Palo Alto Networks Fixes API
Automated fix suggestions for pull requests.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-fixes-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Palo Alto Networks Fixes API
version: '1.0'
contact:
name: Palo Alto Networks Developer Support
url: https://pan.dev/
license:
name: Proprietary
url: https://www.paloaltonetworks.com/legal
description: 'Operations tagged Fixes across 2 of this provider''s published API definitions: palo-alto-networks-fixes-api-openapi.yml, palo-alto-prisma-cloud-code-security-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
- url: https://api.prismacloud.io/code/api/v1
description: Prisma Cloud Code Security API (US region 1).
- url: https://api2.prismacloud.io/code/api/v1
description: Prisma Cloud Code Security API (US region 2).
- url: https://api.eu.prismacloud.io/code/api/v1
description: Prisma Cloud Code Security API (EU).
- url: https://api.anz.prismacloud.io/code/api/v1
description: Prisma Cloud Code Security API (ANZ).
- url: https://api.sg.prismacloud.io/code/api/v1
description: Prisma Cloud Code Security API (Singapore).
- url: https://api.ca.prismacloud.io/code/api/v1
description: Prisma Cloud Code Security API (Canada).
tags:
- name: Fixes
description: Automated fix suggestions for pull requests.
paths:
/fixes/pull_request:
get:
operationId: getFixSuggestionsForPR
summary: Palo Alto Networks Get Fix Suggestions for Pull Requests
description: Returns automated fix suggestions for misconfigurations detected in a pull request or branch. Each fix includes the original code snippet, the suggested replacement, and the policy that triggered the finding. Fix suggestions are available for IaC files including Terraform, CloudFormation, and Kubernetes manifests.
tags:
- Fixes
parameters:
- name: repositoryId
in: query
required: true
description: Repository identifier to retrieve fix suggestions for.
schema:
type: string
example: '432434'
- name: branch
in: query
description: Branch or pull request branch to retrieve fix suggestions for.
schema:
type: string
example: example-branch
- name: filePath
in: query
description: Filter fix suggestions by specific file path.
schema:
type: string
example: /api/v1/81ae7f
- name: offset
in: query
description: Number of records to skip for pagination.
schema:
type: integer
default: 0
example: 0
- name: limit
in: query
description: Maximum number of records to return.
schema:
type: integer
default: 25
example: 25
responses:
'200':
description: Fix suggestions returned successfully.
content:
application/json:
schema:
type: object
properties:
totalCount:
type: integer
description: Total number of available fix suggestions.
fixes:
type: array
items:
$ref: '#/components/schemas/Fix'
examples:
GetFixSuggestionsForPr200Example:
summary: Default getFixSuggestionsForPR 200 response
x-microcks-default: true
value:
totalCount: 786
fixes:
- fixId: '465958'
policyId: '290769'
policyName: Primary Policy 52
severity: INFO
resourceName: Staging Sensor 42
filePath: /api/v1/69ba75
lineRange:
- 799
- 127
originalCode: example-originalCode
suggestedCode: example-suggestedCode
framework: ARM
repositoryId: '212627'
branch: example-branch
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'500':
$ref: '#/components/responses/InternalServerError'
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
security:
- oauth2Bearer: []
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
components:
responses:
Forbidden:
description: Insufficient permissions for this operation.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
InternalServerError:
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
BadRequest:
description: Invalid request parameters or body.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
Unauthorized:
description: Invalid or expired authentication token.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
schemas:
ErrorResponse:
type: object
properties:
status:
type: integer
description: HTTP status code.
example: 602
message:
type: string
description: Human-readable error message.
example: Traffic activity investigation malware violation policy Security monitoring.
error:
type: string
description: Error code.
example: example-error
Fix:
type: object
properties:
fixId:
type: string
description: Unique fix suggestion identifier.
example: '465958'
policyId:
type: string
description: Checkov policy ID associated with the fix.
example: '290769'
policyName:
type: string
description: Human-readable policy name.
example: Primary Policy 52
severity:
type: string
enum:
- CRITICAL
- HIGH
- MEDIUM
- LOW
- INFO
description: Severity of the original finding.
example: INFO
resourceName:
type: string
description: IaC resource name where the fix applies.
example: Staging Sensor 42
filePath:
type: string
description: Relative path to the file requiring the fix.
example: /api/v1/69ba75
lineRange:
type: array
items:
type: integer
minItems: 2
maxItems: 2
description: Start and end line numbers of the code to be replaced.
example:
- 799
- 127
originalCode:
type: string
description: Original code snippet that contains the misconfiguration.
example: example-originalCode
suggestedCode:
type: string
description: Suggested replacement code that resolves the misconfiguration.
example: example-suggestedCode
framework:
type: string
enum:
- Terraform
- CloudFormation
- Kubernetes
- Helm
- Dockerfile
- ARM
- Bicep
description: IaC framework of the affected file.
example: ARM
repositoryId:
type: string
description: Repository where the fix applies.
example: '212627'
branch:
type: string
description: Branch where the fix applies.
example: example-branch
securitySchemes:
oauth2Bearer:
type: http
scheme: bearer
bearerFormat: JWT
description: OAuth 2.0 Bearer token for SASE platform authentication. Obtain using the client_credentials grant with your SASE service account client ID and client secret.
redlockAuth:
type: apiKey
in: header
name: x-redlock-auth
description: JWT token obtained from the Prisma Cloud /login endpoint. Pass the token value in the x-redlock-auth header. Tokens are valid for 10 minutes.
x-refined-from:
- palo-alto-networks-fixes-api-openapi.yml
- palo-alto-prisma-cloud-code-security-api-openapi-original.yml