Palo Alto Networks Path Rules API
Path policy rule management for controlling traffic steering decisions across available WAN links.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-pathrules-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Palo Alto Networks Path Rules API
version: '1.0'
contact:
name: Palo Alto Networks Developer Support
url: https://pan.dev/
license:
name: Proprietary
url: https://www.paloaltonetworks.com/legal
description: 'Operations tagged PathRules across 2 of this provider''s published API definitions: palo-alto-networks-pathrules-api-openapi.yml, palo-alto-prisma-sd-wan-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
- url: https://api.sase.paloaltonetworks.com
description: Prisma SD-WAN unified SASE API server.
- url: https://api.cloudgenix.com/v4.7
description: Legacy CloudGenix API server (v4.7).
tags:
- name: PathRules
description: Path policy rule management for controlling traffic steering decisions across available WAN links.
paths:
/sdwan/config/v1/policies/path-rules:
get:
operationId: listPathRules
summary: Palo Alto Networks List Path Policy Rules
description: Returns a list of path policy rules. Path rules control traffic steering decisions across available WAN links based on application identity, source, destination, and link quality conditions.
tags:
- PathRules
parameters:
- name: offset
in: query
schema:
type: integer
default: 0
example: 0
- name: limit
in: query
schema:
type: integer
default: 100
example: 100
responses:
'200':
description: Path policy rules returned successfully.
content:
application/json:
schema:
type: object
properties:
count:
type: integer
items:
type: array
items:
$ref: '#/components/schemas/PathRule'
examples:
ListPathRules200Example:
summary: Default listPathRules 200 response
x-microcks-default: true
value:
count: 207
items:
- id: example-id
name: Branch Sensor 65
description: Alert suspicious incident policy rule detected investigation malware rule suspicious traffic applied.
app_filters:
- example-app_filters_item
- example-app_filters_item
preferred_paths:
- label: Primary Sensor 13
type: active
- label: Branch Agent 67
type: backup
sla_threshold:
latency_ms: 949
packet_loss_pct: 91.65
jitter_ms: 547
enabled: true
priority: 446
created_at: '2025-11-26T11:25:53Z'
updated_at: '2025-12-01T02:58:26Z'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'500':
$ref: '#/components/responses/InternalServerError'
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
security:
- oauth2Bearer: []
post:
operationId: createPathRule
summary: Palo Alto Networks Create a Path Policy Rule
description: Creates a new path policy rule for traffic steering.
tags:
- PathRules
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/PathRule'
examples:
CreatePathRuleRequestExample:
summary: Default createPathRule request
x-microcks-default: true
value:
id: example-id
name: Branch Sensor 65
description: Alert suspicious incident policy rule detected investigation malware rule suspicious traffic applied.
app_filters:
- example-app_filters_item
- example-app_filters_item
preferred_paths:
- label: Primary Sensor 13
type: active
- label: Branch Agent 67
type: backup
sla_threshold:
latency_ms: 949
packet_loss_pct: 91.65
jitter_ms: 547
enabled: true
priority: 446
created_at: '2025-11-26T11:25:53Z'
updated_at: '2025-12-01T02:58:26Z'
responses:
'200':
description: Path policy rule created successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/PathRule'
examples:
CreatePathRule200Example:
summary: Default createPathRule 200 response
x-microcks-default: true
value:
id: example-id
name: Branch Sensor 65
description: Alert suspicious incident policy rule detected investigation malware rule suspicious traffic applied.
app_filters:
- example-app_filters_item
- example-app_filters_item
preferred_paths:
- label: Primary Sensor 13
type: active
- label: Branch Agent 67
type: backup
sla_threshold:
latency_ms: 949
packet_loss_pct: 91.65
jitter_ms: 547
enabled: true
priority: 446
created_at: '2025-11-26T11:25:53Z'
updated_at: '2025-12-01T02:58:26Z'
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'500':
$ref: '#/components/responses/InternalServerError'
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
security:
- oauth2Bearer: []
servers:
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
description: AIOps for NGFW BPA API production server.
components:
responses:
Forbidden:
description: Insufficient permissions for this operation.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
InternalServerError:
description: Internal server error.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
BadRequest:
description: Invalid request parameters or body.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
Unauthorized:
description: Missing or invalid OAuth2 access token.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
schemas:
ErrorResponse:
type: object
properties:
_error:
type: array
items:
type: object
properties:
code:
type: string
example: example-code
message:
type: string
example: Investigation firewall on investigation blocked malware on on activity traffic.
example:
- code: example-code
message: Traffic activity blocked incident activity alert rule alert firewall incident.
- code: example-code
message: Traffic policy on violation blocked Security investigation blocked rule on malware network.
PathRule:
type: object
required:
- name
properties:
id:
type: string
description: Unique identifier for the path rule.
readOnly: true
example: example-id
name:
type: string
description: Name of the path rule.
example: Branch Sensor 65
description:
type: string
example: Alert suspicious incident policy rule detected investigation malware rule suspicious traffic applied.
app_filters:
type: array
items:
type: string
description: Application identifiers this path rule applies to.
example:
- example-app_filters_item
- example-app_filters_item
preferred_paths:
type: array
items:
type: object
properties:
label:
type: string
description: WAN interface label for the preferred path.
example: Production Agent 68
type:
type: string
enum:
- active
- backup
description: Whether this path is active or backup.
example: active
description: Ordered list of preferred WAN paths for traffic steering.
example:
- label: Primary Sensor 13
type: active
- label: Branch Agent 67
type: backup
sla_threshold:
type: object
description: SLA thresholds that trigger path switching.
properties:
latency_ms:
type: integer
description: Maximum acceptable latency in milliseconds.
example: 703
packet_loss_pct:
type: number
description: Maximum acceptable packet loss percentage.
example: 12.38
jitter_ms:
type: integer
description: Maximum acceptable jitter in milliseconds.
example: 2
example:
latency_ms: 949
packet_loss_pct: 91.65
jitter_ms: 547
enabled:
type: boolean
default: true
description: Whether the rule is active.
example: true
priority:
type: integer
description: Rule evaluation priority. Lower numbers are evaluated first.
example: 446
created_at:
type: string
format: date-time
readOnly: true
example: '2025-11-26T11:25:53Z'
updated_at:
type: string
format: date-time
readOnly: true
example: '2025-12-01T02:58:26Z'
securitySchemes:
oauth2Bearer:
type: http
scheme: bearer
bearerFormat: JWT
description: OAuth 2.0 Bearer token for SASE platform authentication. Obtain using the client_credentials grant with your SASE service account client ID and client secret.
oauth2:
type: oauth2
description: OAuth 2.0 client credentials flow for obtaining an access token. Requires a client ID and client secret from the Palo Alto Networks SASE identity provider.
flows:
clientCredentials:
tokenUrl: https://auth.apps.paloaltonetworks.com/oauth2/access_token
scopes: {}
x-refined-from:
- palo-alto-networks-pathrules-api-openapi.yml
- palo-alto-prisma-sd-wan-api-openapi-original.yml