Palo Alto Networks

Palo Alto Networks Data Security Inventory API

The Data Security capabilities on Prisma Cloud enable you to discover and classify data stored in AWS S3 buckets and protect accidental exposure, misuse, or sharing of sensitive data. The data inventory provides information about the number of S3 storage buckets being monitored and about how objects are exposed—public, sensitive, or malware. To get started with data security, see [Prisma Cloud Data Security](https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security.html).

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 14

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /dlp/api/v1/inventory/data-scanned Get data scanning usage for the tenant · Get Data Usage #
Ask an LLM
“How much data has been scanned for my tenant so far?”
“What is my current data security scanning usage?”
Tell an agent
Show how much data has been scanned for my tenant.
Report my tenant's data security usage.
POST /dlp/api/v1/inventory/object/data-classification/reportv2 Get a data classification report with snippet masking · Get Classification Report V2 #
Ask an LLM
“Can I see the classification report for a file along with whether its snippets are masked?”
“Which sensitive data patterns were found in an object, including snippet masking status?”
Tell an agent
Get the v2 classification report with masking status for object {objectId} in tenant {tenantId}.
Check whether snippets are masked in the classification report for object {objectId}.
POST /dlp/api/v1/inventory/object/data-classification/report Get the original data classification report · Get Classification Report #
Ask an LLM
“What sensitive data classifications were detected in a specific stored object?”
“Is there an older classification report endpoint without the masking details?”
Tell an agent
Pull the original classification report for object {objectId} in tenant {tenantId}.
Show the first-version data classification results for {objectId}.
POST /dlp/api/v1/inventory/objects/aggregate List data inventory objects by table level · List Inventory Objects #
Ask an LLM
“How many public, sensitive or malware-infected objects do I have per cloud service?”
“Can I group my data inventory by cloud type, region, account or resource type?”
Tell an agent
List data inventory at table level {tableLevel} grouped by {groupBy}.
Show inventory objects at level {tableLevel} matching filters {filters}.
POST /dlp/api/v1/inventory/objects/aggregate/l4 Page through bucket objects at level 4 · List Paginated Inventory Objects at Level 4 #
Ask an LLM
“How can I quickly page through the individual objects inside a bucket?”
“Can I search objects in a bucket by name while paginating?”
Tell an agent
Get page {page} of level-4 bucket objects, {limit} per page.
Search level-4 bucket objects for {searchTerm}, page {page} with {limit} results.
POST /dlp/api/v1/inventory/object/details Get details of one inventory object · Get Inventory Object Details #
Ask an LLM
“What do we know about a single file in my data inventory?”
“Can I look up an inventory object's details by its object ID?”
Tell an agent
Show details for inventory object {objectId} in tenant {tenantId}.
Look up object {objectId} in the data inventory.
POST /dlp/api/v1/inventory/objects/aggregate/by-classification Count objects by classification, malware and exposure · Get Object Counts by Classification #
Ask an LLM
“How many of my objects are classified sensitive, contain malware, or are publicly exposed?”
“Can I get object counts broken down by data classification?”
Tell an agent
Count objects by classification, malware and exposure at table level {tableLevel}.
Break down object counts by classification for filters {filters} at level {tableLevel}.
POST /dlp/api/v1/inventory/objects/aggregate/alerts/by-classification Count object alerts by exposure, classification and severity · Get Aggregate Alert Data by Classification #
Ask an LLM
“How many data alerts do I have grouped by exposure and severity?”
“Which classifications are driving the most object alerts?”
Tell an agent
Group object alert counts by exposure, classification and severity at level {tableLevel}.
Show object alert totals for filters {filters} at table level {tableLevel}.
POST /dlp/api/v1/inventory/objects/aggregate/history Count objects created in a time window · Get Aggregate Data by History #
Ask an LLM
“How many objects were created in my data stores during a given time range?”
“Can I see how my data inventory has grown over time?”
Tell an agent
Count objects created within {timeRange} at table level {tableLevel}.
Show inventory history at level {tableLevel}.
POST /dlp/api/v1/inventory/object/malware/report/hash/{fileHash} Get the malware report for a file hash · Get Malware Report #
Ask an LLM
“What does the malware report say about a file found in my cloud storage?”
“Can I look up malware findings for an object by its file hash?”
Tell an agent
Get the malware report for hash {fileHash} on object {objectId} in tenant {tenantId}.
Show malware analysis for file hash {fileHash}, object {objectId}.
POST /dlp/api/v1/inventory/resource/details Get details of a storage bucket · Get Inventory Resource Details #
Ask an LLM
“What does Prisma Cloud know about one of my storage buckets?”
“Can I see a bucket's data security details by tenant and bucket?”
Tell an agent
Show details for bucket {objectId} in tenant {tenantId}.
Describe the storage bucket {objectId}.
POST /dlp/api/v1/inventory/resource/objects List the objects in a bucket · Get Inventory Resource Objects #
Ask an LLM
“Which files are stored in a particular bucket?”
“Can I list everything inside one of my scanned buckets?”
Tell an agent
List the objects in bucket {objectId} for tenant {tenantId}.
Show the contents of bucket {objectId}.
POST /dlp/api/v1/inventory/snippet Generate a data snippet for an object · Generate Snippet #
Ask an LLM
“How do I generate a snippet showing the sensitive content found in a file?”
“Can I request a new snippet for an object before viewing it?”
Tell an agent
Generate a snippet for object {objectId} in tenant {tenantId}.
Create a fresh data snippet for {objectId}.
GET /dlp/api/v1/inventory/snippet/objects/{objectId}/datapattern/{dataPatternId} Get a snippet for an object and data pattern · Get Snippet #
Ask an LLM
“Where can I see the matched text for a specific data pattern in a file?”
“Can I retrieve an already generated snippet for one data pattern?”
Tell an agent
Show the snippet for object {objectId} and data pattern {dataPatternId}.
Fetch what data pattern {dataPatternId} matched in object {objectId}.

Specifications

⚙
OpenAPI
https://artifacts.apis.io/palo-alto-networks/openapi/palo-alto-networks-data-security-inventory-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-data-security-inventory-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-data-security-inventory-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  contact: {}
  description: 'Access Keys are a secure way to enable programmatic access to the Prisma Cloud API. By default, only

    the System Admin has API access and can enable API access for other administrators. If you have API access,

    you can create up to two access keys. Create an access key for a limited time period and regenerate your API

    keys periodically to minimize exposure and follow security best practices.'
  title: Prisma Cloud Access Keys API Overview Data Security…
  version: Latest
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
tags:


# --- truncated at 32 KB (34 KB total) ---
# Full source: https://artifacts.apis.io/palo-alto-networks/openapi/palo-alto-networks-data-security-inventory-api-openapi.yml