Palo Alto Networks

Palo Alto Networks IP Sec Tunnels API

IPsec Tunnels

GitHub OpenAPI

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /ipsec-tunnels List Prisma Access IPSec tunnels · List IPsec tunnels #
Ask an LLM
“Which IPSec VPN tunnels connect my branches to Prisma Access?”
“Can I page through Prisma Access IPSec tunnel configurations by folder?”
Tell an agent
List Prisma Access IPSec tunnels.
Show Prisma Access IPSec tunnels in folder {folder}.
POST /ipsec-tunnels Create a Prisma Access IPSec tunnel · Create an IPsec tunnel #
Ask an LLM
“How do I add an IPSec tunnel to the Prisma Access candidate configuration?”
“What IKE gateway settings does a new Prisma Access tunnel need?”
Tell an agent
Create Prisma Access candidate IPSec tunnel {name} with auto key {auto_key}.
Add candidate-config tunnel {name} with auto key {auto_key} and tunnel monitor {tunnel_monitor}.
GET /ipsec-tunnels/{id} Get a Prisma Access IPSec tunnel · Get an IPsec tunnel #
Ask an LLM
“What is the configuration of one Prisma Access IPSec tunnel in the candidate config?”
“Can I check which IKE gateway a Prisma Access tunnel uses?”
Tell an agent
Show Prisma Access IPSec tunnel {id}.
Get the candidate configuration for Prisma Access tunnel {id}.
PUT /ipsec-tunnels/{id} Update a Prisma Access IPSec tunnel · Update an IPsec tunnel #
Ask an LLM
“How do I change a Prisma Access IPSec tunnel in the candidate configuration?”
“Can I adjust tunnel monitoring on a Prisma Access tunnel?”
Tell an agent
Update Prisma Access candidate tunnel {id} named {name} with auto key {auto_key}.
Change tunnel monitoring on Prisma Access tunnel {id} to {tunnel_monitor}.
DELETE /ipsec-tunnels/{id} Delete a Prisma Access IPSec tunnel · Delete an IPsec tunnel #
Ask an LLM
“How do I remove an IPSec tunnel from the Prisma Access candidate configuration?”
“Does deleting a Prisma Access tunnel cut the branch off before a push?”
Tell an agent destructive · confirm first
Delete Prisma Access IPSec tunnel {id} from the candidate config.
Remove candidate-config tunnel {id} from Prisma Access.
GET /sse/config/v1/ipsec-tunnels List IPSec tunnels via the SSE config API · List IPSec tunnels #
Ask an LLM
“Which IPSec tunnels exist in a folder through the SSE config v1 endpoint?”
“Can I find an SSE config IPSec tunnel by name?”
Tell an agent
List SSE config IPSec tunnels in folder {folder}.
Find the SSE IPSec tunnel named {name} in folder {folder}.
POST /sse/config/v1/ipsec-tunnels Create an IPSec tunnel via the SSE config API · Create IPSec tunnels #
Ask an LLM
“How do I create an IPSec tunnel through the SSE config v1 API?”
“Can I turn on GRE encapsulation when creating an SSE IPSec tunnel?”
Tell an agent
Create SSE config IPSec tunnel {name} in folder {folder} with auto key {auto_key}.
Add SSE IPSec tunnel {name} in folder {folder} using auto key {auto_key} and GRE encapsulation {enable_gre_encapsulation}.
DELETE /sse/config/v1/ipsec-tunnels/{id} Delete an IPSec tunnel via the SSE config API · Delete a ipsec tunnel #
Ask an LLM
“How do I delete an IPSec tunnel with the SSE config v1 endpoint?”
“What breaks if I remove an SSE config IPSec tunnel?”
Tell an agent destructive · confirm first
Delete SSE config IPSec tunnel {id}.
Remove SSE IPSec tunnel {id}.
GET /sse/config/v1/ipsec-tunnels/{id} Get an IPSec tunnel via the SSE config API · Get an IPSec tunnel #
Ask an LLM
“What is configured on a specific SSE config IPSec tunnel?”
“Can I read one SSE IPSec tunnel's IKE settings by ID and folder?”
Tell an agent
Show SSE config IPSec tunnel {id} in folder {folder}.
Fetch SSE IPSec tunnel {id} from folder {folder} and show its tunnel monitor.
PUT /sse/config/v1/ipsec-tunnels/{id} Edit an IPSec tunnel via the SSE config API · Edit a ipsec tunnel #
Ask an LLM
“How do I change the auto key settings on an SSE config IPSec tunnel?”
“Can I enable anti-replay on an existing SSE IPSec tunnel?”
Tell an agent
Update SSE config IPSec tunnel {id} named {name} with auto key {auto_key}.
Set anti-replay to {anti_replay} on SSE IPSec tunnel {id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-ip-sec-tunnels-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-ip-sec-tunnels-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-ip-sec-tunnels-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 2.0.0
  title: Network Services IPsec Tunnels API
  description: These APIs are used for defining and managing network services configuration within Strata Cloud Manager.
  termsOfService: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  contact:
    email: support@paloaltonetworks.com
    name: Palo Alto Networks Technical Support
    url: https://support.paloaltonetworks.com
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/config/network/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
security:
- scmToken: []
tags:


# --- truncated at 32 KB (36 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-ip-sec-tunnels-api-openapi.yml