Palo Alto Networks

Palo Alto Networks Decryption Rules API

Decryption Rules

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 12

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /decryption-rules List decryption rules · List decryption rules #
Ask an LLM
“Which SSL decryption rules are in my pre or post rulebase?”
“Can I list decryption rules for just one folder or snippet?”
Tell an agent
List {position} decryption rules in folder {folder}.
Find the {position} decryption rule named {name}.
POST /decryption-rules Create a decryption rule · Create a decryption rule #
Ask an LLM
“How do I add a rule to decrypt traffic between two zones?”
“What fields are required when creating a decryption rule?”
Tell an agent
Create a {position} decryption rule {name} with action {action} from zone {from} to zone {to}.
Add decryption rule {name} for sources {source} to destinations {destination} in URL category {category}.
GET /decryption-rules/{id} Get a decryption rule · Get a decryption rule #
Ask an LLM
“What does a specific decryption rule match and do?”
“Can I fetch one decryption rule by its ID?”
Tell an agent
Show decryption rule {id}.
Get the settings of decryption rule {id}.
PUT /decryption-rules/{id} Update a decryption rule · Update a decryption rule #
Ask an LLM
“Can I change the action or zones on an existing decryption rule?”
“Is there a way to disable a decryption rule without deleting it?”
Tell an agent
Change decryption rule {id} action to {action}.
Set disabled={disabled} on decryption rule {id}.
DELETE /decryption-rules/{id} Delete a decryption rule · Delete a decryption rule #
Ask an LLM
“How do I remove a decryption rule?”
“Does deleting a decryption rule take it out of the rulebase immediately?”
Tell an agent destructive · confirm first
Delete decryption rule {id}.
Remove the obsolete decryption rule {id}.
POST /decryption-rules/{id}:move Reorder a decryption rule · Move a decryption rule #
Ask an LLM
“Can I move a decryption rule above or below another rule?”
“How do I change the evaluation order of decryption rules?”
Tell an agent
Move decryption rule {id} to {destination} in the {rulebase} rulebase.
Place decryption rule {id} {destination} rule {destination_rule} in {rulebase}.
GET /sse/config/v1/decryption-rules List decryption rules · List decryption rules #
Ask an LLM
“Which SSL decryption rules are configured in a Prisma Access folder?”
“Can I list only the pre-rulebase decryption rules?”
Tell an agent
List {position} decryption rules in folder {folder} through the SSE config v1 path.
Find decryption rules named {name} in folder {folder} at position {position}.
POST /sse/config/v1/decryption-rules Create a decryption rule · Create a decryption rule #
Ask an LLM
“How do I add a rule that decrypts traffic for certain URL categories?”
“Can I create a no-decrypt rule for specific users and destinations?”
Tell an agent
Create decryption rule {name} with action {action} for categories {category} in folder {folder} at {position}.
Add a {action} decryption rule {name} from users {source_user} to {destination} in {folder} ({position}).
DELETE /sse/config/v1/decryption-rules/{id} Delete a decryption rule · Delete a decryption rule #
Ask an LLM
“How do I remove a decryption rule from my policy?”
“Is a deleted decryption rule gone for good?”
Tell an agent destructive · confirm first
Delete decryption rule {id} using the SSE config v1 endpoint.
Remove the decryption rule with ID {id}.
GET /sse/config/v1/decryption-rules/{id} Get a decryption rule · Get a decryption rule by ID #
Ask an LLM
“What does a specific decryption rule match and what action does it take?”
“Can I look up one decryption rule by its ID?”
Tell an agent
Get decryption rule {id}.
Show the sources, destinations and action of decryption rule {id}.
PUT /sse/config/v1/decryption-rules/{id} Edit a decryption rule · Edit a decryption rule #
Ask an LLM
“Can I change the action or categories on an existing decryption rule?”
“How do I disable a decryption rule without deleting it?”
Tell an agent
Edit decryption rule {id} ({name}) via the SSE config v1 path, setting its action to {action}.
Update decryption rule {id} to cover categories {category} for users {source_user}.
POST /sse/config/v1/decryption-rules/{id}:move Reorder a decryption rule · Move a decryption rule #
Ask an LLM
“Can I move a decryption rule to the top of the rulebase?”
“How do I place one decryption rule before another?”
Tell an agent
Move decryption rule {id} to the {destination} of the {rulebase} rulebase in folder {folder}.
Place decryption rule {id} {destination} rule {destination_rule} in {rulebase} for folder {folder}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-decryption-rules-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-decryption-rules-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-decryption-rules-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 2.0.0
  title: Security Services Decryption Rules API
  description: These APIs are used for defining and managing security services configurations within Strata Cloud Manager.
  termsOfService: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  contact:
    email: support@paloaltonetworks.com
    name: Palo Alto Networks Technical Support
    url: https://support.paloaltonetworks.com
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/config/security/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
security:
- scmToken: []
tags:


# --- truncated at 32 KB (32 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-decryption-rules-api-openapi.yml