Palo Alto Networks

Palo Alto Networks Discovery and Exposure Management API

Discovery and Exposure Management(CDEM) APIs help you in identifying unmanaged or exposed assets that must be secured. You can use the APIs in this section to fetch the details that are displayed in the Discovery and Exposure Management(CDEM) dashboard. For more information about Discovery and Exposure Management(CDEM) dashboard, see [Discovery and Exposure Management(CDEM) dashboard](https://docs.prismacloud.io/en/enterprise-edition/content-collections/dashboards/dashboards-discovery-exposure-management)

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 26

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /asm/api/v1/convert-cloud-account Onboard unmanaged cloud accounts to CSPM · Onboard Cloud Accounts #
Ask an LLM
“How do I bring cloud accounts found by exposure discovery under CSPM protection?”
“Can I convert several unmanaged cloud accounts to managed ones in one request?”
Tell an agent
Onboard cloud accounts {cloudAccounts} to CSPM so their unmanaged assets get secured.
Convert the unmanaged cloud accounts from the exposure dashboard into CSPM-managed accounts.
POST /asm/api/v1/asset List discovered assets with filters · Get Assets List #
Ask an LLM
“Which internet-exposed assets were discovered in my AWS and Azure clouds?”
“Can I filter the discovered asset inventory by managed versus unmanaged and service type?”
Tell an agent
List discovered assets of cloud type {cloudTypes} and asset type {assetTypes}.
Search the asset inventory for {searchText} as of snapshot {snapshotDate}.
POST /asm/api/v1/asset/{asset_id}/finding Get security findings for an asset · Get Findings of an Asset #
Ask an LLM
“What security findings and vulnerabilities were discovered on a specific asset?”
“Can I narrow an asset's findings to only critical and high severities?”
Tell an agent
Show the security findings for asset {asset_id}.
List findings on asset {asset_id} with severity {severities}.
POST /asm/api/v1/asset/{asset_id}/finding/filters Get the filter values for an asset's findings · Get Asset Findings Filter #
Ask an LLM
“Which finding types and severities can I filter on for a particular asset?”
“What filter values are available before I pull an asset's findings?”
Tell an agent
Get the available finding filters and their values for asset {asset_id}.
Show which finding filter options exist for asset {asset_id} on snapshot {snapshotDate}.
POST /asm/api/v1/asset/snooze Snooze notifications for unmanaged assets · Snooze Unmanaged Assets #
Ask an LLM
“How do I silence alerts from unmanaged internet-exposed assets for a while?”
“Can I snooze every asset matching a regex pattern permanently?”
Tell an agent
Snooze notifications for unmanaged assets {assets} because {reason}.
Snooze all unmanaged assets matching regex {regex} for time range {snoozeTimeRange}.
POST /asm/api/v1/asset/reopen Unsnooze snoozed unmanaged assets · Unsnooze Unmanaged Assets #
Ask an LLM
“How do I turn notifications back on for assets I previously snoozed?”
“Can I reopen snoozed assets that match a regex pattern?”
Tell an agent
Unsnooze the snoozed assets {assets}.
Reopen every snoozed asset matching regex {regex}.
POST /asm/api/v1/asset/email Email asset details to colleagues · Email Asset Details #
Ask an LLM
“Can I email the details of an exposed asset to my team?”
“How do I share an unmanaged asset's details by email with a comment?”
Tell an agent
Email the details of asset {asmAssetId} to {userEmailIds}.
Send asset {name} details to {userEmailIds} with the note {comment}.
POST /asm/api/v1/asset/download Download a filtered list of unmanaged assets · Download Unmanaged Assets #
Ask an LLM
“Can I export the list of unmanaged assets to a file?”
“How do I download only the unmanaged assets from one cloud provider?”
Tell an agent
Download the unmanaged asset list for cloud type {cloudTypes}.
Export unmanaged assets of service type {serviceTypes} as of {snapshotDate}.
POST /asm/api/v1/asset/aggregation-by-resource-type Count assets grouped by asset type · Get Aggregated Asset Count by Asset Type #
Ask an LLM
“How many discovered assets do I have of each asset type?”
“What is the breakdown of asset counts per resource type for one cloud?”
Tell an agent
Count assets by asset type for cloud type {cloudTypes}.
Give me the per-asset-type asset totals for manage type {manageType}.
POST /asm/api/v1/asset/aggregation-by-cloud-type Count assets grouped by cloud provider · Get Aggregated Asset Count by Cloud Type #
Ask an LLM
“How many discovered assets sit in each cloud service provider?”
“Which cloud provider holds the most unmanaged assets?”
Tell an agent
Count assets per cloud provider for snapshot {snapshotDate}.
Break down asset totals by cloud provider for manage type {manageType}.
GET /asm/api/v1/service List discovered exposed services · Get Services #
Ask an LLM
“What exposed services has attack surface discovery found across my environment?”
“Can I list discovered services as of a past snapshot date?”
Tell an agent
List all discovered services.
List discovered services for snapshot date {snapshot_date}.
GET /asm/api/v1/service/{serviceId} Get details of a discovered service · Get Service Details #
Ask an LLM
“What are the details of one specific discovered service?”
“Can I get the full detail record for a service by its id?”
Tell an agent
Show details for service {serviceId}.
Get service {serviceId} as it looked on {snapshot_date}.
GET /asm/api/v1/industry-benchmarks Get industry benchmark data · Get Industry Benchmark Data #
Ask an LLM
“How does my exposure compare against industry benchmark data?”
“What industry benchmarks does Palo Alto Networks use to judge vulnerability risk?”
Tell an agent
Fetch the industry benchmark data for exposure risk.
Show me the industry benchmarks used to score security risks.
GET /asm/api/v1/dashboard/convertible-accounts List cloud accounts that can be onboarded to CSPM · Get Convertible Accounts #
Ask an LLM
“Which cloud accounts are not yet managed by CSPM but could be onboarded?”
“Can I filter convertible cloud accounts by country?”
Tell an agent
List cloud accounts eligible for CSPM onboarding.
Show convertible cloud accounts in country {country_code} with alert category {alert_categories}.
GET /asm/api/v1/dashboard/asset List unmanaged assets that can be onboarded · Get Convertible Assets #
Ask an LLM
“Which unmanaged assets could I bring under CSPM management?”
“What convertible assets belong to one particular cloud account?”
Tell an agent
List convertible unmanaged assets in cloud account {cloud_account_id}.
Show onboardable assets located in country {country_code}.
GET /asm/api/v1/dashboard/asset/trend Get the 90-day managed versus unmanaged asset trend · Get Asset Trend #
Ask an LLM
“How have my managed, unmanaged and remediated asset counts trended over 90 days?”
“Is the number of unmanaged assets going down over the last quarter?”
Tell an agent
Show the 90-day asset trend ending at {timestamp}.
Chart managed versus remediated assets over the last 90 days from {timestamp}.
GET /asm/api/v1/dashboard/asset/top-risk Get the top risks across assets · Get Asset Top Risks #
Ask an LLM
“What are the biggest risks across my discovered assets right now?”
“Which asset risks rank highest on the exposure dashboard?”
Tell an agent
List the top asset risks.
Show me the highest-ranked risks from the asset dashboard.
GET /asm/api/v1/dashboard/asset/internet-exposure-risk Get internet exposure risk by asset type · Get Internet Exposure Risk Distribution #
Ask an LLM
“How is internet exposure risk distributed across asset types in the last day?”
“Which asset types carried the most internet exposure risk over the past 24 hours?”
Tell an agent
Show the internet exposure risk distribution per asset type for the last 24 hours.
Get today's internet exposure risk statistics for every asset type.
GET /asm/api/v1/dashboard/asset/geolocation Count assets by geographic location · Get Assets Count Across Location #
Ask an LLM
“Where in the world are my discovered assets located?”
“How many assets do I have in each geographic location?”
Tell an agent
Count my assets by geolocation.
Show the asset distribution across locations on a map.
GET /asm/api/v1/dashboard/asset/count Count assets that can be onboarded · Get Convertible Assets Count #
Ask an LLM
“How many unmanaged assets are convertible to CSPM in total?”
“What is the total number of onboardable assets?”
Tell an agent
Get the total count of convertible assets.
Tell me how many assets are ready to onboard to CSPM.
GET /asm/api/v1/asset/{asset_id}/vulnerability List vulnerabilities in an asset · Get Vulnerabilities in an Asset by ID #
Ask an LLM
“What vulnerabilities exist in one asset on a given snapshot date?”
“Can I see the CVEs behind the top risks widget for an unmanaged asset?”
Tell an agent
List vulnerabilities in asset {asset_id} on {snapshot_date}.
Show vulnerabilities for {manage_type} asset {asset_id} as of {snapshot_date}.
GET /asm/api/v1/asset/{assetId}/flowlog-relationships Get traffic flows between unmanaged and managed assets · Get Flow Logs of Unmanaged Assets #
Ask an LLM
“Is an internet-exposed unmanaged asset talking to any of my secured assets?”
“Can I see flow log traffic between an unmanaged asset and managed ones?”
Tell an agent
Show flow log relationships for unmanaged asset {assetId}.
Get traffic flows for asset {assetId} on {snapshot_date}.
GET /asm/api/v1/asset/{asmAssetId}/service List services running on an asset · Get List of Service for an Asset #
Ask an LLM
“Which services are linked to a specific discovered asset?”
“What exposed services does one asset run on a given snapshot?”
Tell an agent
List services for asset {asmAssetId} on {snapshot_date}.
Show what services asset {asmAssetId} exposed as of {snapshot_date}.
GET /asm/api/v1/asset/vulnerability Find distros and packages affected by a CVE · Get Impacted Distros for a Vulnerability #
Ask an LLM
“Which Linux distributions and packages are impacted by a given CVE?”
“Can I look up affected distros for a vulnerability by its CVE ID?”
Tell an agent
List distros and packages impacted by {cve_id}.
Look up which distributions are affected by vulnerability {cve_id}.
GET /asm/api/v1/asset/snoozed-regex List regex patterns used to snooze assets · Get Snooze Regex Pattern #
Ask an LLM
“What regex patterns are currently being used to snooze assets?”
“Which snooze patterns did we set up for unmanaged assets?”
Tell an agent
List the regex patterns used for snoozing assets.
Show all asset snooze regex patterns.
GET /asm/api/v1/asset/filters List supported asset filters and values · Get Asset Filters #
Ask an LLM
“Which filters and values can I use when querying the asset inventory?”
“What cloud types and asset types are valid asset filter values?”
Tell an agent
List the supported asset filters and their values.
Show the filter options I can pass to the asset list endpoints.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-discovery-and-exposure-management-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-discovery-and-exposure-management-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-discovery-and-exposure-management-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: OpenAPI definition Discovery and Exposure Management API
  version: v0
  description: 'Discovery and Exposure Management(CDEM) APIs help you in identifying unmanaged or exposed assets that must be secured. You can use the APIs in this section to fetch the details that are displayed in the Discovery and Exposure Management(CDEM) dashboard.

    For more information about Discovery and Exposure Management(CDEM) dashboard, see Discovery and Exposure Management(CDEM) dashboard'
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:


# --- truncated at 32 KB (55 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-discovery-and-exposure-management-api-openapi.yml