Palo Alto Networks

Palo Alto Networks Integrations API

With multiple out-of-the-box integration options, you can integrate Prisma Cloud into security workflows and technologies that already exist in your organization. **Note**: For Prisma Cloud integrations with the following, see [Integrations Pull](/prisma-cloud/api/cspm/integrations-pull): * Okta * Qualys * Tenable ### Integration Configuration The model for an integration between Prisma Cloud and an external system includes an **integrationConfig** parameter which is a map of key/value pairs. The type of integration defines the content of these key/value pairs. See [Integration Configurations](/prisma-cloud/api/cspm/api-integration-config) for more information about integration API request body details, including the **integrationConfig** request parameter key/value pairs that apply to your specific integration API.

GitHub OpenAPI

Operations 14

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /integration/search Search available integration packs · Palo Alto Networks Search Integrations #
Ask an LLM
“Which integration packs are installed in my Cortex XSOAR instance?”
“Can I search installed XSOAR integration packs by name?”
Tell an agent
Search installed integration packs for {query}.
List installed XSOAR integration packs, page {page}.
POST /settings/integration/search Search configured integration instances · Palo Alto Networks Search Integration Instances #
Ask an LLM
“What configured integration instances are connected in XSOAR?”
“Can I find the configured instances of one integration by name?”
Tell an agent
Find configured integration instances matching {query}.
List configured XSOAR integration instances.
GET /api/v1/tenant/{prismaId}/integration/channels List supported integration types · Get Supported Integration Types #
Ask an LLM
“What kinds of external integrations does Prisma Cloud support for my tenant?”
“Which integration channels can I set up?”
Tell an agent
List supported integration types for tenant {prismaId}.
Show the integration channels available to Prisma ID {prismaId}.
GET /api/v1/tenant/{prismaId}/integration List a tenant's integrations · List Integrations #
Ask an LLM
“Which integrations are configured on my Prisma Cloud tenant?”
“Can I list only the enabled integrations of a particular type?”
Tell an agent
List integrations for tenant {prismaId}.
List enabled {type} integrations for tenant {prismaId}.
POST /api/v1/tenant/{prismaId}/integration Add an integration · Add Integration #
Ask an LLM
“How do I connect Prisma Cloud to an external system like a ticketing or messaging tool?”
“What configuration is required to add a new integration?”
Tell an agent
Add a {integrationType} integration named {name} to tenant {prismaId} with config {integrationConfig}.
Create integration {name} of type {integrationType} on tenant {prismaId} using {integrationConfig}.
GET /api/v1/tenant/{prismaId}/integration/{id} Get an integration by ID · Get Integration by ID #
Ask an LLM
“What is the configuration of a specific integration on my tenant?”
“Can I look up one integration's details by its ID?”
Tell an agent
Get integration {id} on tenant {prismaId}.
Show the configuration of integration {id} for Prisma ID {prismaId}.
PATCH /api/v1/tenant/{prismaId}/integration/{id} Enable or disable an integration · Update Integration State #
Ask an LLM
“Can I temporarily turn off an integration without deleting it?”
“How do I re-enable a disabled integration?”
Tell an agent
Set integration {id} on tenant {prismaId} to enabled {enabled}.
Disable integration {id} for tenant {prismaId}.
PUT /api/v1/tenant/{prismaId}/integration/{id} Update an integration's configuration · Update Integration #
Ask an LLM
“Can I change the name or configuration of an existing integration?”
“What fields must I resend when editing an integration's settings?”
Tell an agent
Update integration {id} on tenant {prismaId}: name {name}, config {integrationConfig}.
Rename integration {id} on tenant {prismaId} to {name} keeping config {integrationConfig}.
DELETE /api/v1/tenant/{prismaId}/integration/{id} Delete an integration · Delete Integration #
Ask an LLM
“How do I remove an integration I no longer use from my tenant?”
“Is deleting an integration permanent?”
Tell an agent destructive · confirm first
Delete integration {id} from tenant {prismaId}.
Remove the integration {id} on Prisma ID {prismaId}.
POST /api/v1/tenant/{prismaId}/integration/test Test an integration configuration · Test Integration #
Ask an LLM
“Can I verify an integration's settings work before saving it?”
“Does the test call check connectivity to the external system?”
Tell an agent
Test a {integrationType} integration named {name} on tenant {prismaId} with {integrationConfig}.
Run a connectivity test for integration {name} ({integrationType}) on tenant {prismaId} using {integrationConfig}.
GET /api/v1/tenant/{prismaId}/integration/securityhub/regions/{accountId} List Security Hub regions for an AWS account · Get Security Hub Enabled Regions by AWS Account ID #
Ask an LLM
“In which AWS regions is Security Hub enabled for one of my accounts?”
“Can I check Security Hub region coverage for a single AWS account ID?”
Tell an agent
List Security Hub enabled regions for AWS account {accountId} on tenant {prismaId}.
Show where Security Hub is on for account {accountId} under Prisma ID {prismaId}.
GET /api/v1/tenant/{prismaId}/integration/securityhub/accounts List AWS accounts with Security Hub enabled · Get Security Hub Enabled AWS Accounts #
Ask an LLM
“Which of my AWS accounts have Security Hub turned on?”
“What AWS account names and IDs are available for a Security Hub integration?”
Tell an agent
List Security Hub enabled AWS accounts for tenant {prismaId}.
Show AWS accounts with Security Hub for Prisma ID {prismaId}.
GET /v1/jira-integrations List Jira integrations for posture failures · Palo Alto Networks List Jira Integrations #
Ask an LLM
“Which Jira projects receive tickets when SSPM posture checks fail?”
“What severity mapping do my Jira ticketing integrations use?”
Tell an agent
List my Jira integrations for posture check failures.
Show the configured Jira ticketing integrations and their projects.
POST /v1/jira-integrations Create a Jira integration for posture failures · Palo Alto Networks Create Jira Integration #
Ask an LLM
“How do I automatically open Jira tickets when a SaaS posture check fails?”
“Can I map check severities to Jira issue types?”
Tell an agent
Create Jira integration {name} for {jira_url} project {project_key} as {email} with token {api_token}.
Connect Jira at {jira_url} to project {project_key} with issue type {issue_type}, name {name}, user {email}, token {api_token}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-integrations-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-integrations-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-integrations-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Integrations API
  version: '1.0'
  description: 'Operations tagged Integrations across 4 of this provider''s published API definitions: palo-alto-cortex-xsoar-api-openapi-original.yml, palo-alto-cspm-consolidated-spec-cspm-spec-openapi.json, palo-alto-networks-integrations-api-openapi.yml, palo-alto-sspm-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://{xsoar-server}
  description: Cortex XSOAR server endpoint.
  variables:
    xsoar-server:
      description: Hostname or IP address of the Cortex XSOAR server.
      default: xsoar.example.com
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
  description: AIOps for NGFW BPA API production server.
- url: https://api.sase.paloaltonetworks.com/sspm
  description: SASE SSPM API production server.
tags:


# --- truncated at 32 KB (47 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-integrations-api-openapi.yml