# Palo Alto Networks Login API

**Canonical:** https://apis.io/apis/palo-alto-networks/palo-alto-networks-login-api/  
**Provider:** Palo Alto Networks — https://apis.io/providers/palo-alto-networks/  
**Base URL:** https://{firewall}/api/  
**Documentation:** https://pan.dev/panos/docs/xmlapi/

Palo Alto Networks Login API is one of 741 APIs that [Palo Alto Networks](https://apis.io/providers/palo-alto-networks/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Login. The published artifact set on APIs.io includes an OpenAPI specification.

For secure access to the Prisma Cloud REST API, you need a Prisma Cloud API access key. An access key includes an Access Key ID and a Secret Key. After you use Prisma Cloud to generate an access key, you can use the key to obtain a JSON Web Token (JWT), which is required to authenticate Prisma Cloud REST API requests. The following steps summarize the API requests necessary to authenticate all other Prisma Cloud API requests. 1. Use the POST /login request to obtain a JWT. 2. Authenticate further REST API requests by submitting the JWT in an HTTP header parameter. The following shows the HTTP header parameter key. HTTP Request Header Parameter | Value ------------------------------| --------- x-redlock-auth | Your JWT from POST /login response 3. Refresh the JWT when necessary. The JWT is valid for 10 minutes, and you must refresh the token for continued access to the Prisma Cloud API. An expired JWT request causes an HTTP 401 (Unauthorized) response. You can use the GET /auth_token/extend request to obtain a refreshed JWT.

## Machine-readable artifacts (1)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-login-api-openapi.yml

## Other Palo Alto Networks APIs (12)

- [PAN-OS XML API](https://apis.io/apis/palo-alto-networks/pan-os-xml-api/)
- [PAN-OS OpenConfig API](https://apis.io/apis/palo-alto-networks/openconfig-api/)
- [Panorama API](https://apis.io/apis/palo-alto-networks/panorama-api/)
- [AutoFocus API (Deprecated)](https://apis.io/apis/palo-alto-networks/autofocus-api/)
- [Prisma SASE Service Status API](https://apis.io/apis/palo-alto-networks/prisma-sase-service-status-api/)
- [Cross-Platform Service Status API](https://apis.io/apis/palo-alto-networks/cross-platform-service-status-api/)
- [SASE Authentication Service API](https://apis.io/apis/palo-alto-networks/sase-authentication-service-api/)
- [Expedition API (Deprecated)](https://apis.io/apis/palo-alto-networks/expedition-api/)
- [VM-Series Licensing API](https://apis.io/apis/palo-alto-networks/vm-series-licensing-api/)
- [Palo Alto Networks 5G Deregistered Trend API](https://apis.io/apis/palo-alto-networks/palo-alto-networks-5g-deregistered-trend-api/)
- [Palo Alto Networks 5G Network Interconnects and Bandwidth API](https://apis.io/apis/palo-alto-networks/palo-alto-networks-5g-network-interconnects-and-bandwidth-api/)
- [Palo Alto Networks 5G Registered Trend API](https://apis.io/apis/palo-alto-networks/palo-alto-networks-5g-registered-trend-api/)

## Tags

Login

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/palo-alto-networks/palo-alto-networks-login-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/palo-alto-networks/.
