Palo Alto Networks

Palo Alto Networks Device Operations API

Operations for device management and troubleshooting

GitHub OpenAPI
Business capability
IT Operations Management BC-600.40

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /local-config/versions List local config versions for a device · List local configuration versions for a device #
Ask an LLM
“How can I see the history of local configurations pushed to a firewall?”
“Which local config version is currently on a device?”
Tell an agent
List local configuration versions for device {device}.
Show the local config version history of {device}.
GET /local-config/download Download a device’s local config file · Download local configuration file #
Ask an LLM
“Can I download the actual XML config file that was pushed to a device?”
“Where do I grab a backup of a specific local config version?”
Tell an agent
Download local config version {version} for device {device}.
Get the XML of local config {version} from {device} for backup.
POST /jobs/route-table Start a job to fetch device route tables · Initiate a job to retrieve route table from device(s) #
Ask an LLM
“Can I pull the route table from several firewalls at once?”
“Is the advanced route table available as well as the regular one?”
Tell an agent
Start a job to retrieve the route table from devices {devices}.
Fetch the advanced route table from {devices}.
POST /jobs/dns-proxy Start a job to fetch the DNS proxy table · Initiate a job to retrieve the dns proxy table from device(s) #
Ask an LLM
“How do I see the DNS proxy table on my firewalls?”
“Can I retrieve DNS proxy entries from multiple devices in one job?”
Tell an agent
Start a job to retrieve the DNS proxy table from {devices}.
Get DNS proxy entries from devices {devices}.
POST /jobs/fib-table Start a job to fetch the FIB table · Initiate a job to retrieve FIB table from device(s) #
Ask an LLM
“Can I retrieve the forwarding information base from a firewall?”
“What's the way to get FIB entries from several devices?”
Tell an agent
Start a job to retrieve the FIB table from {devices}.
Pull the forwarding information base from devices {devices}.
POST /jobs/logging-service-forwarding-status Check log forwarding status on devices · Initiate a job to request logging service forwarding status for device(s) #
Ask an LLM
“Are my firewalls successfully forwarding logs to the logging service?”
“Can I check logging service forwarding status across devices?”
Tell an agent
Start a job to check logging service forwarding status on {devices}.
Check whether {devices} are forwarding logs to the logging service.
POST /jobs/device-interfaces Start a job to fetch device interfaces · Initiate a job to retrieve network interfaces from device(s) #
Ask an LLM
“How can I list the network interfaces on a firewall remotely?”
“Can I get interface details from more than one device at a time?”
Tell an agent
Start a job to retrieve network interfaces from {devices}.
Get the interface list from devices {devices}.
POST /jobs/device-rules Start a job to fetch rules from devices · Initiate a job to retrieve rules on one or more device(s) #
Ask an LLM
“Can I retrieve the rules actually running on a device?”
“What rules are loaded on one or more of my firewalls?”
Tell an agent
Start a job to retrieve the rules on {devices}.
Pull the device rules from {devices}.
POST /jobs/bgp-policy-export Start a BGP policy export job on devices · Initiate a job for BGP Policy Export from device(s) #
Ask an LLM
“Can I export BGP policy from my firewalls?”
“Which endpoint gives me a BGP policy export from multiple devices?”
Tell an agent
Start a BGP policy export job on {devices}.
Export BGP policy from devices {devices}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-device-operations-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-device-operations-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-device-operations-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 2.0.0
  title: Operations and Troubleshooting Device Operations API
  description: These APIs can be used to retrieve operational data on your devices, for management and troubleshooting purposes.
  termsOfService: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  contact:
    email: support@paloaltonetworks.com
    name: Palo Alto Networks Technical Support
    url: https://support.paloaltonetworks.com
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/operations/v1
  description: Current
security:
- scmToken: []
tags:


# --- truncated at 32 KB (41 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-device-operations-api-openapi.yml