Palo Alto Networks

Palo Alto Networks Policies API

The Policies API from Palo Alto Networks — 82 operation(s) for policies.

GitHub OpenAPI
Business capability
Security Strategy & Governance Management BC-620.10

Operations 166

POST /code/api/v1/policies/definition/{queryId} Validate Policies - Code-based #
POST /code/api/v1/policies Save New Policy #
GET /code/api/v1/policies/table/data Get Custom Policies Table Data #
PUT /code/api/v1/policies/{policyId} Update Policy #
DELETE /code/api/v1/policies/{policyId} Delete Policy #
POST /code/api/v1/policies/preview Policy Preview #
POST /code/api/v1/policies/clone/{policyId} Policy Clone #
GET /api/v34.03/policies/compliance/ci/images Get Continuous Integration (CI) Image Compliance Policy #
PUT /api/v34.03/policies/compliance/ci/images Update Continuous Integration (CI) Image Compliance Policy #
GET /api/v34.03/policies/compliance/ci/serverless Get Continuous Integration (CI) Serverless Compliance Policy #
PUT /api/v34.03/policies/compliance/ci/serverless Update Continuous Integration (CI) Serverless Compliance Policy #
GET /api/v34.03/policies/compliance/container Get Container Compliance Policy #
PUT /api/v34.03/policies/compliance/container Update Container Compliance Policy #
GET /api/v34.03/policies/compliance/container/impacted Get Impacted Container Compliance Policy #
GET /api/v34.03/policies/compliance/host Get Host Compliance Policy #
PUT /api/v34.03/policies/compliance/host Update Host Compliance Policy #
GET /api/v34.03/policies/compliance/serverless Get Serverless Compliance Policy #
PUT /api/v34.03/policies/compliance/serverless Update Serverless Compliance Policy #
GET /api/v34.03/policies/compliance/vms/impacted Get Impacted VMs Compliance Policy #
GET /api/v34.03/policies/firewall/app/agentless Get Agentless App Firewall Policy #
PUT /api/v34.03/policies/firewall/app/agentless Set Agentless App Firewall Policy #
GET /api/v34.03/policies/firewall/app/agentless/impacted Get Agentless App Firewall Policy Impacted #
GET /api/v34.03/policies/firewall/app/agentless/resources Get Agentless App Firewall Policy Resources #
GET /api/v34.03/policies/firewall/app/agentless/state Get Agentless App Firewall Policy State #
POST /api/v34.03/policies/firewall/app/apispec Generate a WAAS API Specification Object #
GET /api/v34.03/policies/firewall/app/app-embedded Get WAAS App-embedded Policy #
PUT /api/v34.03/policies/firewall/app/app-embedded Update WAAS App-embedded Policy #
GET /api/v34.03/policies/firewall/app/container Get WAAS Container Policy #
PUT /api/v34.03/policies/firewall/app/container Update WAAS Container Policy #
GET /api/v34.03/policies/firewall/app/container/impacted Container App Firewall Policy Impacted #
GET /api/v34.03/policies/firewall/app/host Get WAAS Host Policy #
PUT /api/v34.03/policies/firewall/app/host Update WAAS Host Policy #
GET /api/v34.03/policies/firewall/app/host/impacted Host App Firewall Policy Impacted #
GET /api/v34.03/policies/firewall/app/network-list Get WAAS Network List #
POST /api/v34.03/policies/firewall/app/network-list Add WAAS Network List #
PUT /api/v34.03/policies/firewall/app/network-list Update WAAS Network List #
DELETE /api/v34.03/policies/firewall/app/network-list/{id} Delete WAAS Network List #
GET /api/v34.03/policies/firewall/app/out-of-band Get Out-of-Band WAAS Policy #
PUT /api/v34.03/policies/firewall/app/out-of-band Update Out-of-Band WAAS Policy #
GET /api/v34.03/policies/firewall/app/out-of-band/impacted Get Impacted Resources for Out-of-Band WAAS Policy #
GET /api/v34.03/policies/firewall/app/serverless Get WAAS Serverless Policy #
PUT /api/v34.03/policies/firewall/app/serverless Update WAAS Serverless Policy #
GET /api/v34.03/policies/firewall/network Get CNNS Container and Host Policy #
PUT /api/v34.03/policies/firewall/network Update CNNS Container and Host Policy #
GET /api/v34.03/policies/runtime/app-embedded Get Runtime App-embedded Policy #
POST /api/v34.03/policies/runtime/app-embedded Add Runtime App-embedded Policy #
PUT /api/v34.03/policies/runtime/app-embedded Update Runtime App-embedded Policy #
GET /api/v34.03/policies/runtime/container Get Runtime Container Policy #
POST /api/v34.03/policies/runtime/container Update Runtime Container Policy #
PUT /api/v34.03/policies/runtime/container Set Container Runtime Policy #
GET /api/v34.03/policies/runtime/container/impacted Update Runtime Impacted Container Policy #
GET /api/v34.03/policies/runtime/host Get Runtime Host Policy #
POST /api/v34.03/policies/runtime/host Update Runtime Host Policy #
PUT /api/v34.03/policies/runtime/host Set Host Runtime Policy #
GET /api/v34.03/policies/runtime/serverless Get Runtime Serverless Policy #
POST /api/v34.03/policies/runtime/serverless Update Runtime Serverless Policy #
PUT /api/v34.03/policies/runtime/serverless Set Serverless Runtime Policy #
GET /api/v34.03/policies/vulnerability/base-images Get Base Images Rules #
POST /api/v34.03/policies/vulnerability/base-images Add Base Images Rule #
GET /api/v34.03/policies/vulnerability/base-images/download Download Base Images Rules #
DELETE /api/v34.03/policies/vulnerability/base-images/{id} Delete Base Images Rule #
GET /api/v34.03/policies/vulnerability/ci/images Get CI Image Vulnerability Policy #
PUT /api/v34.03/policies/vulnerability/ci/images Update CI Image Vulnerability Policy #
GET /api/v34.03/policies/vulnerability/ci/serverless Get CI Serverless Vulnerability Policy #
PUT /api/v34.03/policies/vulnerability/ci/serverless Update CI Serverless Vulnerability Policy #
GET /api/v34.03/policies/vulnerability/host Get Host Vulnerability Policy #
PUT /api/v34.03/policies/vulnerability/host Update Host Vulnerability Policy #
GET /api/v34.03/policies/vulnerability/host/impacted Get Impacted Host Vulnerability Policy #
GET /api/v34.03/policies/vulnerability/images Get Image Vulnerability Policy #
PUT /api/v34.03/policies/vulnerability/images Update Image Vulnerability Policy #
GET /api/v34.03/policies/vulnerability/images/impacted Get Impacted Image Vulnerability Policy #
GET /api/v34.03/policies/vulnerability/serverless Get Serverless Vulnerability Policy #
PUT /api/v34.03/policies/vulnerability/serverless Update Serverless Vulnerability Policy #
GET /api/v34.04/policies/compliance/ci/images Get Continuous Integration (CI) Image Compliance Policy #
PUT /api/v34.04/policies/compliance/ci/images Update Continuous Integration (CI) Image Compliance Policy #
GET /api/v34.04/policies/compliance/ci/serverless Get Continuous Integration (CI) Serverless Compliance Policy #
PUT /api/v34.04/policies/compliance/ci/serverless Update Continuous Integration (CI) Serverless Compliance Policy #
GET /api/v34.04/policies/compliance/container Get Container Compliance Policy #
PUT /api/v34.04/policies/compliance/container Update Container Compliance Policy #
GET /api/v34.04/policies/compliance/container/impacted Get Impacted Container Compliance Policy #
GET /api/v34.04/policies/compliance/host Get Host Compliance Policy #
PUT /api/v34.04/policies/compliance/host Update Host Compliance Policy #
GET /api/v34.04/policies/compliance/serverless Get Serverless Compliance Policy #
PUT /api/v34.04/policies/compliance/serverless Update Serverless Compliance Policy #
GET /api/v34.04/policies/compliance/vms/impacted Get Impacted VMs Compliance Policy #
GET /api/v34.04/policies/firewall/app/agentless Get Agentless App Firewall Policy #
PUT /api/v34.04/policies/firewall/app/agentless Set Agentless App Firewall Policy #
GET /api/v34.04/policies/firewall/app/agentless/impacted Get Agentless App Firewall Policy Impacted #
GET /api/v34.04/policies/firewall/app/agentless/resources Get Agentless App Firewall Policy Resources #
GET /api/v34.04/policies/firewall/app/agentless/state Get Agentless App Firewall Policy State #
POST /api/v34.04/policies/firewall/app/apispec Generate a WAAS API Specification Object #
GET /api/v34.04/policies/firewall/app/app-embedded Get WAAS App-embedded Policy #
PUT /api/v34.04/policies/firewall/app/app-embedded Update WAAS App-embedded Policy #
GET /api/v34.04/policies/firewall/app/container Get WAAS Container Policy #
PUT /api/v34.04/policies/firewall/app/container Update WAAS Container Policy #
GET /api/v34.04/policies/firewall/app/container/impacted Container App Firewall Policy Impacted #
GET /api/v34.04/policies/firewall/app/host Get WAAS Host Policy #
PUT /api/v34.04/policies/firewall/app/host Update WAAS Host Policy #
GET /api/v34.04/policies/firewall/app/host/impacted Host App Firewall Policy Impacted #
GET /api/v34.04/policies/firewall/app/network-list Get WAAS Network List #
POST /api/v34.04/policies/firewall/app/network-list Add WAAS Network List #
PUT /api/v34.04/policies/firewall/app/network-list Update WAAS Network List #
DELETE /api/v34.04/policies/firewall/app/network-list/{id} Delete WAAS Network List #
GET /api/v34.04/policies/firewall/app/out-of-band Get Out-of-Band WAAS Policy #
PUT /api/v34.04/policies/firewall/app/out-of-band Update Out-of-Band WAAS Policy #
GET /api/v34.04/policies/firewall/app/out-of-band/impacted Get Impacted Resources for Out-of-Band WAAS Policy #
GET /api/v34.04/policies/firewall/app/serverless Get WAAS Serverless Policy #
PUT /api/v34.04/policies/firewall/app/serverless Update WAAS Serverless Policy #
GET /api/v34.04/policies/firewall/network Get CNNS Container and Host Policy #
PUT /api/v34.04/policies/firewall/network Update CNNS Container and Host Policy #
GET /api/v34.04/policies/runtime/app-embedded Get Runtime App-embedded Policy #
POST /api/v34.04/policies/runtime/app-embedded Add Runtime App-embedded Policy #
PUT /api/v34.04/policies/runtime/app-embedded Update Runtime App-embedded Policy #
GET /api/v34.04/policies/runtime/container Get Runtime Container Policy #
POST /api/v34.04/policies/runtime/container Update Runtime Container Policy #
PUT /api/v34.04/policies/runtime/container Set Container Runtime Policy #
GET /api/v34.04/policies/runtime/container/impacted Update Runtime Impacted Container Policy #
GET /api/v34.04/policies/runtime/host Get Runtime Host Policy #
POST /api/v34.04/policies/runtime/host Update Runtime Host Policy #
PUT /api/v34.04/policies/runtime/host Set Host Runtime Policy #
GET /api/v34.04/policies/runtime/serverless Get Runtime Serverless Policy #
POST /api/v34.04/policies/runtime/serverless Update Runtime Serverless Policy #
PUT /api/v34.04/policies/runtime/serverless Set Serverless Runtime Policy #
GET /api/v34.04/policies/vulnerability/base-images Get Base Images Rules #
POST /api/v34.04/policies/vulnerability/base-images Add Base Images Rule #
GET /api/v34.04/policies/vulnerability/base-images/download Download Base Images Rules #
DELETE /api/v34.04/policies/vulnerability/base-images/{id} Delete Base Images Rule #
GET /api/v34.04/policies/vulnerability/ci/images Get CI Image Vulnerability Policy #
PUT /api/v34.04/policies/vulnerability/ci/images Update CI Image Vulnerability Policy #
GET /api/v34.04/policies/vulnerability/ci/serverless Get CI Serverless Vulnerability Policy #
PUT /api/v34.04/policies/vulnerability/ci/serverless Update CI Serverless Vulnerability Policy #
GET /api/v34.04/policies/vulnerability/host Get Host Vulnerability Policy #
PUT /api/v34.04/policies/vulnerability/host Update Host Vulnerability Policy #
GET /api/v34.04/policies/vulnerability/host/impacted Get Impacted Host Vulnerability Policy #
GET /api/v34.04/policies/vulnerability/images Get Image Vulnerability Policy #
PUT /api/v34.04/policies/vulnerability/images Update Image Vulnerability Policy #
GET /api/v34.04/policies/vulnerability/images/impacted Get Impacted Image Vulnerability Policy #
GET /api/v34.04/policies/vulnerability/serverless Get Serverless Vulnerability Policy #
PUT /api/v34.04/policies/vulnerability/serverless Update Serverless Vulnerability Policy #
GET /policy/recommendation Palo Alto Networks Get Policy Recommendations #
GET /Policies/SecurityRules Palo Alto Networks List Security Rules #
POST /Policies/SecurityRules Palo Alto Networks Create Security Rule #
PUT /Policies/SecurityRules Palo Alto Networks Update Security Rule #
DELETE /Policies/SecurityRules Palo Alto Networks Delete Security Rule #
GET /Policies/NATRules Palo Alto Networks List NAT Rules #
POST /Policies/NATRules Palo Alto Networks Create NAT Rule #
PUT /Policies/NATRules Palo Alto Networks Update NAT Rule #
DELETE /Policies/NATRules Palo Alto Networks Delete NAT Rule #
GET /Policies/QoSRules Palo Alto Networks List QoS Rules #
POST /Policies/QoSRules Palo Alto Networks Create QoS Rule #
PUT /Policies/QoSRules Palo Alto Networks Update QoS Rule #
DELETE /Policies/QoSRules Palo Alto Networks Delete QoS Rule #
GET /v1/policies Palo Alto Networks List Browser Security Policies #
POST /v1/policies Palo Alto Networks Create Browser Security Policy #
GET /v1/policies/{policy_id} Palo Alto Networks Get Browser Security Policy #
PUT /v1/policies/{policy_id} Palo Alto Networks Update Browser Security Policy #
DELETE /v1/policies/{policy_id} Palo Alto Networks Delete Browser Security Policy #
GET /policies/vulnerability/images Palo Alto Networks Get Image Vulnerability Policy #
PUT /policies/vulnerability/images Palo Alto Networks Update Image Vulnerability Policy #
GET /policies/compliance/images Palo Alto Networks Get Image Compliance Policy #
GET /policies/runtime/container Palo Alto Networks Get Container Runtime Policy #
GET /policy Palo Alto Networks List Policies #
POST /policy Palo Alto Networks Create a Custom Policy #
GET /policy/{policyId} Palo Alto Networks Get Policy Details #
PUT /policy/{policyId} Palo Alto Networks Update a Policy #
GET /dspm/api/v1/policies Palo Alto Networks List DSPM Policies #

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-policies-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/palo-alto-networks-security-rule-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks-policies-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-policies-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Policies API
  x-refined-note:
  - x-description-source differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Policies across 10 of this provider''s published API definitions: palo-alto-code-policies-openapi.json, palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-iot-security-api-openapi-original.yml, palo-alto-networks-policies-api-openapi.yml, palo-alto-pan-os-rest-api-openapi-original.yml, palo-alto-prisma-access-browser-api-openapi-original.yml, palo-alto-prisma-cloud-compute-api-openapi-original.yml…'
servers:
- url: https://api.prismacloud.io
- url: https://{customer}.iot.paloaltonetworks.com/pub/v4.0
  description: IoT Security API production server.
  variables:
    customer:
      description: Customer-specific tenant identifier.
      default: customer-tenant
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
  description: AIOps for NGFW BPA API production server.
- url: https://{firewall}/restapi/v10.2
  description: PAN-OS firewall or Panorama REST API endpoint.
  variables:
    firewall:
      description: Hostname or IP address of the PAN-OS firewall or Panorama appliance.
      default: firewall.example.com
- url: https://api.sase.paloaltonetworks.com/browser-mgmt
  description: SASE Prisma Access Browser Management API production server.
- url: https://{console}/api/v1
  description: Prisma Cloud Compute Console API.
  variables:
    console:
      default: console.example.com
      description: Address of the Prisma Cloud Compute Console. For SaaS deployments, use the address provided in Prisma Cloud under Compute > Manage > System > Utilities.
- url: https://api2.prismacloud.io
  description: Prisma Cloud API (US region 2).
- url: https://api3.prismacloud.io
  description: Prisma Cloud API (US region 3).
- url: https://api.eu.prismacloud.io
  description: Prisma Cloud API (EU).
- url: https://api.anz.prismacloud.io
  description: Prisma Cloud API (ANZ).
- url: https://api.sg.prismacloud.io
  description: Prisma Cloud API (Singapore).
- url: https://api.ca.prismacloud.io
  description: Prisma Cloud API (Canada).
tags:


# --- truncated at 32 KB (586 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-policies-api-openapi.yml