Palo Alto Networks Connector Group API

The Connector-Group API from Palo Alto Networks — 9 operation(s) for connector-group.

Operations 15

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /sse/connector/v2.0/api/connector-groups List connector groups · List Connector Groups #
Ask an LLM
“What connector groups do I have set up for private app access?”
“Can I search and sort my connector groups by name?”
Tell an agent
List all my connector groups.
Search connector groups for {search}, returning at most {limit}.
POST /sse/connector/v2.0/api/connector-groups Create a connector group · Create Connector Group #
Ask an LLM
“How do I create a new connector group in Palo Alto Networks ZTNA Connector?”
“Can I turn on autoscaling when I create a connector group?”
Tell an agent
Create a connector group named {name}.
Create connector group {name} described as {description} with autoscale set to {is_autoscale}.
GET /sse/connector/v2.0/api/connector-groups/{oid} Get a connector group · Get Connector Group #
Ask an LLM
“What are the settings of a single connector group?”
“Can I look up one connector group by its object id?”
Tell an agent
Show connector group {oid}.
Get the configuration details of connector group {oid}.
PUT /sse/connector/v2.0/api/connector-groups/{oid} Update a connector group · Update Connector Group #
Ask an LLM
“How do I rename an existing connector group?”
“Can I enable user ID preservation on a connector group that already exists?”
Tell an agent
Rename connector group {oid} to {name}.
Set preserve user ID to {preserve_user_id} on existing connector group {oid}.
DELETE /sse/connector/v2.0/api/connector-groups/{oid} Delete a connector group · Delete Connector Group #
Ask an LLM
“How do I remove a connector group I no longer need?”
“Can I delete a connector group by its id?”
Tell an agent destructive · confirm first
Delete connector group {oid}.
Remove the connector group with id {oid} permanently.
GET /sse/connector/v2.0/api/connector-groups/filters List filter values for connector group fields · List Connector Group Filters #
Ask an LLM
“What values can I filter connector groups on for a given field?”
“Which filter options are available for the connector group list?”
Tell an agent
Get the filter values for connector group field {field}.
List connector group filter options.
GET /sse/connector/v2.0/api/connector-groups/{oid}/connectors List connectors in a connector group · List Connectors per Connector Group #
Ask an LLM
“Which connectors belong to a particular connector group?”
“Can I search the connectors inside one group?”
Tell an agent
List the connectors in connector group {oid}.
Search connectors in group {oid} for {search}.
GET /sse/connector/v2.0/api/connector-groups/{oid}/applications List FQDN applications served by a connector group · List FQDNs per Connector Group #
Ask an LLM
“Which FQDN applications are routed through a connector group?”
“What application domains does one connector group give access to?”
Tell an agent
List the FQDN applications for connector group {oid}.
Search the FQDN rules of connector group {oid} for {search}.
GET /sse/connector/v2.0/api/connector-groups/{oid}/subnets List subnets served by a connector group · List Subnets per Connector Group #
Ask an LLM
“Which subnets are reachable through a given connector group?”
“Can I sort the subnet rules of a connector group?”
Tell an agent
List the subnets for connector group {oid}.
Show subnet rules in connector group {oid} sorted by {sort}.
GET /sse/connector/v2.0/api/connector-groups/{oid}/wildcards List wildcard domains served by a connector group · List Wildcards per Connector Group #
Ask an LLM
“What wildcard domain rules are attached to a connector group?”
“Which wildcard applications route through one connector group?”
Tell an agent
List the wildcard rules for connector group {oid}.
Search wildcards in connector group {oid} for {search}.
POST /sse/connector/v2.0/api/connector-groups/{oid}/scheduled-upgrade Schedule an upgrade for a connector group · Create Connector Group Scheduled Upgrade #
Ask an LLM
“How do I schedule a connector software upgrade for a group that has none yet?”
“Can I set a drain timeout when scheduling a new connector upgrade?”
Tell an agent
Schedule a new upgrade of connector group {oid} to image {image_id}.
Set up a rolling upgrade {rolling_upgrade} for group {oid} to image {image_id} with drain timeout {drain_timeout}.
GET /sse/connector/v2.0/api/connector-groups/{oid}/scheduled-upgrade Get a connector group's scheduled upgrade · Get Connector Group Scheduled Upgrade #
Ask an LLM
“When is the next connector software upgrade scheduled for a group?”
“What image and timing are set in a connector group's upgrade schedule?”
Tell an agent
Show the scheduled upgrade for connector group {oid}.
Get the upgrade schedule settings of connector group {oid}.
PUT /sse/connector/v2.0/api/connector-groups/{oid}/scheduled-upgrade Change a connector group's scheduled upgrade · Update Connector Group Scheduled Upgrade #
Ask an LLM
“How do I change the image or time of an upgrade already scheduled for a connector group?”
“Can I switch an existing scheduled upgrade to a rolling upgrade?”
Tell an agent
Change the existing scheduled upgrade of connector group {oid} to image {image_id}.
Reschedule the upgrade of group {oid} to image {image_id} at {scheduled_upgrade}.
DELETE /sse/connector/v2.0/api/connector-groups/{oid}/scheduled-upgrade Cancel a connector group's scheduled upgrade · Delete Connector Group Scheduled Upgrade #
Ask an LLM
“How do I cancel an upgrade scheduled for a connector group?”
“Can I remove a pending connector upgrade schedule?”
Tell an agent destructive · confirm first
Cancel the scheduled upgrade for connector group {oid}.
Delete the upgrade schedule on connector group {oid}.
GET /sse/connector/v2.0/api/connector-groups/{oid}/scheduled-upgrade-status Check the upgrade status of a connector group · Get Connector Group Scheduled Upgrade Status #
Ask an LLM
“Did the scheduled upgrade finish on every connector in the group?”
“What is the upgrade progress of each connector in a connector group?”
Tell an agent
Check the scheduled upgrade status of connector group {oid}.
Show per-connector upgrade progress for group {oid}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-connector-group-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-connector-group-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: ZTNA Connector Restful Connector Group API
  version: v2
  license:
    name: Palo Alto Networks EULA
    url: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  description: ZTNA Connector Restful API Specification This Open API spec file was created on March 25, 2026. © 2026 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be found at https://www.paloaltonetworks.com/company/trademarks.html. All other marks mentioned herein may be trademarks of their respective companies.
servers:
- url: https://api.sase.paloaltonetworks.com
security:
- bearerAuth: []
tags:


# --- truncated at 32 KB (39 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-connector-group-api-openapi.yml