Palo Alto Networks

Palo Alto Networks Policy API

A policy is a set of one or more constraints or conditions that must be adhered to. Prisma Cloud provides predefined policies for configurations and access controls that adhere to established security best practices such as PCI, GDPR, ISO 27001:2013, and NIST. These Prisma Cloud default polices cannot be modified. In addition to these, you can create custom policies to monitor for violations and to enforce your own organizational standards.

GitHub OpenAPI
Business capability
Security Strategy & Governance Management BC-620.10

Operations 11

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /filter/policy/suggest List supported policy filters and default options · List Policy Filters #
Ask an LLM
“Which filters can I use when listing Prisma Cloud policies?”
“What default or recent values are offered for each policy filter?”
Tell an agent
Show me all supported policy filters and their default options.
List the policy filter keys I can search on.
POST /filter/policy/suggest Autocomplete values for a policy filter · List Policy Filter Autocomplete Suggestions #
Ask an LLM
“What values are available for a specific policy filter like compliance standard?”
“Can I fuzzy-search the options of a policy filter as I type?”
Tell an agent
Suggest values for policy filter {filterName}.
Autocomplete {query} for policy filter {filterName}.
GET /policy List policies (v1) · List Policies #
Ask an LLM
“Which high-severity policies are enabled in Prisma Cloud?”
“Can I list policies mapped to a particular compliance standard with the original endpoint?”
Tell an agent
List v1 policies with severity {severity} for cloud {cloud}.
Using the original policy list, show policies for compliance standard {standard}.
POST /policy Create a custom policy · Add Policy #
Ask an LLM
“How do I create my own custom policy with a rule and severity?”
“Can I attach compliance metadata and labels to a new custom policy?”
Tell an agent
Create a {policyType} policy named {name} with severity {severity} and rule {rule}.
Add custom policy {name} labeled {labels} with recommendation {recommendation}.
GET /v2/policy List policies (v2, faster) · List Policies V2 #
Ask an LLM
“Is there a faster way to list policies that also lets me filter by rule type and subtype?”
“Can the v2 policy list include deleted policies?”
Tell an agent
List v2 policies with rule type {ruleType} and subtype {subtype}.
With the v2 list, show remediable policies for cloud {cloud}.
GET /policy/{id} Get a policy by ID · Policy Info #
Ask an LLM
“What rule, severity and remediation does a specific policy have?”
“How do I fetch one policy's full definition?”
Tell an agent
Get policy {id}.
Show the rule and remediation for policy {id}.
PUT /policy/{id} Update an existing policy · Update Policy #
Ask an LLM
“Can I change the severity or rule of an existing policy?”
“Do I have to send every field when editing a policy?”
Tell an agent
Change the severity of policy {id} to {severity}.
Update the rule of policy {id} to {rule}.
DELETE /policy/{id} Delete a policy · Delete Policy #
Ask an LLM
“How do I permanently remove a custom policy?”
“What happens to a policy's alerts after it's deleted?”
Tell an agent destructive · confirm first
Delete policy {id}.
Remove custom policy {id} from Prisma Cloud.
PATCH /policy/{id}/status/{enabled} Enable or disable a policy · Update Policy Status #
Ask an LLM
“Can I switch a policy off without deleting it?”
“How do I turn a disabled policy back on?”
Tell an agent
Set policy {id} enabled status to {enabled}.
Disable policy {id} by setting enabled to {enabled}.
GET /policy/compliance List supported compliance standards · List Policy Compliance Standards #
Ask an LLM
“Which compliance standards does Prisma Cloud support for policies?”
“What sections does each supported compliance standard have?”
Tell an agent
List all compliance standards available for policies with their sections.
Show me the policy compliance standards catalog.
POST /policy/rule/validate Pre-validate a policy rule without saving · Pre-validate Policy Rule #
Ask an LLM
“Can I check whether a policy rule is valid before creating the policy?”
“Which policy types can be dry-run validated?”
Tell an agent
Validate rule {rule} for a {policyType} policy named {name} without creating it.
Dry-run check policy rule {rule} before I save it.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-policy-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-policy-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-policy-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  contact: {}
  description: 'Access Keys are a secure way to enable programmatic access to the Prisma Cloud API. By default, only

    the System Admin has API access and can enable API access for other administrators. If you have API access,

    you can create up to two access keys. Create an access key for a limited time period and regenerate your API

    keys periodically to minimize exposure and follow security best practices.'
  title: Prisma Cloud Access Keys API Overview Policy API
  version: Latest
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
tags:


# --- truncated at 32 KB (37 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-policy-api-openapi.yml