Palo Alto Networks

Palo Alto Networks Data Security Onboarding API

The Data Security Onboarding API from Palo Alto Networks — 5 operation(s) for data security onboarding.

GitHub OpenAPI

Operations 6

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /config/v3/account/storageUUID/{id} Get data security account config by storage UUID · Fetch Account Config By Storage UUID #
Ask an LLM
“Which data security account config belongs to a given storage UUID?”
“Can I look up a PCDS account when I only have its storage UUID?”
Tell an agent
Fetch the account config for storage UUID {id}.
Show the data security account tied to storage {id}.
GET /config/v3/account/{id} Get data security account config by account ID · Fetch Account Config By PCDS Account ID #
Ask an LLM
“What is the onboarding config for a specific PCDS account?”
“Can I pre-initialize an account for an Azure subscription while fetching its config?”
Tell an agent
Fetch the account config for PCDS account {id}.
Get PCDS account {id} config with initialize set to {initialize} for the Azure flow.
PUT /config/v3/account/{id} Update a data security account config · Update the account config for the specified PCDS Account ID #
Ask an LLM
“Can I change the scan option for a data security onboarded account?”
“Is it possible to rename a PCDS account's config?”
Tell an agent
Update PCDS account {id} to scan option {scanOption}.
Rename data security account {id} to {accountName}.
GET /config/v3/account/{id}/status Check a data security account's permissions · Performs a Permissions Check for the Given PCDS Account #
Ask an LLM
“Is my data security account missing any cloud permissions?”
“Why is data scanning failing on an onboarded account's permissions check?”
Tell an agent
Run the permissions check for PCDS account {id}.
Show missing permissions for data security account {id}.
GET /config/v3/account/{subscriptionId}/acl-script Generate an Azure network ACL script · Generate an Azure Terraform Script #
Ask an LLM
“How can I fix network connectivity issues for data security scanning in Azure?”
“Can I get a network ACL script for my Azure subscription?”
Tell an agent
Generate the Azure network ACL script for subscription {subscriptionId}.
Get the ACL fix script for Azure subscription {subscriptionId}.
GET /config/v3/tenant/{tenantId}/{subscriptionId}/terraform-script Generate an Azure onboarding Terraform script · Generate an Azure Terraform Script #
Ask an LLM
“Where do I get a Terraform script with all permissions needed to onboard Azure for data security?”
“Can I generate onboarding Terraform for a specific tenant and subscription?”
Tell an agent
Generate the Azure Terraform script for tenant {tenantId} and subscription {subscriptionId}.
Get the permissions Terraform for Azure subscription {subscriptionId} under tenant {tenantId}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-data-security-onboarding-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-data-security-onboarding-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-data-security-onboarding-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: config-service Data Security Onboarding API
  version: 1.0.2
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:
- description: null
  name: Data Security Onboarding
paths:
  /config/v3/account/storageUUID/{id}:
    get:
      summary: Fetch Account Config By Storage UUID
      description: Returns the account config details for the specified storage UUID.
      operationId: get-account-config-by-storage-uuid
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: success
          content:
            application/json: {}
        '400':
          description: bad_request
      x-public: 'true'
      security:
      - x-redlock-auth: []
      tags:
      - Data Security Onboarding
  /config/v3/account/{id}:
    get:
      summary: Fetch Account Config By PCDS Account ID
      description: Returns the account config details for the specified PCDS Account ID. If 'initialize' parameter is set to 'true', the account will be pre-initialized for the Azure subscription. 'initialize' is only used during Azure flow.
      operationId: get-account-config-by-pcds-account-id
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      - name: initialize
        in: query
        schema:
          default: false
          type: boolean
      responses:
        '200':
          description: success
          content:
            application/json: {}
        '400':
          description: bad_request
      x-public: 'true'
      security:
      - x-redlock-auth: []
      tags:
      - Data Security Onboarding
    put:
      summary: Update the account config for the specified PCDS Account ID
      description: Updates the specified account config and returns the updated account config.
      operationId: update-pcds-account-config
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AccountConfig'
      responses:
        '200':
          description: success
          content:
            application/json: {}
        '400':
          description: bad_request
        '401':
          description: unauthenticated_access
        '403':
          description: unauthorized_access
      x-public: 'true'
      security:
      - x-redlock-auth: []
      tags:
      - Data Security Onboarding
  /config/v3/account/{id}/status:
    get:
      summary: Performs a Permissions Check for the Given PCDS Account
      description: Returns details pertaining to the rudimentary permissions check - contains details pertaining to any missing permissions.
      operationId: get-status-pcds-account
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: success
          content:
            application/json:
              schema:
                type: object
      x-public: 'true'
      security:
      - x-redlock-auth: []
      tags:
      - Data Security Onboarding
  /config/v3/account/{subscriptionId}/acl-script:
    get:
      summary: Generate an Azure Terraform Script
      description: Returns an Azure Network ACL script for the given Azure Subscription ID and PCDS Tenant ID that should fix all network connectivity issues.
      operationId: generate-network-acl-script-by-account-id
      parameters:
      - name: subscriptionId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: success
          content:
            application/octet-stream: {}
      x-public: 'true'
      security:
      - x-redlock-auth: []
      tags:
      - Data Security Onboarding
  /config/v3/tenant/{tenantId}/{subscriptionId}/terraform-script:
    get:
      summary: Generate an Azure Terraform Script
      description: Returns an Azure Terraform Script for the given Azure Subscription ID and PCDS Tenant ID that comes with all necessary permissions.
      operationId: get-azure-terraform-script
      parameters:
      - name: subscriptionId
        in: path
        required: true
        schema:
          type: string
      - name: tenantId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: success
          content:
            application/octet-stream: {}
        '400':
          description: bad_request
      x-public: 'true'
      security:
      - x-redlock-auth: []
      tags:
      - Data Security Onboarding
components:
  schemas:
    AccountScanOption:
      enum:
      - none
      - realtime
      - historical
      - full
      - custom
      type: string
    UUID:
      format: uuid
      pattern: '[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}'
      type: string
    CloudType:
      enum:
      - aws
      - gcp
      - azure
      type: string
    StorageScanStatus:
      enum:
      - initialized
      - enabled
      - disabled
      - maxcreditexceeded
      - licenseexpired
      type: string
    AccountConfig:
      type: object
      properties:
        redlockAccountId:
          format: int32
          type: integer
        accountId:
          type: string
        storageUUID:
          $ref: '#/components/schemas/UUID'
        cloudType:
          $ref: '#/components/schemas/CloudType'
        accountType:
          $ref: '#/components/schemas/AccountType'
        redlockTenantId:
          format: int64
          type: integer
        storageScanStatus:
          $ref: '#/components/schemas/StorageScanStatus'
        dssTenantId:
          type: string
        accountName:
          type: string
        scanOption:
          $ref: '#/components/schemas/AccountScanOption'
        cloudConfig:
          $ref: '#/components/schemas/CspAccessConfig'
    AccountType:
      enum:
      - regular
      - organization
      - tenant
      type: string
    CspAccessConfig:
      type: object
  securitySchemes:
    x-redlock-auth:
      description: The x-redlock-auth value is a JSON Web Token (JWT).
      in: header
      name: x-redlock-auth
      type: apiKey