Palo Alto Networks Connector Groups API

Logical grouping of ZTNA connectors for high availability.

Operations 5

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /v2/connector-groups List ZTNA connector groups · Palo Alto Networks List Connector Groups #
Ask an LLM
“What connector groups do I have for load balancing ZTNA connectors?”
“Which groups are my private applications assigned to?”
Tell an agent
List all connector groups.
Show my ZTNA connector groups used for high availability.
POST /v2/connector-groups Create a ZTNA connector group · Palo Alto Networks Create Connector Group #
Ask an LLM
“How do I create a new group to organize ZTNA connectors?”
“Can I pin a connector group to a region when creating it?”
Tell an agent
Create connector group {name}.
Create connector group {name} in region {region}.
GET /v2/connector-groups/{group_id} Get a connector group's details · Palo Alto Networks Get Connector Group #
Ask an LLM
“What are the full details of a specific connector group?”
“How do I look up a connector group by its ID?”
Tell an agent
Show connector group {group_id}.
Get details for ZTNA connector group {group_id}.
PUT /v2/connector-groups/{group_id} Update a connector group · Palo Alto Networks Update Connector Group #
Ask an LLM
“How do I rename an existing connector group?”
“Can I change a connector group's region or description?”
Tell an agent
Rename connector group {group_id} to {name}.
Update connector group {group_id} named {name} to region {region}.
DELETE /v2/connector-groups/{group_id} Delete an empty connector group · Palo Alto Networks Delete Connector Group #
Ask an LLM
“How do I delete a connector group?”
“Must a connector group be empty before it can be removed?”
Tell an agent destructive · confirm first
Delete connector group {group_id}.
Remove the empty ZTNA connector group {group_id}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-connector-groups-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-connector-groups-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Palo Alto Networks ZTNA Connector Connector Groups API
  description: ZTNA Connector API for zero trust network access management. Provides programmatic control over ZTNA connectors, connector groups, protected applications, FQDN-based access rules, subnet-based access rules, and license information. Connectors are software agents deployed in private network environments that provide secure access paths for ZTNA-protected applications without requiring inbound firewall rules. Part of the Palo Alto Networks SASE platform.
  version: '2.0'
  contact:
    name: Palo Alto Networks Developer Support
    url: https://pan.dev/
  license:
    name: Proprietary
    url: https://www.paloaltonetworks.com/legal
servers:
- url: https://api.sase.paloaltonetworks.com/ztna
  description: SASE ZTNA Connector API production server.
security:
- oauth2Bearer: []
tags:
- name: Connector Groups
  description: Logical grouping of ZTNA connectors for high availability.
paths:
  /v2/connector-groups:
    get:
      operationId: listConnectorGroups
      summary: Palo Alto Networks List Connector Groups
      description: Returns the list of connector groups. Connector groups logically group multiple connectors for high availability and load balancing. Applications are assigned to connector groups rather than individual connectors.
      tags:
      - Connector Groups
      responses:
        '200':
          description: Connector groups returned.
          content:
            application/json:
              schema:
                type: object
                properties:
                  total:
                    type: integer
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/ConnectorGroup'
              examples:
                ListConnectorGroups200Example:
                  summary: Default listConnectorGroups 200 response
                  x-microcks-default: true
                  value:
                    total: 673
                    items:
                    - group_id: '985333'
                      name: Staging Sensor 26
                      description: Monitoring investigation blocked applied activity traffic.
                      connector_count: 400
                      region: us-west-2
                      created_at: '2026-09-14T06:06:49Z'
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListConnectorGroups401Example:
                  summary: Default listConnectorGroups 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListConnectorGroups403Example:
                  summary: Default listConnectorGroups 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListConnectorGroups500Example:
                  summary: Default listConnectorGroups 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    post:
      operationId: createConnectorGroup
      summary: Palo Alto Networks Create Connector Group
      description: Creates a new connector group for organizing ZTNA connectors.
      tags:
      - Connector Groups
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ConnectorGroupRequest'
            examples:
              CreateConnectorGroupRequestExample:
                summary: Default createConnectorGroup request
                x-microcks-default: true
                value:
                  name: Corporate Sensor 60
                  description: Violation rule blocked violation network applied incident monitoring.
                  region: us-east-1
      responses:
        '201':
          description: Connector group created successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConnectorGroup'
              examples:
                CreateConnectorGroup201Example:
                  summary: Default createConnectorGroup 201 response
                  x-microcks-default: true
                  value:
                    group_id: '985333'
                    name: Staging Sensor 26
                    description: Monitoring investigation blocked applied activity traffic.
                    connector_count: 400
                    region: us-west-2
                    created_at: '2026-09-14T06:06:49Z'
        '400':
          description: Invalid request body.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateConnectorGroup400Example:
                  summary: Default createConnectorGroup 400 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateConnectorGroup401Example:
                  summary: Default createConnectorGroup 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateConnectorGroup403Example:
                  summary: Default createConnectorGroup 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateConnectorGroup500Example:
                  summary: Default createConnectorGroup 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /v2/connector-groups/{group_id}:
    get:
      operationId: getConnectorGroup
      summary: Palo Alto Networks Get Connector Group
      description: Returns full details for a specific connector group.
      tags:
      - Connector Groups
      parameters:
      - name: group_id
        in: path
        required: true
        description: Unique identifier of the connector group.
        schema:
          type: string
        example: '201460'
      responses:
        '200':
          description: Connector group details returned.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConnectorGroup'
              examples:
                GetConnectorGroup200Example:
                  summary: Default getConnectorGroup 200 response
                  x-microcks-default: true
                  value:
                    group_id: '985333'
                    name: Staging Sensor 26
                    description: Monitoring investigation blocked applied activity traffic.
                    connector_count: 400
                    region: us-west-2
                    created_at: '2026-09-14T06:06:49Z'
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetConnectorGroup401Example:
                  summary: Default getConnectorGroup 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetConnectorGroup403Example:
                  summary: Default getConnectorGroup 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '404':
          description: Connector group not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetConnectorGroup404Example:
                  summary: Default getConnectorGroup 404 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetConnectorGroup500Example:
                  summary: Default getConnectorGroup 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    put:
      operationId: updateConnectorGroup
      summary: Palo Alto Networks Update Connector Group
      description: Updates an existing connector group configuration.
      tags:
      - Connector Groups
      parameters:
      - name: group_id
        in: path
        required: true
        description: Unique identifier of the connector group to update.
        schema:
          type: string
        example: '452601'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ConnectorGroupRequest'
            examples:
              UpdateConnectorGroupRequestExample:
                summary: Default updateConnectorGroup request
                x-microcks-default: true
                value:
                  name: Corporate Sensor 60
                  description: Violation rule blocked violation network applied incident monitoring.
                  region: us-east-1
      responses:
        '200':
          description: Connector group updated successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConnectorGroup'
              examples:
                UpdateConnectorGroup200Example:
                  summary: Default updateConnectorGroup 200 response
                  x-microcks-default: true
                  value:
                    group_id: '985333'
                    name: Staging Sensor 26
                    description: Monitoring investigation blocked applied activity traffic.
                    connector_count: 400
                    region: us-west-2
                    created_at: '2026-09-14T06:06:49Z'
        '400':
          description: Invalid request body.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateConnectorGroup400Example:
                  summary: Default updateConnectorGroup 400 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateConnectorGroup401Example:
                  summary: Default updateConnectorGroup 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateConnectorGroup403Example:
                  summary: Default updateConnectorGroup 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '404':
          description: Connector group not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateConnectorGroup404Example:
                  summary: Default updateConnectorGroup 404 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateConnectorGroup500Example:
                  summary: Default updateConnectorGroup 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    delete:
      operationId: deleteConnectorGroup
      summary: Palo Alto Networks Delete Connector Group
      description: Deletes a connector group. The group must have no connectors assigned before deletion.
      tags:
      - Connector Groups
      parameters:
      - name: group_id
        in: path
        required: true
        description: Unique identifier of the connector group to delete.
        schema:
          type: string
        example: '338215'
      responses:
        '204':
          description: Connector group deleted successfully.
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteConnectorGroup401Example:
                  summary: Default deleteConnectorGroup 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteConnectorGroup403Example:
                  summary: Default deleteConnectorGroup 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '404':
          description: Connector group not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteConnectorGroup404Example:
                  summary: Default deleteConnectorGroup 404 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteConnectorGroup500Example:
                  summary: Default deleteConnectorGroup 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Security firewall network configured traffic blocked threat.
                    request_id: 709c60bb-8234-4bc4-938b-d0835224c350
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
components:
  schemas:
    ConnectorGroupRequest:
      type: object
      required:
      - name
      properties:
        name:
          type: string
          description: Display name for the connector group.
          example: Corporate Sensor 60
        description:
          type: string
          description: Optional description of the connector group.
          example: Violation rule blocked violation network applied incident monitoring.
        region:
          type: string
          description: Geographic region for this connector group.
          example: us-east-1
    ConnectorGroup:
      type: object
      properties:
        group_id:
          type: string
          description: Unique identifier of the connector group.
          example: '985333'
        name:
          type: string
          description: Display name of the connector group.
          example: Staging Sensor 26
        description:
          type: string
          description: Description of the connector group's purpose.
          example: Monitoring investigation blocked applied activity traffic.
        connector_count:
          type: integer
          description: Number of connectors in this group.
          example: 400
        region:
          type: string
          description: Primary geographic region for this connector group.
          example: us-west-2
        created_at:
          type: string
          format: date-time
          example: '2026-09-14T06:06:49Z'
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
          description: Error code identifying the error type.
          example: example-error
        message:
          type: string
          description: Human-readable description of the error.
          example: Security firewall network configured traffic blocked threat.
        request_id:
          type: string
          description: Request identifier for support correlation.
          example: 709c60bb-8234-4bc4-938b-d0835224c350
  securitySchemes:
    oauth2Bearer:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: OAuth 2.0 Bearer token for SASE platform authentication. Obtain using the client_credentials grant with your SASE service account client ID and client secret.