Palo Alto Networks

Palo Alto Networks Profiles API

{'$ref': 'desc/profiles/profiles.md'}

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 22

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /api/v34.03/profiles/app-embedded List app-embedded runtime profiles (v34.03) · Get App-embedded Profiles #
Ask an LLM
“Which app-embedded Defender runtime profiles exist on the older v34.03 Compute API?”
“Can I filter v34.03 app-embedded profiles by app ID or container image?”
Tell an agent
Using the v34.03 endpoint, list app-embedded profiles for app ID {appID}.
On API v34.03, show app-embedded runtime profiles in cluster {cluster}.
GET /api/v34.03/profiles/app-embedded/download Export app-embedded profiles as CSV (v34.03) · Download App-embedded Profiles #
Ask an LLM
“Can I export app-embedded runtime profiles to a file with the v34.03 API?”
“Is there a v34.03 download of app-embedded profiles filtered by image?”
Tell an agent
Download the v34.03 app-embedded profile report for image {image}.
Export every app-embedded profile to a file via API version v34.03.
GET /api/v34.03/profiles/container List runtime container profiles (v34.03) · Get Runtime Container Profiles #
Ask an LLM
“What runtime models has Defender learned for my containers, per the v34.03 API?”
“Can the v34.03 container profile list be narrowed to one Kubernetes namespace?”
Tell an agent
With v34.03, list runtime container profiles in namespace {namespace}.
On the v34.03 API, fetch container runtime profiles for host {hostName}.
GET /api/v34.03/profiles/container/download Export runtime container profiles (v34.03) · Download Runtime Container Profiles #
Ask an LLM
“Can I get container runtime profiles as a downloadable file from API v34.03?”
“Does the v34.03 container profile export honour the cluster filter?”
Tell an agent
Download v34.03 container runtime profiles for cluster {cluster}.
Export all container runtime models to a file using v34.03.
POST /api/v34.03/profiles/container/learn Relearn container runtime profiles (v34.03) · Learn Runtime Container Profiles #
Ask an LLM
“How do I make Defender relearn container runtime models on the v34.03 API?”
“Can I restart runtime learning for containers through version v34.03?”
Tell an agent
Trigger container runtime profile learning via the v34.03 endpoint.
Restart learning of container models using API v34.03.
GET /api/v34.03/profiles/host List runtime host profiles (v34.03) · Get Runtime Host Profiles #
Ask an LLM
“What runtime host profiles are recorded for my hosts in the v34.03 API?”
“Can I filter v34.03 host runtime profiles by operating system?”
Tell an agent
Using v34.03, list host runtime profiles for hostname {hostName}.
On API v34.03, show host runtime profiles running OS {os}.
GET /api/v34.03/profiles/host/download Export runtime host profiles (v34.03) · Download Runtime Host Profiles #
Ask an LLM
“Is there a v34.03 way to download host runtime profiles as a file?”
“Can I export only host profiles in a given state with version v34.03?”
Tell an agent
Download v34.03 host runtime profiles in state {state}.
Export every host runtime profile to a file through v34.03.
GET /api/v34.04/profiles/app-embedded List app-embedded runtime profiles · Get App-embedded Profiles #
Ask an LLM
“What app-embedded Defender profiles are protecting my serverless and Fargate apps?”
“Can I look up app-embedded profiles for a specific image ID?”
Tell an agent
List app-embedded profiles for container {container}.
Show app-embedded profiles for image ID {imageID}, newest first.
GET /api/v34.04/profiles/app-embedded/download Download app-embedded runtime profiles · Download App-embedded Profiles #
Ask an LLM
“How do I download a CSV of app-embedded profiles in Prisma Cloud Compute?”
“Can the app-embedded profile download be limited to one cluster?”
Tell an agent
Download app-embedded profiles for cluster {cluster} as a CSV.
Give me a CSV file of all app-embedded profiles.
GET /api/v34.04/profiles/container List runtime container profiles · Get Runtime Container Profiles #
Ask an LLM
“Which processes and network activity has Defender modelled for my containers?”
“Can I see container runtime profiles only for a specific image?”
Tell an agent
List container runtime profiles for image {image}.
Show container runtime models in Kubernetes cluster {cluster}.
GET /api/v34.04/profiles/container/download Download runtime container profiles · Download Runtime Container Profiles #
Ask an LLM
“Can I pull a CSV of every container runtime model for an audit?”
“Does the container profile CSV support filtering by namespace?”
Tell an agent
Download a CSV of container runtime profiles in namespace {namespace}.
Get a CSV export of container runtime profiles for image ID {imageID}.
POST /api/v34.04/profiles/container/learn Relearn runtime container profiles · Learn Runtime Container Profiles #
Ask an LLM
“How can I force Defender to re-learn container behaviour after a deployment?”
“Is it possible to reset runtime model learning for all containers?”
Tell an agent
Start relearning runtime models for my containers.
Kick off container runtime profile learning again.
GET /api/v34.04/profiles/host List runtime host profiles · Get Runtime Host Profiles #
Ask an LLM
“What has Defender learned about normal behaviour on my hosts?”
“Can I list host runtime models only for hosts in one state?”
Tell an agent
List host runtime profiles in state {state}.
Show the runtime model for host {hostName}.
GET /api/v34.04/profiles/host/download Download runtime host profiles · Download Runtime Host Profiles #
Ask an LLM
“Can I download host runtime models as a CSV for offline review?”
“Where do I get a file of host profiles filtered by OS?”
Tell an agent
Download a CSV of host runtime profiles for OS {os}.
Get a CSV of host runtime profiles sorted by {sort}.
GET /v1/profile List AI security profiles · Palo Alto Networks List AI Security Profiles #
Ask an LLM
“Which AI security profiles are configured for my AI Runtime Security tenant?”
“What detection categories and enforcement actions do my AI profiles use?”
Tell an agent
List all AI security profiles in my tenant.
Show the first {limit} AI security profiles.
GET /v1/profile/{profile_name} Get an AI security profile's settings · Palo Alto Networks Get AI Security Profile Details #
Ask an LLM
“What sensitivity thresholds are set on a specific AI security profile?”
“Is prompt injection detection enabled in one of my named AI profiles?”
Tell an agent
Show the full configuration of AI security profile {profile_name}.
Get the enforcement actions set in AI profile {profile_name}.
GET /adns-resolver/v1/profiles List DNS resolver profiles · List profiles #
Ask an LLM
“Which DNS resolver profiles have I set up for Advanced DNS?”
“Can I search my DNS profiles by name or description?”
Tell an agent
List DNS resolver profiles matching {search}.
Show all DNS profiles sorted by {sort_by}.
POST /adns-resolver/v1/profiles Create a DNS resolver profile · Create a profile #
Ask an LLM
“How do I create a DNS filtering profile with SafeSearch turned on?”
“Can a new DNS profile enforce YouTube restricted mode?”
Tell an agent
Create a DNS profile named {name}.
Create DNS profile {name} with SafeSearch set to {safesearch_enabled}.
GET /adns-resolver/v1/profiles/categories List DNS profile categories · Get profile categories #
Ask an LLM
“What content categories can I override in a DNS profile?”
“Which category names are available for DNS profile overrides?”
Tell an agent
List the available DNS profile categories.
Show every category I can block or allow in a DNS profile.
DELETE /adns-resolver/v1/profiles/{profile-id} Delete a DNS resolver profile · Delete a profile #
Ask an LLM
“How do I remove a DNS profile I no longer use?”
“What happens if I delete a DNS resolver profile?”
Tell an agent destructive · confirm first
Delete DNS profile {profile-id}.
Remove the DNS resolver profile with ID {profile-id}.
GET /adns-resolver/v1/profiles/{profile-id} Get a DNS resolver profile · Get a profile #
Ask an LLM
“What overrides are configured on one particular DNS profile?”
“Can I check whether a given DNS profile has SafeSearch enabled?”
Tell an agent
Get DNS profile {profile-id}.
Show the category and FQDN overrides on DNS profile {profile-id}.
PUT /adns-resolver/v1/profiles/{profile-id} Update a DNS resolver profile · Update a profile #
Ask an LLM
“How do I change the overrides on an existing DNS profile?”
“Can I switch YouTube restricted mode to strict on a DNS profile I already have?”
Tell an agent
Rename DNS profile {profile-id} to {name}.
Set YouTube restricted mode to {youtube_restricted_mode} on DNS profile {profile-id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-profiles-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-profiles-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-profiles-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Profiles API
  x-refined-note:
  - x-description-source differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Profiles across 4 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-prisma-airs-api-openapi-original.yml, palo-alto-scm-config-adnsr-adnsr-apis-openapi.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://security.api.aisecurity.paloaltonetworks.com
  description: Prisma AIRS production server.
- description: Prod
  url: https://api.strata.paloaltonetworks.com
tags:


# --- truncated at 32 KB (117 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-profiles-api-openapi.yml