
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: List Compliance Standards
      tags:
      - Compliance Standards
    post:
      description: Allows for the creation of a custom compliance standard.
      operationId: add-standard
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceStandardModel'
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter / duplicate_name / bad_request
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Add Compliance Standard
      tags:
      - Compliance Standards
  /compliance/{complianceId}:
    get:
      description: Returns the compliance standard for the specified ID.
      operationId: get-standards-by-id
      parameters:
      - description: Compliance Standard ID
        in: path
        name: complianceId
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                $ref: '#/components/schemas/ComplianceStandardModel'
          description: successful operation
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Compliance Standard by ID
      tags:
      - Compliance Standards
    put:
      description: Updates existing compliance standard.
      operationId: update-standard
      parameters:
      - description: Compliance Standard ID
        in: path
        name: complianceId
        required: true
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceStandardModel'
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter / duplicate_name / bad_request
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Update Compliance Standard
      tags:
      - Compliance Standards
    delete:
      description: Deletes the compliance standard for the specified ID.
      operationId: delete-standard
      parameters:
      - description: Compliance Standard ID
        in: path
        name: complianceId
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Delete Compliance Standard
      tags:
      - Compliance Standards
  /compliance/clone/{complianceId}:
    post:
      description: Clones the compliance standard with the specified compliance ID.
      operationId: clone-standard
      parameters:
      - description: Compliance Standard ID
        in: path
        name: complianceId
        required: true
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceStandardModel'
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter / duplicate_name / bad_request
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Clone Compliance Standard
      tags:
      - Compliance Standards
  /compliance/{complianceId}/requirement:
    get:
      description: Returns a list of all compliance requirements for the specified compliance standard ID.
      operationId: get-requirements
      parameters:
      - description: Compliance Standard ID
        in: path
        name: complianceId
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                items:
                  $ref: '#/components/schemas/ComplianceRequirementModel'
                type: array
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: List Compliance Requirements
      tags:
      - Compliance Standards
    post:
      description: Adds a new compliance requirement to the provided compliance standard.
      operationId: add-requirement
      parameters:
      - description: Compliance Standard ID
        in: path
        name: complianceId
        required: true
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceRequirementModel'
      responses:
        '200':
          description: success
        '400':
          description: missing_required_parameter / duplicate_name / bad_request
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Add Compliance Requirement
      tags:
      - Compliance Standards
  /compliance/requirement/{requirementId}:
    get:
      description: Returns compliance requirement data for the specified requirements ID.
      operationId: get-requirement-by-id
      parameters:
      - description: Compliance Requirement ID
        in: path
        name: requirementId
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/ComplianceRequirementModel'
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Compliance Requirement by ID
      tags:
      - Compliance Standards
    put:
      description: Updates information in the provided compliance requirement.
      operationId: update-requirement
      parameters:
      - description: Compliance Requirement ID
        in: path
        name: requirementId
        required: true
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceRequirementModel'
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter / duplicate_name / bad_request
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Update Compliance Requirement
      tags:
      - Compliance Standards
    delete:
      description: Deletes the compliance requirement for the specified ID.
      operationId: delete-requirement
      parameters:
      - description: Compliance Requirement ID
        in: path
        name: requirementId
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Delete Compliance Requirement
      tags:
      - Compliance Standards
  /compliance/{requirementId}/section:
    get:
      description: Returns a list of all compliance requirement sections for the specified compliance requirement ID.
      operationId: get-sections
      parameters:
      - description: Compliance Requirement ID
        in: path
        name: requirementId
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          content:
            '*/*':
              schema:
                items:
                  $ref: '#/components/schemas/ComplianceSectionModel'
                type: array
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: List Compliance Requirement Sections
      tags:
      - Compliance Standards
    post:
      description: Adds a new section to a compliance standard requirement.
      operationId: add-section
      parameters:
      - description: Compliance Requirement ID
        in: path
        name: requirementId
        required: true
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceSectionModel'
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Add Compliance Requirement Section
      tags:
      - Compliance Standards
  /compliance/requirement/section/{sectionId}:
    put:
      description: Updates the compliance requirement section for the specified ID.
      operationId: update-section
      parameters:
      - description: Compliance Section ID
        in: path
        name: sectionId
        required: true
        schema:
          format: uuid
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceSectionModel'
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Update Compliance Requirement Section
      tags:
      - Compliance Standards
    delete:
      description: Deletes the compliance requirement section for the specified ID.
      operationId: delete-section
      parameters:
      - description: Compliance Section ID
        in: path
        name: sectionId
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          description: successful operation
        '400':
          description: missing_required_parameter
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Delete Compliance Requirement Section
      tags:
      - Compliance Standards
components:
  schemas:
    ComplianceSectionModel:
      description: Model for ComplianceSection
      properties:
        associatedPolicyIds:
          description: Associated Policy IDs
          items:
            type: string
          readOnly: true
          type: array
          uniqueItems: true
        createdBy:
          description: Created By
          readOnly: true
          type: string
        createdOn:
          description: Created On
          format: int64
          readOnly: true
          type: integer
        description:
          description: Description
          type: string
        id:
          description: Compliance ID
          format: uuid
          readOnly: true
          type: string
        label:
          description: Section Label
          readOnly: true
          type: string
        lastModifiedBy:
          description: Last Modified By
          readOnly: true
          type: string
        lastModifiedOn:
          description: Last Modified On
          format: int64
          readOnly: true
          type: integer
        policiesAssignedCount:
          description: Number Of Assigned Policies
          format: int32
          readOnly: true
          type: integer
        requirementId:
          description: Compliance Requirement ID
          format: uuid
          readOnly: true
          type: string
        requirementName:
          description: Compliance Requirement Name
          readOnly: true
          type: string
        sectionId:
          description: Compliance Section ID
          type: string
        standardName:
          description: Compliance Standard Name
          readOnly: true
          type: string
        systemDefault:
          description: System Default
          readOnly: true
          type: boolean
        viewOrder:
          description: View Order
          format: int32
          readOnly: true
          type: integer
      type: object
    ComplianceStandardModel:
      description: Model for ComplianceStandard
      properties:
        cloudType:
          description: Cloud Type (determined based on policies assigned)
          items:
            enum:
            - ALL
            - AWS
            - AZURE
            - GCP
            - ALIBABA_CLOUD
            - OCI
            - IBM
            type: string
          readOnly: true
          type: array
          uniqueItems: true
        createdBy:
          description: Created By
          readOnly: true
          type: string
        createdOn:
          description: Created On
          format: int64
          readOnly: true
          type: integer
        description:
          description: Description
          type: string
        id:
          description: Compliance ID
          format: uuid
          readOnly: true
          type: string
        lastModifiedBy:
          description: Last Modified By
          readOnly: true
          type: string
        lastModifiedOn:
          description: Last Modified On
          format: int64
          readOnly: true
          type: integer
        name:
          description: Compliance Standard Name
          type: string
        policiesAssignedCount:
          description: Number Of Assigned Policies
          format: int32
          readOnly: true
          type: integer
        systemDefault:
          description: System Default
          readOnly: true
          type: boolean
      required:
      - name
      type: object
    ComplianceRequirementModel:
      description: Model for ComplianceRequirement
      properties:
        complianceId:
          description: Compliance Standard ID
          format: uuid
          readOnly: true
          type: string
        createdBy:
          description: Created By
          readOnly: true
          type: string
        createdOn:
          description: Created On
          format: int64
          readOnly: true
          type: integer
        description:
          description: Description
          type: string
        id:
          description: Compliance ID
          format: uuid
          readOnly: true
          type: string
        lastModifiedBy:
          description: Last Modified By
          readOnly: true
          type: string
        lastModifiedOn:
          description: Last Modified On
          format: int64
          readOnly: true
          type: integer
        name:
          description: Compliance Requirement Name
          type: string
        policiesAssignedCount:
          description: Number Of Assigned Policies
          format: int32
          readOnly: true
          type: integer
        requirementId:
          description: Compliance Requirement Number
          type: string
        standardName:
          description: Compliance Standard Name
          readOnly: true
          type: string
        systemDefault:
          description: System Default
          readOnly: true
          type: boolean
        viewOrder:
          description: View Order
          format: int32
          readOnly: true
          type: integer
      required:
      - name
      - requirementId
      type: object
  securitySchemes:
    x-redlock-auth:
      description: The x-redlock-auth value is a JSON Web Token (JWT).
      in: header
      name: x-redlock-auth
      type: apiKey