Palo Alto Networks

Palo Alto Networks Directory Sync Service API

The Directory Sync Service API from Palo Alto Networks — 4 operation(s) for directory sync service.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET https://api.sase.paloaltonetworks.com/cie/directory-sync/v1/domains Check sync status of directory domains · Palo Alto Networks Domain Details #
Ask an LLM
“When did each of my directory domains last sync successfully?”
“How many users and groups were synced for each configured domain?”
Tell an agent
Show the sync status, last successful sync time and user and group counts for every directory domain.
Check whether any of my Directory Sync domains has stopped syncing.
POST https://api.sase.paloaltonetworks.com/cie/directory-sync/v1/cache-users Check a user's group membership · Palo Alto Networks User Information #
Ask an LLM
“Is a particular user a member of a given directory group?”
“Can I find synced directory users by their email address?”
Tell an agent
Check whether a user belongs to a specific directory group in my tenant.
Find synced directory users by email address in one of my domains.
POST https://api.sase.paloaltonetworks.com/cie/directory-sync/v1/cache-groups Check whether a group contains a user · Palo Alto Networks Group Information #
Ask an LLM
“Does a particular directory group contain a given user?”
“Which groups does one synced user belong to?”
Tell an agent
Check whether a directory group contains a particular user.
List the groups a specific synced user belongs to.
GET /cie/directory-sync/v1/domains List directory sync domains · Fetch domains from the CIE Directory Sync Service #
Ask an LLM
“Which domains are configured in the Cloud Identity Engine Directory Sync Service?”
“What domains has our tenant connected for directory sync?”
Tell an agent
List all domains configured in Directory Sync with their details.
Show me every connected directory domain.
POST /cie/directory-sync/v1/cache-users Query synced directory users · Fetch user information from the CIE Directory Sync Service across multiple… #
Ask an LLM
“How do I list every user synced from a directory domain?”
“Can I filter synced users by attribute, like a SQL WHERE clause?”
Tell an agent
List all synced users in a directory domain, page by page.
Query synced directory users with an attribute filter on name.
POST /cie/directory-sync/v1/cache-groups Query synced directory groups · Fetch group information from the CIE Directory Sync Service across multiple… #
Ask an LLM
“How do I list every group synced from a directory domain?”
“Can I filter synced groups by attribute, like a SQL WHERE clause?”
Tell an agent
List all synced groups in a directory domain, page by page.
Query synced directory groups with a name-based attribute filter.
POST /cie/directory-sync/v1/connection/update-secret Rotate a directory connection's client secret · Update directory connection client secret #
Ask an LLM
“How do I rotate the client secret on an existing directory connection?”
“What happens to directory sync when our app registration secret expires?”
Tell an agent
Update the client secret of directory connection {directoryId} for provider {provider} to {client_secret}.
Rotate the {provider} client secret on directory {directoryId} to {client_secret}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-directory-sync-service-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-directory-sync-service-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-directory-sync-service-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Directory Sync Service API
  version: 1.0.1
  description: 'Operations tagged Directory Sync Service across 2 of this provider''s published API definitions: palo-alto-cloud-identity-engine-api-openapi-original.yml, palo-alto-scm-config-ciedss-cie-dss-r2-openapi.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.sase.paloaltonetworks.com
tags:


# --- truncated at 32 KB (37 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-directory-sync-service-api-openapi.yml