Palo Alto Networks Credential Management API

APIs for Credential Management.

Business capability
Identity & Access Management BC-620.20

Operations 14

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /v1/credentialmanagerconfigurations List Credential Manager Service configurations · Retrieves a set of Credential Manager #
Ask an LLM
“Which Credential Manager Service configurations are set up for my company?”
“Can I list only the credential manager configs of a certain CMS type?”
Tell an agent
List all our Credential Manager Service configurations.
Show the credential manager configurations of type {cmsTypes}.
POST /v1/credentialmanagerconfigurations Add Credential Manager Service configurations · Add a set of Credential Manager #
Ask an LLM
“How do I connect a privileged access management vault as a new Credential Manager Service?”
“Can my company have more than one credential manager configuration of the same type?”
Tell an agent
Add these Credential Manager Service configurations: {cmsConfigurations}.
Register a new credential manager connection using {cmsConfigurations}.
PUT /v1/credentialmanagerconfigurations Update a Credential Manager Service configuration · Update a Credential Manager Service configuration #
Ask an LLM
“How do I change the settings of an existing credential manager configuration?”
“Can I share a credential manager configuration with every tenant?”
Tell an agent
Rename credential manager configuration {id} to {name}.
Route credential manager configuration {id} through VSatellites {vSatelliteIds}.
GET /v1/credentialmanagerconfigurations/{id} Get one Credential Manager Service configuration · Retrieves a Credential Manager Service configurati #
Ask an LLM
“What are the details of a single credential manager configuration by its ID?”
“Which VSatellites does a particular credential manager configuration use?”
Tell an agent
Show credential manager configuration {id}.
Look up the Credential Manager Service config with ID {id}.
DELETE /v1/credentialmanagerconfigurations/{id} Delete a Credential Manager Service configuration · Delete a Credential Manager Service configuration #
Ask an LLM
“How do I remove a credential manager configuration we no longer use?”
“Can I delete a Credential Manager Service configuration by its ID?”
Tell an agent destructive · confirm first
Delete credential manager configuration {id}.
Remove the Credential Manager Service config {id} from our company.
POST /v1/credentialmanagerconfigurations/test Test a credential manager connection before saving · Test the connection to a privileged #
Ask an LLM
“Can I test connectivity to a privileged access vault with unsaved configuration details?”
“How do I check a PAM connection works through selected VSatellites before adding it?”
Tell an agent
Test a {cmsType} credential manager connection with details {cmsDetails} using web socket client {wsClientId}.
Try connecting to the PAM through VSatellites {vSatelliteIds} with client {wsClientId}.
POST /v1/credentialmanagerconfigurations/{id}/test Test a saved credential manager configuration · Test the connection to an external #
Ask an LLM
“Is my saved credential manager configuration still able to reach the vault?”
“How do I re-test the connection of an existing Credential Manager Service config by ID?”
Tell an agent
Test the connection of saved credential manager configuration {id}.
Verify that stored CMS config {id} can still reach its privileged access system.
GET /v1/credentials List shared credentials · Retrieves credentials for a company #
Ask an LLM
“What shared credentials does my company have stored?”
“Can I filter shared credentials by team or authentication type?”
Tell an agent
List all shared credentials for my company.
Show shared credentials for team {teamIds} with auth type {authTypes}.
POST /v1/credentials Add new shared credentials · Add a set of new shared #
Ask an LLM
“How do I store a new shared credential for my team to use?”
“Do shared credential names have to be unique?”
Tell an agent
Add these shared credentials: {credentials}.
Create new shared credentials from {credentials}.
PUT /v1/credentials Update a shared credential · Update a shared credential #
Ask an LLM
“How do I change the values or teams of an existing shared credential?”
“Can I move a shared credential to a different credential manager configuration?”
Tell an agent
Update shared credential {id} with new details {credentialDetails}.
Give teams {teamsIds} access to shared credential {id}.
DELETE /v1/credentials Delete several shared credentials at once · Delete shared credentials #
Ask an LLM
“Can I bulk delete a list of shared credentials in one call?”
“How do I remove multiple stored credentials by their IDs together?”
Tell an agent destructive · confirm first
Delete the shared credentials with IDs {ids}.
Bulk remove shared credentials {ids}.
GET /v1/credentials/{id} Get a shared credential by ID · Retrieves shared credential by ID #
Ask an LLM
“What is stored in a particular shared credential?”
“Can I fetch one shared credential with its full details?”
Tell an agent
Show shared credential {id}.
Get shared credential {id} including details {details}.
DELETE /v1/credentials/{id} Delete one shared credential · Delete shared credential by ID #
Ask an LLM
“How do I delete a single shared credential by its ID?”
“What happens when I remove one stored credential from the company?”
Tell an agent destructive · confirm first
Delete shared credential {id}.
Remove the single shared credential with ID {id}.
POST /v1/credentials/test Test access to a shared credential · Test the access to shared credential #
Ask an LLM
“Can I check that a shared credential actually works before relying on it?”
“If I pass both a credential ID and new values to the test, which one wins?”
Tell an agent
Test access to shared credential {id} through client {wsClientId}.
Check whether {authType} credential values {credentialDetails} work, using client {wsClientId}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-credential-management-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-credential-management-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: TLS Protect Cloud API for Strata Cloud Manager Credential…
  description: Use the TLS Protect Cloud APIs to manage certificates, certificate requests, applications, machine identities, users, teams, event logs, and more. This Open API spec file was created on June 04, 2026. © 2026 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be found at https://www.paloaltonetworks.com/company/trademarks.html. All other marks mentioned herein may be trademarks of their respective companies.
  version: 1.0.0
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/ngts
  description: Strata Cloud Manager API
security:
- scmToken: []
tags:


# --- truncated at 32 KB (41 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-credential-management-api-openapi.yml