Palo Alto Networks Configuration Management API

The Configuration Management API from Palo Alto Networks — 1 operation(s) for configuration management.

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /seb-api/v1/configuration-management/draft/publish Publish the configuration draft · Publish Draft #
Ask an LLM
“How do I publish my pending configuration draft so it takes effect?”
“Can I add a description when I publish a draft configuration?”
Tell an agent
Publish the current configuration draft.
Publish the draft with description {description}.
GET /sse/config/v1/config-versions List candidate configuration versions · List the candidate configurations #
Ask an LLM
“What candidate configuration versions exist in Prisma Access?”
“Can I page through the configuration version history?”
Tell an agent
List my Prisma Access configuration versions.
Show {limit} configuration versions starting at offset {offset}.
DELETE /sse/config/v1/config-versions/candidate Discard candidate changes and revert to running · Rollback to the running configuration #
Ask an LLM
“How do I throw away uncommitted changes and go back to the running configuration?”
“Is rolling back the candidate configuration reversible?”
Tell an agent destructive · confirm first
Roll back the candidate configuration to the running configuration.
Discard all pending candidate config changes.
POST /sse/config/v1/config-versions/candidate:push Push the candidate configuration to folders · Push the candidate configuration #
Ask an LLM
“How do I push my pending Prisma Access candidate changes out to a folder?”
“Can I add a description when pushing the candidate configuration live?”
Tell an agent
Push the candidate configuration to folders {folders}.
Push candidate changes to {folders} with the note {description}.
GET /sse/config/v1/config-versions/running Show the running configuration · Show the running configuration #
Ask an LLM
“What configuration is currently running in each Prisma Access folder?”
“Which config version is live right now?”
Tell an agent
Show the running configuration across all folders.
Tell me which configuration version is live in each folder.
GET /sse/config/v1/config-versions/{version} Get a configuration by version number · Get a configuration by version #
Ask an LLM
“How do I view a specific past configuration version?”
“Can I inspect what a numbered config version contained?”
Tell an agent
Get configuration version {version}.
Show me the contents of config version {version}.
POST /sse/config/v1/config-versions:load Load a configuration from a snapshot version · Load a configuration #
Ask an LLM
“How do I load an older snapshot as my candidate configuration?”
“Can I restore a Prisma Access config from a saved snapshot version?”
Tell an agent
Load configuration version {version} from a snapshot.
Restore snapshot version {version} into the candidate config.
GET /sse/config/v1/jobs List configuration job history · List configuration jobs #
Ask an LLM
“What configuration push and commit jobs have run recently?”
“Where can I see the history of Prisma Access config jobs?”
Tell an agent
List the Prisma Access configuration jobs history.
Show all recent configuration jobs and their results.
GET /sse/config/v1/jobs/{id} Check one configuration job by its ID · List a configuration job by ID #
Ask an LLM
“Did my configuration push job finish, and how can I check that single job?”
“What details can I see for one specific Prisma Access config job?”
Tell an agent
Show the status of configuration job {id}.
Look up config job {id} and tell me its result.
GET /sse/config/v1/snapshots List configuration snapshots · List configuration snapshots #
Ask an LLM
“What configuration snapshots are saved in Prisma Access?”
“Which snapshot versions could I load to restore a config?”
Tell an agent
List all Prisma Access configuration snapshots.
Show the saved config snapshots I can restore from.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-configuration-management-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-configuration-management-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Prisma Browser Management Console Public Configuration…
  version: 1.0.0
  description: This Open API spec file was created on May 06, 2026. © 2026 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be found at https://www.paloaltonetworks.com/company/trademarks.html. All other marks mentioned herein may be trademarks of their respective companies.
security:
- BearerAuth: []
tags:
- name: Configuration Management
paths:
  /seb-api/v1/configuration-management/draft/publish:
    post:
      summary: Publish Draft
      description: Create the publish details through this Application Programming Interface endpoint.
      operationId: PostSeb-apiV1Configuration-managementDraftPublish
      responses:
        '201':
          description: Active version was created successfully
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                type: object
                properties:
                  errorResponse:
                    $ref: '#/components/schemas/ErrorResponse'
        '403':
          description: Forbidden
        '409':
          description: Draft contains no changes, No Active version was created
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                    description: info message
                    example: No pending changes found in the current draft
        '500':
          description: Internal server error
        '501':
          description: Draft Mode is not supported
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                    description: info message
                    example: Draft mode is not supported
      parameters: []
      tags:
      - Configuration Management
      requestBody:
        required: false
        content:
          application/json:
            schema:
              type: object
              properties:
                description:
                  type: string
                  description: Provide description to describe this version
                  maxLength: 255
  /sse/config/v1/config-versions:
    get:
      description: List the candidate configurations.
      operationId: get-sse-config-v1-config-versions
      parameters:
      - $ref: '#/components/parameters/limit-optional'
      - $ref: '#/components/parameters/offset-optional'
      responses:
        '200':
          content:
            application/json:
              schema:
                allOf:
                - items:
                    $ref: '#/components/schemas/candidate-config-versions'
                  type: array
          description: List the configuration versions
        '400':
          $ref: '#/components/responses/bad_request_errors_basic'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '404':
          $ref: '#/components/responses/not_found'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: List the candidate configurations
      tags:
      - Configuration Management
  /sse/config/v1/config-versions/candidate:
    delete:
      description: Rollback to the running configuration.
      operationId: delete-sse-config-v1-config-versions-candidate
      responses:
        '200':
          $ref: '#/components/responses/http_ok'
        '400':
          $ref: '#/components/responses/bad_request_errors_basic'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '404':
          $ref: '#/components/responses/not_found'
        '409':
          $ref: '#/components/responses/conflict_errors'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: Rollback to the running configuration
      tags:
      - Configuration Management
  /sse/config/v1/config-versions/candidate:push:
    post:
      description: Push the candidate configuration.
      operationId: post-sse-config-v1-config-versions-candidate:push
      requestBody:
        content:
          application/json:
            schema:
              properties:
                description:
                  type: string
                folders:
                  description: The target folder for the configuration push
                  items:
                    enum:
                    - Mobile Users
                    - Remote Networks
                    - Service Connections
                    - Mobile Users Container
                    - Mobile Users Explicit Proxy
                    type: string
                  type: array
              required:
              - folders
              type: object
        description: Push the candidate configuration
      responses:
        '201':
          $ref: '#/components/responses/http_created'
        '400':
          $ref: '#/components/responses/bad_request_errors_basic_with_body'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '409':
          $ref: '#/components/responses/conflict_errors'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: Push the candidate configuration
      tags:
      - Configuration Management
  /sse/config/v1/config-versions/running:
    get:
      description: Show the running configuration across each folder.
      operationId: get-sse-config-v1-config-versions-running
      responses:
        '200':
          content:
            application/json:
              schema:
                allOf:
                - items:
                    $ref: '#/components/schemas/running-config-versions'
                  type: array
          description: List of the current running configurations.
        '400':
          $ref: '#/components/responses/bad_request_errors_basic'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '404':
          $ref: '#/components/responses/not_found'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: Show the running configuration
      tags:
      - Configuration Management
  /sse/config/v1/config-versions/{version}:
    get:
      description: Get a configuration by version.
      operationId: get-sse-config-v1-config-versions-version
      parameters:
      - $ref: '#/components/parameters/version-required'
      responses:
        '200':
          content:
            application/json:
              schema:
                allOf:
                - items:
                    $ref: '#/components/schemas/candidate-config-versions'
                  type: array
          description: Get config by version
        '400':
          $ref: '#/components/responses/bad_request_errors_basic'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '404':
          $ref: '#/components/responses/not_found'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: Get a configuration by version
      tags:
      - Configuration Management
  /sse/config/v1/config-versions:load:
    post:
      description: 'Load a Prisma Access configuration using a version retrieved from a

        snapshot.'
      operationId: post-sse-config-v1-config-versions:load
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/load-config'
        description: Load config with specific version
      responses:
        '201':
          $ref: '#/components/responses/http_created'
        '400':
          $ref: '#/components/responses/bad_request_errors_basic_with_body'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '409':
          $ref: '#/components/responses/conflict_errors'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: Load a configuration
      tags:
      - Configuration Management
  /sse/config/v1/jobs:
    get:
      description: 'Retrieves the Prisma Access

        configuration jobs

        history.'
      operationId: get-sse-config-v1-jobs
      responses:
        '200':
          content:
            application/json:
              schema:
                properties:
                  data:
                    allOf:
                    - items:
                        $ref: '#/components/schemas/jobs'
                      type: array
                  limit:
                    default: 200
                    type: number
                  offset:
                    default: 0
                    type: number
                  total:
                    type: number
                type: object
          description: List of jobs
        '400':
          $ref: '#/components/responses/bad_request_errors_basic'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '404':
          $ref: '#/components/responses/not_found'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: List configuration jobs
      tags:
      - Configuration Management
  /sse/config/v1/jobs/{id}:
    get:
      description: 'Retrieves a Prisma Access

        configuration job using its ID.

        history.'
      operationId: get-sse-config-v1-jobs-id
      parameters:
      - $ref: '#/components/parameters/jobid-required'
      responses:
        '200':
          content:
            application/json:
              schema:
                allOf:
                - items:
                    $ref: '#/components/schemas/jobs'
                  type: array
          description: Get the job by id.
        '400':
          $ref: '#/components/responses/bad_request_errors_basic'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '404':
          $ref: '#/components/responses/not_found'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: List a configuration job by ID
      tags:
      - Configuration Management
  /sse/config/v1/snapshots:
    get:
      description: 'Lists all Prisma Access

        configuration snapshots.'
      operationId: get-sse-config-v1-snapshots
      responses:
        '200':
          content:
            application/json:
              schema:
                properties:
                  data:
                    allOf:
                    - type: array
                  limit:
                    default: 200
                    type: number
                  offset:
                    default: 0
                    type: number
                  total:
                    type: number
                type: object
          description: List of config version snapshots
        '400':
          $ref: '#/components/responses/bad_request_errors_basic'
        '401':
          $ref: '#/components/responses/auth_errors'
        '403':
          $ref: '#/components/responses/access_errors'
        '404':
          $ref: '#/components/responses/not_found'
        default:
          $ref: '#/components/responses/default_errors'
      security:
      - Bearer: []
      summary: List configuration snapshots
      tags:
      - Configuration Management
components:
  schemas:
    ErrorResponse:
      type: object
      required:
      - message
      properties:
        error:
          type: string
        message:
          type: string
        missingDeviceIds:
          type: array
          items:
            type: string
          description: List of device IDs that were not found (only present for device not found errors)
        missingUserIds:
          type: array
          items:
            type: string
          description: List of user IDs that were not found (only present for user not found errors)
    error_detail_cause_info:
      properties:
        code:
          type: string
        details:
          type: object
        help:
          type: string
        message:
          type: string
      title: Cause Info
      type: object
    load-config:
      properties:
        version:
          type: number
      type: object
    generic_error:
      properties:
        _errors:
          $ref: '#/components/schemas/error_detail_cause_infos'
        _request_id:
          type: string
      type: object
    error_detail_cause_infos:
      items:
        $ref: '#/components/schemas/error_detail_cause_info'
      type: array
    candidate-config-versions:
      properties:
        admin:
          type: string
        created:
          type: number
        date:
          type: string
        deleted:
          type: number
        description:
          type: string
        id:
          type: integer
        scope:
          type: string
        swg_config:
          type: string
        updated:
          type: number
        version:
          type: string
      type: object
    jobs:
      properties:
        details:
          type: string
        end_ts:
          type: string
        id:
          type: string
        insert_ts:
          type: string
        job_result:
          type: string
        job_status:
          type: string
        job_type:
          type: string
        last_update:
          type: string
        opaque_int:
          type: string
        opaque_str:
          type: string
        owner:
          type: string
        parent_id:
          type: string
        percent:
          type: string
        result_i:
          type: string
        result_str:
          type: string
        session_id:
          type: string
        start_ts:
          type: string
        status_i:
          type: string
        status_str:
          type: string
        summary:
          type: string
        type_i:
          type: string
        type_str:
          type: string
        uname:
          type: string
      type: object
    running-config-versions:
      properties:
        date:
          type: string
        device:
          type: string
        version:
          type: number
      type: object
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: Enter your JWT Bearer token to authorize.
    Bearer:
      scheme: bearer
      type: http
  examples:
    json_409_panui_mgmt_name_not_unique:
      summary: Name Not Unique
      value:
        _errors:
        - code: E006
          details: {}
          message: Name Not Unique
        _request_id: abcd-1234
    json_401_panui_auth_not_authenticated:
      summary: Not Authenticated
      value:
        _errors:
        - code: E016
          details: {}
          message: Not Authenticated
        _request_id: abcd-1234
    json_501_panui_restapi_version_not_supported:
      summary: Version Not Supported
      value:
        _errors:
        - code: E012
          details: {}
          message: Version Not Supported
        _request_id: abcd-1234
    json_403_panui_auth_unauthorized:
      summary: Unauthorized
      value:
        _errors:
        - code: E007
          details: {}
          message: Unauthorized
        _request_id: abcd-1234
    json_400_panui_mgmt_malformed_command:
      summary: Malformed Command
      value:
        _errors:
        - code: E003
          details: {}
          message: Malformed Command
        _request_id: abcd-1234
    json_400_panui_restapi_missing_query_parameter:
      summary: Missing Query Parameter
      value:
        _errors:
        - code: E003
          details: {}
          message: 'Missing Query Parameter: name'
        _request_id: abcd-1234
    json_401_panui_auth_invalid_credential:
      summary: Invalid Credential
      value:
        _errors:
        - code: E016
          details: {}
          message: Invalid Credential
        _request_id: abcd-1234
    json_404_panui_mgmt_object_not_present:
      summary: Object Not Present
      value:
        _errors:
        - code: E005
          details: {}
          message: Object Not Present
        _request_id: abcd-1234
    json_409_panui_mgmt_reference_not_zero:
      summary: Reference Not Zero
      value:
        _errors:
        - code: E009
          details: {}
          message: Reference Not Zero
        _request_id: abcd-1234
    json_401_panui_auth_key_expired:
      summary: Key Expired
      value:
        _errors:
        - code: E016
          details: {}
          message: Key Expired
        _request_id: abcd-1234
    json_400_panui_restapi_invalid_query_parameter:
      summary: Invalid Query Parameter
      value:
        _errors:
        - code: E003
          details: {}
          message: 'Invalid Query Parameter: location=invalid'
        _request_id: abcd-1234
    json_401_panui_auth_need_password_change:
      summary: Need Password Change
      value:
        _errors:
        - code: E016
          details: {}
          message: The password needs to be changed.
        _request_id: abcd-1234
    json_400_panui_restapi_input_format_mismatch:
      summary: Input Format Mismatch
      value:
        _errors:
        - code: E003
          details: {}
          message: 'Input Format Mismatch: input-format=json'
        _request_id: abcd-1234
    json_400_panui_mgmt_invalid_command:
      summary: Invalid Command
      value:
        _errors:
        - code: E003
          details: {}
          message: Invalid Command
        _request_id: abcd-1234
    json_401_panui_auth_key_too_long:
      summary: Key Too Long
      value:
        _errors:
        - code: E016
          details: {}
          message: Key Too Long
        _request_id: abcd-1234
    json_400_panui_mgmt_invalid_object:
      summary: Invalid Object
      value:
        _errors:
        - code: E003
          details: {}
          message: Invalid Object
        _request_id: abcd-1234
    json_400_panui_restapi_output_format_mismatch:
      summary: Output Format Mismatch
      value:
        _errors:
        - code: E003
          details: {}
          message: 'Output Format Mismatch: output-format=json Accept=xml'
        _request_id: abcd-1234
    json_409_panui_mgmt_object_not_unique:
      summary: Object Not Unique
      value:
        _errors:
        - code: E016
          details: {}
          message: Object Not Unique
        _request_id: abcd-1234
    json_504_panui_mgmt_session_timeout:
      summary: Session Timeout
      value:
        _errors:
        - code: 4
          details: {}
          message: Session Timeout
        _request_id: abcd-1234
    json_400_panui_mgmt_bad_xpath:
      summary: Bad XPath
      value:
        _errors:
        - code: E013
          details: {}
          message: Bad XPath
        _request_id: abcd-1234
    json_405_panui_restapi_action_not_supported:
      summary: Action Not Supported
      value:
        _errors:
        - code: E012
          details: {}
          message: 'Action Not Supported: move'
        _request_id: abcd-1234
    json_501_panui_restapi_method_not_supported:
      summary: Method Not Supported
      value:
        _errors:
        - code: E012
          details: {}
          message: Method Not Supported
        _request_id: abcd-1234
    json_400_panui_restapi_missing_body:
      summary: Missing Body
      value:
        _errors:
        - code: E003
          details: {}
          message: Missing Body
        _request_id: abcd-1234
  responses:
    default_errors:
      content:
        application/json:
          examples:
            action_not_supported:
              $ref: '#/components/examples/json_405_panui_restapi_action_not_supported'
            bad_xpath:
              $ref: '#/components/examples/json_400_panui_mgmt_bad_xpath'
            invalid_command:
              $ref: '#/components/examples/json_400_panui_mgmt_invalid_command'
            malformed_command:
              $ref: '#/components/examples/json_400_panui_mgmt_malformed_command'
            method_not_allowed:
              $ref: '#/components/examples/json_501_panui_restapi_method_not_supported'
            session_timeout:
              $ref: '#/components/examples/json_504_panui_mgmt_session_timeout'
            version_not_supported:
              $ref: '#/components/examples/json_501_panui_restapi_version_not_supported'
          schema:
            $ref: '#/components/schemas/generic_error'
      description: General Errors
    http_ok:
      description: Ok
    not_found:
      content:
        application/json:
          examples:
            object_not_present:
              $ref: '#/components/examples/json_404_panui_mgmt_object_not_present'
          schema:
            $ref: '#/components/schemas/generic_error'
      description: Not Found
    auth_errors:
      content:
        application/json:
          examples:
            auth_not_authenticated:
              $ref: '#/components/examples/json_401_panui_auth_not_authenticated'
            invalid_credential:
              $ref: '#/components/examples/json_401_panui_auth_invalid_credential'
            key_expired:
              $ref: '#/components/examples/json_401_panui_auth_key_expired'
            key_too_long:
              $ref: '#/components/examples/json_401_panui_auth_key_too_long'
            need_password_change:
              $ref: '#/components/examples/json_401_panui_auth_need_password_change'
          schema:
            $ref: '#/components/schemas/generic_error'
      description: Unauthorized
    conflict_errors:
      content:
        application/json:
          examples:
            name_not_unique:
              $ref: '#/components/examples/json_409_panui_mgmt_name_not_unique'
            object_not_unique:
              $ref: '#/components/examples/json_409_panui_mgmt_object_not_unique'
            reference_not_zero:
              $ref: '#/components/examples/json_409_panui_mgmt_reference_not_zero'
          schema:
            $ref: '#/components/schemas/generic_error'
      description: Conflict
    access_errors:
      content:
        application/json:
          examples:
            auth_unauthorized:
              $ref: '#/components/examples/json_403_panui_auth_unauthorized'
          schema:
            $ref: '#/components/schemas/generic_error'
      description: Forbidden
    http_created:
      description: Created
    bad_request_errors_basic_with_body:
      content:
        application/json:
          examples:
            input_format_mismatch:
              $ref: '#/components/examples/json_400_panui_restapi_input_format_mismatch'
            invalid_object:
              $ref: '#/components/examples/json_400_panui_mgmt_invalid_object'
            invalid_query_parameter:
              $ref: '#/components/examples/json_400_panui_restapi_invalid_query_parameter'
            missing_body:
              $ref: '#/components/examples/json_400_panui_restapi_missing_body'
            missing_query_parameter:
              $ref: '#/components/examples/json_400_panui_restapi_missing_query_parameter'
            output_format_mismatch:
              $ref: '#/components/examples/json_400_panui_restapi_output_format_mismatch'
          schema:
            $ref: '#/components/schemas/generic_error'
      description: Bad Request
    bad_request_errors_basic:
      content:
        application/json:
          examples:
            input_format_mismatch:
              $ref: '#/components/examples/json_400_panui_restapi_input_format_mismatch'
            invalid_query_parameter:
              $ref: '#/components/examples/json_400_panui_restapi_invalid_query_parameter'
            missing_query_parameter:
              $ref: '#/components/examples/json_400_panui_restapi_missing_query_parameter'
            output_format_mismatch:
              $ref: '#/components/examples/json_400_panui_restapi_output_format_mismatch'
          schema:
            $ref: '#/components/schemas/generic_error'
      description: Bad Request
  parameters:
    version-required:
      description: The version of the running config
      in: path
      name: version
      required: true
      schema:
        type: string
    offset-optional:
      description: 'The offset of the result entry.

        '
      in: query
      name: offset
      required: false
      schema:
        type: number
    limit-optional:
      description: 'The maximum number of result objects to return per page.

        '
      in: query
      name: limit
      required: false
      schema:
        type: number
    jobid-required:
      description: The id of the job
      in: path
      name: id
      required: true
      schema:
        type: string