Palo Alto Networks Data Stores API
Data store inventory and discovery operations.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-datastores-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Palo Alto Networks Prisma Cloud DSPM Data Stores API
description: REST API for Prisma Cloud Data Security Posture Management (DSPM) providing programmatic access to data asset discovery, risk assessment, data store inventory, data classification results, DSPM policies, and data security alerts across multi-cloud environments.
version: '1.0'
contact:
name: Palo Alto Networks Developer Support
url: https://pan.dev/
license:
name: Proprietary
url: https://www.paloaltonetworks.com/legal
servers:
- url: https://api.prismacloud.io
description: Prisma Cloud API (US region 1).
- url: https://api2.prismacloud.io
description: Prisma Cloud API (US region 2).
- url: https://api3.prismacloud.io
description: Prisma Cloud API (US region 3).
- url: https://api.eu.prismacloud.io
description: Prisma Cloud API (EU).
- url: https://api.anz.prismacloud.io
description: Prisma Cloud API (ANZ).
- url: https://api.sg.prismacloud.io
description: Prisma Cloud API (Singapore).
- url: https://api.ca.prismacloud.io
description: Prisma Cloud API (Canada).
security:
- bearerAuth: []
tags:
- name: Datastores
description: Data store inventory and discovery operations.
paths:
/dspm/api/v1/data-stores:
get:
operationId: listDataStores
summary: Palo Alto Networks List Data Stores Inventory
description: Returns a list of all cloud data stores discovered by Prisma Cloud DSPM. Includes relational databases, NoSQL databases, object storage, file shares, data warehouses, and other cloud-native data services. Supports filtering by cloud provider, region, service type, and risk level.
tags:
- Datastores
parameters:
- name: offset
in: query
description: Number of records to skip for pagination.
schema:
type: integer
default: 0
example: 0
- name: limit
in: query
description: Maximum number of records to return.
schema:
type: integer
default: 25
example: 25
- name: cloudProvider
in: query
description: Filter by cloud provider.
schema:
type: string
enum:
- aws
- azure
- gcp
example: gcp
- name: region
in: query
description: Filter by cloud region.
schema:
type: string
example: eu-west-1
- name: serviceType
in: query
description: Filter by data store service type.
schema:
type: string
enum:
- relationalDatabase
- noSqlDatabase
- objectStorage
- fileShare
- dataWarehouse
- dataLake
- cache
- messageQueue
example: objectStorage
- name: riskLevel
in: query
description: Filter by assigned risk level.
schema:
type: string
enum:
- critical
- high
- medium
- low
example: critical
- name: hasSensitiveData
in: query
description: Filter to only data stores containing classified sensitive data.
schema:
type: boolean
example: false
- name: search
in: query
description: Search term to filter by data store name or identifier.
schema:
type: string
example: example-search
- name: sortBy
in: query
description: Field to sort results by.
schema:
type: string
enum:
- name
- riskLevel
- sensitiveDataCount
- discoveredAt
example: riskLevel
- name: sortOrder
in: query
description: Sort order direction.
schema:
type: string
enum:
- asc
- desc
default: desc
example: desc
responses:
'200':
description: Data stores returned successfully.
content:
application/json:
schema:
type: object
properties:
totalCount:
type: integer
description: Total number of discovered data stores matching filters.
dataStores:
type: array
items:
$ref: '#/components/schemas/DataStore'
examples:
ListDataStores200Example:
summary: Default listDataStores 200 response
x-microcks-default: true
value:
totalCount: 423
dataStores:
- id: example-id
name: Branch Sensor 82
cloudProvider: gcp
cloudAccountId: '191154'
region: us-west-2
serviceType: fileShare
serviceName: Corporate Agent 94
encryptionEnabled: true
isPubliclyAccessible: true
riskLevel: critical
sensitiveDataCount: 866
classificationLabels:
- example-classificationLabels_item
- example-classificationLabels_item
dataAssetCount: 315
discoveredAt: '2026-05-16T02:34:09Z'
lastScannedAt: '2026-06-05T18:50:04Z'
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'500':
$ref: '#/components/responses/InternalServerError'
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
components:
responses:
Unauthorized:
description: Invalid or expired JWT token.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
InternalServerError:
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
BadRequest:
description: Invalid request parameters or body.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
Forbidden:
description: Insufficient permissions for this operation.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
schemas:
DataStore:
type: object
properties:
id:
type: string
description: Unique data store identifier in Prisma Cloud.
example: example-id
name:
type: string
description: Name of the data store as it appears in the cloud provider.
example: Branch Sensor 82
cloudProvider:
type: string
enum:
- aws
- azure
- gcp
description: Cloud provider where the data store is hosted.
example: gcp
cloudAccountId:
type: string
description: Cloud account ID that owns the data store.
example: '191154'
region:
type: string
description: Cloud region where the data store is located.
example: us-west-2
serviceType:
type: string
enum:
- relationalDatabase
- noSqlDatabase
- objectStorage
- fileShare
- dataWarehouse
- dataLake
- cache
- messageQueue
description: Category of the data store service.
example: fileShare
serviceName:
type: string
description: Specific cloud service name (e.g., Amazon S3, Amazon RDS).
example: Corporate Agent 94
encryptionEnabled:
type: boolean
description: Whether encryption at rest is enabled.
example: true
isPubliclyAccessible:
type: boolean
description: Whether the data store is accessible from the public internet.
example: true
riskLevel:
type: string
enum:
- critical
- high
- medium
- low
description: Overall risk level computed from data sensitivity and security posture.
example: critical
sensitiveDataCount:
type: integer
description: Number of sensitive data assets found in this data store.
example: 866
classificationLabels:
type: array
items:
type: string
description: Distinct classification labels found in the data store.
example:
- example-classificationLabels_item
- example-classificationLabels_item
dataAssetCount:
type: integer
description: Total number of data assets discovered in this data store.
example: 315
discoveredAt:
type: string
format: date-time
description: Timestamp when the data store was first discovered by DSPM.
example: '2026-05-16T02:34:09Z'
lastScannedAt:
type: string
format: date-time
description: Timestamp of the most recent data classification scan.
example: '2026-06-05T18:50:04Z'
ErrorResponse:
type: object
properties:
status:
type: integer
description: HTTP status code.
example: 177
message:
type: string
description: Human-readable error message.
example: Suspicious traffic configured monitoring malware endpoint applied.
error:
type: string
description: Error code.
example: example-error
securitySchemes:
bearerAuth:
type: http
scheme: bearer
bearerFormat: JWT
description: 'JWT token obtained from the Prisma Cloud /login endpoint. Valid for 10 minutes. Include as Authorization: Bearer <token> in request headers.'