Palo Alto Networks

Palo Alto Networks Images API

{'$ref': 'desc/images/images.md'}

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 16

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api/v34.03/images Get image scan results (v34.03) · Get Image Scan Results #
Ask an LLM
“Where do I see container image scan results with the v34.03 API?”
“Can I filter v34.03 image results by cluster and compliance rule?”
Tell an agent
On v34.03, show image scan results for host {hostname}.
Fetch v34.03 image findings in cluster {clusters}.
GET /api/v34.03/images/download Download image scan results (v34.03) · Download Image Scan Results #
Ask an LLM
“Can I export deployed image scan results with the older v34.03 endpoint?”
“Is a file download of v34.03 image findings filterable by registry?”
Tell an agent
Download the v34.03 image scan report for registry {registry}.
Export every image scan result to a file through version 34.03.
POST /api/v34.03/images/evaluate Resolve images (v34.03) · Resolve Images #
Ask an LLM
“Can I resolve a batch of images to their scan data using v34.03?”
“Which v34.03 call evaluates a list of images I send it?”
Tell an agent
Resolve images {images} with the v34.03 evaluate endpoint.
Evaluate this set of images through API version 34.03.
GET /api/v34.03/images/names List image names (v34.03) · Get Image Names #
Ask an LLM
“What container image names has Defender seen, according to v34.03?”
“Can I retrieve only deployed image names on version 34.03?”
Tell an agent
List deployed image names in repository {repository} via v34.03.
Return just image names from the older v34.03 images API.
POST /api/v34.03/images/scan Start an image scan (v34.03) · Start Image Scan #
Ask an LLM
“Can I rescan deployed images on a host with the v34.03 API?”
“Is it possible to scan one image tag on demand in version 34.03?”
Tell an agent
Start a v34.03 image scan on host {hostname}.
Rescan image tag {imageTag} using API v34.03.
GET /api/v34.03/images/twistlock_defender_app_embedded.tar.gz Download App-Embedded Defender (v34.03) · Download App Embedded Defender #
Ask an LLM
“Where can I get the App-Embedded Defender archive from the v34.03 API?”
“Can I fetch the App-Embedded Defender tarball on version 34.03?”
Tell an agent
Download the App-Embedded Defender tar.gz via v34.03.
Grab the v34.03 App-Embedded Defender package for my container image.
POST /api/v34.03/images/twistlock_defender_layer.zip Download serverless Defender layer (v34.03) · Download Serverless Layer Bundle #
Ask an LLM
“Can I download the serverless Defender layer bundle for a runtime on v34.03?”
“Which v34.03 call gives me the Defender Lambda layer zip?”
Tell an agent
Download the v34.03 serverless Defender layer for runtime {runtime}.
Get the Defender layer zip for provider {provider} using API v34.03.
GET /api/v34.04/images Get image scan results · Get Image Scan Results #
Ask an LLM
“What vulnerabilities and compliance issues are in my deployed container images?”
“Can I see image scan results only for agentless scans or one cluster?”
Tell an agent
Show image scan results for image {name}.
List image findings with severity {normalizedSeverity} on API v34.04.
GET /api/v34.04/images/download Download image scan results · Download Image Scan Results #
Ask an LLM
“How do I download deployed image scan results as a file?”
“Can the image results download be limited to one cluster on v34.04?”
Tell an agent
Download image scan results for cluster {clusters}.
Export the latest v34.04 deployed-image scan report.
POST /api/v34.04/images/evaluate Resolve images · Resolve Images #
Ask an LLM
“Can I send a list of images and get them resolved against scan data?”
“What does the image evaluate call return for the images I pass in?”
Tell an agent
Resolve the images {images}.
Evaluate a batch of images I provide with the current v34.04 endpoint.
GET /api/v34.04/images/names List image names · Get Image Names #
Ask an LLM
“Which container image names are known from deployed workloads?”
“Can I get a lightweight list of image names filtered by host?”
Tell an agent
List image names running on host {hostname}.
Give me the deployed image names only, v34.04 API.
POST /api/v34.04/images/scan Start an image scan · Start Image Scan #
Ask an LLM
“How can I force a rescan of the images running on a host?”
“Can I trigger a scan of just one image tag?”
Tell an agent
Scan images on host {hostname} now.
Start an on-demand scan of image tag {imageTag} on v34.04.
GET /api/v34.04/images/twistlock_defender_app_embedded.tar.gz Download App-Embedded Defender · Download App Embedded Defender #
Ask an LLM
“Where do I download the App-Embedded Defender to embed in my container?”
“Is the App-Embedded Defender archive available from the current images API?”
Tell an agent
Download the App-Embedded Defender archive.
Fetch the latest App-Embedded Defender tar.gz on API version 34.04.
POST /api/v34.04/images/twistlock_defender_layer.zip Download serverless Defender layer · Download Serverless Layer Bundle #
Ask an LLM
“How do I get the Defender layer to protect my serverless functions?”
“Can I choose the runtime and Node.js module type for the serverless layer bundle?”
Tell an agent
Download the serverless Defender layer bundle for runtime {runtime}.
Build a Defender layer zip with module type {nodeJSModuleType} on v34.04.
GET /images List image vulnerability results · Palo Alto Networks List Image Scan Results #
Ask an LLM
“Which of my container images have vulnerabilities or compliance problems?”
“Can I search image scan results by a keyword or collection?”
Tell an agent
List image scan results matching {search}.
Show vulnerability results for images in collection {collections}.
GET /images/download Export image scan results as CSV · Palo Alto Networks Download Image Scan Results #
Ask an LLM
“Can I export image scan results to CSV for my vulnerability tracker?”
“Is there a CSV export of image findings I can filter by collection?”
Tell an agent
Export image scan results to CSV for collection {collections}.
Download a CSV of image findings matching {search}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-images-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-images-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-images-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Images API
  x-refined-note:
  - x-description-source differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Images across 3 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-prisma-cloud-compute-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://{console}/api/v1
  description: Prisma Cloud Compute Console API.
  variables:
    console:
      default: console.example.com
      description: Address of the Prisma Cloud Compute Console. For SaaS deployments, use the address provided in Prisma Cloud under Compute > Manage > System > Utilities.
tags:


# --- truncated at 32 KB (147 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-images-api-openapi.yml