Palo Alto Networks Credentials API

{'$ref': 'desc/credentials/credentials.md'}

Documentation GitHub OpenAPI

Operations 8

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api/v34.03/credentials List stored credentials (v34.03) · Get All Credentials #

Ask an LLM

“How do I list all cloud credentials stored in the credentials store with v34.03?”

“Can the older API filter credentials by cloud or auto-import status?”

Tell an agent

List all credentials using API v34.03.

On v34.03, show credentials for cloud {cloud} that were auto-imported {autoImported}.

POST /api/v34.03/credentials Add a credential (v34.03) · Add Credentials #

Ask an LLM

“How do I add a new cloud account credential through the v34.03 API?”

“Can I store an AWS role ARN credential with the older API version?”

Tell an agent

Add credential {_id} of type {type} using v34.03.

On 34.03, create credential {_id} using role ARN {roleArn}.

DELETE /api/v34.03/credentials/{id} Delete a credential (v34.03) · Delete a Credential #

Ask an LLM

“How do I remove a credential from the store with the v34.03 API?”

“Can I delete a stored credential by ID on the older version?”

Tell an agent destructive · confirm first

Delete credential {id} using v34.03.

Remove stored credential {id} via API 34.03.

GET /api/v34.03/credentials/{id}/usages See where a credential is used (v34.03) · Get Credential Usages #

Ask an LLM

“Which scans and integrations use a given credential, per the v34.03 API?”

“Can I check a credential's usages before deleting it on the older version?”

Tell an agent

Show usages of credential {id} on v34.03.

List what depends on credential {id} using 34.03.

GET /api/v34.04/credentials List stored credentials (v34.04) · Get All Credentials #

Ask an LLM

“Which credentials are in my credentials store on the current v34.04 API?”

“Can I page and sort the credential list in version 34.04?”

Tell an agent

List credentials via version 34.04.

With v34.04, get credentials {ids} sorted by {sort}.

POST /api/v34.04/credentials Add a credential (v34.04) · Add Credentials #

Ask an LLM

“Where do I register a new cloud or registry credential on v34.04?”

“Can I add a credential with an API token on the current API version?”

Tell an agent

Create credential {_id} of type {type} with v34.04.

Using 34.04, add credential {_id} for account {accountID} with secret {secret}.

DELETE /api/v34.04/credentials/{id} Delete a credential (v34.04) · Delete a Credential #

Ask an LLM

“What's the v34.04 call to delete a credential I no longer need?”

“Does deleting a credential on 34.04 take just its ID?”

Tell an agent destructive · confirm first

Delete credential {id} on version 34.04.

Using v34.04, permanently remove credential {id}.

GET /api/v34.04/credentials/{id}/usages See where a credential is used (v34.04) · Get Credential Usages #

Ask an LLM

“Where is a particular credential referenced, according to the v34.04 API?”

“Is a credential still in use anywhere on the current version?”

Tell an agent

List usages of credential {id} with v34.04.

On 34.04, show where credential {id} is referenced.

Specifications

⚙

OpenAPI

https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-credentials-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-credentials-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Palo Alto Networks Credentials API
  x-description-source: desc/intro.md
  version: '1.0'
  description: 'Operations tagged Credentials across 2 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json. Each path carries the servers of the definition it was published in.'
tags:
- name: Credentials
  description: Credentials. 4 operations in this definition.
  x-description-source: desc/credentials/credentials.md
paths:
  /api/v34.03/credentials:
    get:
      description: 'Get All Credentials. GET /api/v34.03/credentials on the Credentials API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the credential IDs to filter.

          '
        in: query
        name: ids
        schema:
          description: 'IDs are the credential IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cloud indicates whether to fetch cloud credentials (AWS/GCP/OCI/Azure) or other types of credentials.

          '
        in: query
        name: cloud
        schema:
          type: boolean
      - description: 'External indicates whether to fetch credentials imported from Prisma.

          '
        in: query
        name: external
        schema:
          type: boolean
      - description: 'AutoImported indicates whether to fetch credentials imported from Prisma automatically.

          '
        in: query
        name: autoImported
        schema:
          type: boolean
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_cred.Credential'
          description: ''
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: get-credentials
      summary: Get All Credentials
      x-description-source: desc/credentials/get.md
    post:
      description: 'Add Credentials. POST /api/v34.03/credentials on the Credentials API. Takes an optional request body. Documented responses: 200.'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/cred.Credential'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: post-credentials
      summary: Add Credentials
      x-description-source: desc/credentials/post.md
  /api/v34.03/credentials/{id}:
    delete:
      description: 'Delete a Credential. DELETE /api/v34.03/credentials/{id} on the Credentials API. Takes 1 path parameter. Documented responses: 200.'
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: delete-credentials-id
      summary: Delete a Credential
      x-description-source: desc/credentials/id_delete.md
  /api/v34.03/credentials/{id}/usages:
    get:
      description: 'Get Credential Usages. GET /api/v34.03/credentials/{id}/usages on the Credentials API. Takes 1 path parameter. Documented responses: 200.'
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.CredentialUsage'
          description: ''
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: get-credentials-id-usages
      summary: Get Credential Usages
      x-description-source: desc/credentials/id_usages_get.md
  /api/v34.04/credentials:
    get:
      description: 'Get All Credentials. GET /api/v34.04/credentials on the Credentials API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the credential IDs to filter.

          '
        in: query
        name: ids
        schema:
          description: 'IDs are the credential IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cloud indicates whether to fetch cloud credentials (AWS/GCP/OCI/Azure) or other types of credentials.

          '
        in: query
        name: cloud
        schema:
          type: boolean
      - description: 'External indicates whether to fetch credentials imported from Prisma.

          '
        in: query
        name: external
        schema:
          type: boolean
      - description: 'AutoImported indicates whether to fetch credentials imported from Prisma automatically.

          '
        in: query
        name: autoImported
        schema:
          type: boolean
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_cred.Credential'
          description: ''
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: getApiV3404Credentials
      summary: Get All Credentials
      x-description-source: desc/credentials/get.md
      x-operation-id-source: normalized
      x-operation-id-original: get-credentials
    post:
      description: 'Add Credentials. POST /api/v34.04/credentials on the Credentials API. Takes an optional request body. Documented responses: 200.'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/cred.Credential'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: postApiV3404Credentials
      summary: Add Credentials
      x-description-source: desc/credentials/post.md
      x-operation-id-source: normalized
      x-operation-id-original: post-credentials
  /api/v34.04/credentials/{id}:
    delete:
      description: 'Delete a Credential. DELETE /api/v34.04/credentials/{id} on the Credentials API. Takes 1 path parameter. Documented responses: 200.'
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: deleteApiV3404CredentialsById
      summary: Delete a Credential
      x-description-source: desc/credentials/id_delete.md
      x-operation-id-source: normalized
      x-operation-id-original: delete-credentials-id
  /api/v34.04/credentials/{id}/usages:
    get:
      description: 'Get Credential Usages. GET /api/v34.04/credentials/{id}/usages on the Credentials API. Takes 1 path parameter. Documented responses: 200.'
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.CredentialUsage'
          description: ''
        default:
          description: ''
      tags:
      - Credentials
      x-prisma-cloud-target-env:
        permission: manageCreds
      operationId: getApiV3404CredentialsByIdUsages
      summary: Get Credential Usages
      x-description-source: desc/credentials/id_usages_get.md
      x-operation-id-source: normalized
      x-operation-id-original: get-credentials-id-usages
components:
  schemas:
    cred.TemporaryToken:
      description: 'TemporaryToken is a temporary session token for cloud provider APIs

        AWS - https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html

        GCP - https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials

        Azure - https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on'
      properties:
        awsAccessKeyId:
          description: 'Specifies a temporary access key.

            '
          type: string
        awsSecretAccessKey:
          $ref: '#/components/schemas/common.Secret'
        duration:
          description: 'Specifies a duration for the token.

            '
          format: int64
          type: integer
        expirationTime:
          description: 'Specifies an expiration time for the token.

            '
          format: date-time
          type: string
        token:
          $ref: '#/components/schemas/common.Secret'
      type: object
    types.CredentialUsage:
      description: CredentialUsage represents a single credential usage
      properties:
        description:
          description: 'Resource description (e.g., repository name for registry scan).

            '
          type: string
        type:
          $ref: '#/components/schemas/cred.UsageType'
      type: object
    cred.AzureMIType:
      enum:
      - - user-assigned
        - system-assigned
      type: string
    string:
      type: string
    common.Secret:
      description: Secret Stores the plain and encrypted version of a value. The plain version is not stored in a database
      properties:
        encrypted:
          description: 'Specifies an encrypted value of the secret.

            '
          type: string
        plain:
          description: 'Specifies the plain text value of the secret.

            '
          type: string
      type: object
    -_cred.Credential:
      items:
        $ref: '#/components/schemas/cred.Credential'
      type: array
    cred.AzureSPInfo:
      description: AzureSPInfo contains the Azure credentials needed for certificate based authentications
      properties:
        clientId:
          description: 'ClientID is the client identifier.

            '
          type: string
        miType:
          $ref: '#/components/schemas/cred.AzureMIType'
        subscriptionId:
          description: 'SubscriptionID is a GUID that uniquely identifies the subscription to use Azure services.

            '
          type: string
        tenantId:
          description: 'TenantID is the ID of the AAD directory in which the application was created.

            '
          type: string
      type: object
    cred.OCICred:
      description: OCICred are additional parameters required for OCI credentials
      properties:
        fingerprint:
          description: 'Fingerprint is the public key signature.

            '
          type: string
        tenancyId:
          description: 'TenancyID is the OCID of the tenancy.

            '
          type: string
      type: object
    cred.Credential:
      description: Credential specifies the authentication data of an external provider
      properties:
        _id:
          description: 'Specifies the unique ID for credential.

            '
          type: string
        accountGUID:
          description: 'Specifies the unique ID for an IBM Cloud account.

            '
          type: string
        accountID:
          description: 'Specifies the account identifier. Example: a username, access key, account GUID, and so on.

            '
          type: string
        accountName:
          description: 'Specifies the name of the cloud account.

            '
          type: string
        apiToken:
          $ref: '#/components/schemas/common.Secret'
        azureSPInfo:
          $ref: '#/components/schemas/cred.AzureSPInfo'
        caCert:
          description: 'Specifies the CA certificate for a certificate-based authentication.

            '
          type: string
        cloudProviderAccountID:
          description: 'Specifies the cloud provider account ID.

            '
          type: string
        created:
          description: 'Specifies the time when the credential was created (or, when the account ID was changed for AWS).

            '
          format: date-time
          type: string
        description:
          description: 'Specifies the description for a credential.

            '
          type: string
        external:
          description: 'Indicates whether the credential was onboarded from the Prisma platform.

            '
          type: boolean
        global:
          description: 'Indicates whether the credential scope is global.

            Available values are:

            true: Global

            false: Not Global

            Note: For GCP, the credential scope is the organization.

            '
          type: boolean
        lastModified:
          description: 'Specifies the time when the credential was last modified.

            '
          format: date-time
          type: string
        ociCred:
          $ref: '#/components/schemas/cred.OCICred'
        owner:
          description: 'Specifies the user who created or modified the credential.

            '
          type: string
        prismaLastModified:
          description: 'Specifies the time when the account was last modified by Prisma Cloud Compute.

            '
          format: int64
          type: integer
        roleArn:
          description: 'Specifies the Amazon Resource Name (ARN) of the role to be assumed.

            '
          type: string
        secret:
          $ref: '#/components/schemas/common.Secret'
        skipVerify:
          description: 'Indicates whether to skip the certificate verification in TLS communication.

            '
          type: boolean
        stsEndpoints:
          description: 'Specifies a list of specific endpoints for use in STS sessions in various regions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        tokens:
          $ref: '#/components/schemas/cred.TemporaryToken'
        type:
          $ref: '#/components/schemas/cred.Type'
        url:
          description: 'Specifies the base server URL.

            '
          type: string
        useAWSRole:
          description: 'Indicates whether to authenticate using the IAM Role attached to the instance.

            Available values are:

            true: Authenticate with the attached credentials

            false: Don’t authenticate with the attached credentials.

            '
          type: boolean
        useSTSRegionalEndpoint:
          description: 'Indicates whether to use the regional STS endpoint for an STS session.

            Available values are:

            true: Use the regional STS

            false: Don’t use the regional STS.

            '
          type: boolean
      type: object
    -_types.CredentialUsage:
      items:
        $ref: '#/components/schemas/types.CredentialUsage'
      type: array
    cred.Type:
      description: Type specifies the credential type
      enum:
      - - aws
        - azure
        - gcp
        - ibmCloud
        - oci
        - apiToken
        - basic
        - dtr
        - kubeconfig
        - certificate
        - gitlabToken
      type: string
    cred.UsageType:
      description: UsageType represents the credential usage type
      enum:
      - - Alert settings
        - Alert profile
        - Registry Scan
        - Serverless Scan
        - Cloud Scan
        - Secret Store
        - Serverless Auto-Deploy
        - Host Auto-deploy
        - VM Scan
        - Agentless Scan Hub
        - Custom Intelligence Endpoint
        - VMware Tanzu blobstore Scan
        - Kubernetes Audit settings
        - Agentless app firewall
      type: string
x-refined-from:
- palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json
- palo-alto-compute-openapi-34-04-145-sh-openapi.json