Palo Alto Networks FQDN Rules API
FQDN-based access rules for ZTNA applications.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-fqdn-rules-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Palo Alto Networks FQDN Rules API
contact:
name: Palo Alto Networks Developer Support
url: https://pan.dev/
license:
name: Proprietary
url: https://www.paloaltonetworks.com/legal
version: '1.0'
description: 'Operations tagged FQDN Rules across 2 of this provider''s published API definitions: palo-alto-networks-fqdn-rules-api-openapi.yml, palo-alto-ztna-connector-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
- url: https://api.sase.paloaltonetworks.com/ztna
description: SASE ZTNA Connector API production server.
security:
- oauth2Bearer: []
tags:
- name: FQDN Rules
description: FQDN-based access rules for ZTNA applications.
paths:
/v2/fqdn-rules:
get:
operationId: listFQDNRules
summary: Palo Alto Networks List FQDN-based Access Rules
description: Returns the list of FQDN-based access rules that define which hostnames are accessible through ZTNA. FQDN rules specify the domain patterns and ports that users can reach through a connector group.
tags:
- FQDN Rules
responses:
'200':
description: FQDN rules returned.
content:
application/json:
schema:
type: object
properties:
total:
type: integer
items:
type: array
items:
$ref: '#/components/schemas/FQDNRule'
examples:
ListFqdnrules200Example:
summary: Default listFQDNRules 200 response
x-microcks-default: true
value:
total: 856
items:
- rule_id: '519537'
name: Corporate Gateway 72
fqdn_pattern: example-fqdn_pattern
group_id: '945832'
ports:
- 96
- 621
enabled: true
created_at: '2026-08-05T06:31:43Z'
- rule_id: '519537'
name: Corporate Gateway 72
fqdn_pattern: example-fqdn_pattern
group_id: '945832'
ports:
- 96
- 621
enabled: true
created_at: '2026-08-05T06:31:43Z'
'401':
description: Invalid or missing Bearer token.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
ListFqdnrules401Example:
summary: Default listFQDNRules 401 response
x-microcks-default: true
value:
error: example-error
message: Security firewall network configured traffic blocked threat.
request_id: 709c60bb-8234-4bc4-938b-d0835224c350
'403':
description: Insufficient permissions.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
ListFqdnrules403Example:
summary: Default listFQDNRules 403 response
x-microcks-default: true
value:
error: example-error
message: Security firewall network configured traffic blocked threat.
request_id: 709c60bb-8234-4bc4-938b-d0835224c350
'500':
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
ListFqdnrules500Example:
summary: Default listFQDNRules 500 response
x-microcks-default: true
value:
error: example-error
message: Security firewall network configured traffic blocked threat.
request_id: 709c60bb-8234-4bc4-938b-d0835224c350
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
post:
operationId: createFQDNRule
summary: Palo Alto Networks Create FQDN-based Access Rule
description: Creates a new FQDN-based access rule for ZTNA.
tags:
- FQDN Rules
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/FQDNRuleRequest'
examples:
CreateFqdnruleRequestExample:
summary: Default createFQDNRule request
x-microcks-default: true
value:
name: Corporate Agent 77
fqdn_pattern: example-fqdn_pattern
group_id: '533942'
ports:
- 505
enabled: true
responses:
'201':
description: FQDN rule created successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/FQDNRule'
examples:
CreateFqdnrule201Example:
summary: Default createFQDNRule 201 response
x-microcks-default: true
value:
rule_id: '519537'
name: Corporate Gateway 72
fqdn_pattern: example-fqdn_pattern
group_id: '945832'
ports:
- 96
- 621
enabled: true
created_at: '2026-08-05T06:31:43Z'
'400':
description: Invalid request body.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
CreateFqdnrule400Example:
summary: Default createFQDNRule 400 response
x-microcks-default: true
value:
error: example-error
message: Security firewall network configured traffic blocked threat.
request_id: 709c60bb-8234-4bc4-938b-d0835224c350
'401':
description: Invalid or missing Bearer token.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
CreateFqdnrule401Example:
summary: Default createFQDNRule 401 response
x-microcks-default: true
value:
error: example-error
message: Security firewall network configured traffic blocked threat.
request_id: 709c60bb-8234-4bc4-938b-d0835224c350
'403':
description: Insufficient permissions.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
CreateFqdnrule403Example:
summary: Default createFQDNRule 403 response
x-microcks-default: true
value:
error: example-error
message: Security firewall network configured traffic blocked threat.
request_id: 709c60bb-8234-4bc4-938b-d0835224c350
'500':
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
CreateFqdnrule500Example:
summary: Default createFQDNRule 500 response
x-microcks-default: true
value:
error: example-error
message: Security firewall network configured traffic blocked threat.
request_id: 709c60bb-8234-4bc4-938b-d0835224c350
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
components:
schemas:
FQDNRuleRequest:
type: object
required:
- name
- fqdn_pattern
- group_id
properties:
name:
type: string
description: Display name for the FQDN rule.
example: Corporate Agent 77
fqdn_pattern:
type: string
description: FQDN pattern or wildcard this rule matches.
example: example-fqdn_pattern
group_id:
type: string
description: Connector group to use for matching FQDNs.
example: '533942'
ports:
type: array
items:
type: integer
description: Ports covered by this rule.
example:
- 505
enabled:
type: boolean
default: true
example: true
ErrorResponse:
type: object
properties:
error:
type: string
description: Error code identifying the error type.
example: example-error
message:
type: string
description: Human-readable description of the error.
example: Security firewall network configured traffic blocked threat.
request_id:
type: string
description: Request identifier for support correlation.
example: 709c60bb-8234-4bc4-938b-d0835224c350
FQDNRule:
type: object
properties:
rule_id:
type: string
description: Unique identifier of the FQDN rule.
example: '519537'
name:
type: string
description: Display name of the rule.
example: Corporate Gateway 72
fqdn_pattern:
type: string
description: FQDN pattern or wildcard (e.g., *.internal.example.com) that this rule matches.
example: example-fqdn_pattern
group_id:
type: string
description: Connector group used to resolve and access matching FQDNs.
example: '945832'
ports:
type: array
items:
type: integer
description: Ports covered by this rule.
example:
- 96
- 621
enabled:
type: boolean
description: Whether this rule is active.
example: true
created_at:
type: string
format: date-time
example: '2026-08-05T06:31:43Z'
securitySchemes:
oauth2Bearer:
type: http
scheme: bearer
bearerFormat: JWT
description: OAuth 2.0 Bearer token for SASE platform authentication. Obtain using the client_credentials grant with your SASE service account client ID and client secret.
x-refined-from:
- palo-alto-networks-fqdn-rules-api-openapi.yml
- palo-alto-ztna-connector-api-openapi-original.yml