Palo Alto Networks Report API API
The Report API API from Palo Alto Networks — 8 operation(s) for report api.
OpenAPI Specification
openapi: 3.2.0
info:
title: Prisma Browser for MSP Report API API
version: '1.0'
description: "The Prisma Browser for MSP API provides a suite of endpoints to automate the management of security services for the SMB market. \nThis API allows developers to programmatically create and configure new tenants, manage license allocation, and retrieve detailed security reports on blocked malware, \nmalicious websites, and unauthorized extensions. By using these services, MSPs can integrate multi-tenant visibility and lifecycle management directly into their \nown dashboards or third-party platforms like ServiceNow. This Open API spec file was created on February 23, 2026. © 2026 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be found at [https://www.paloaltonetworks.com/company/trademarks.html](https://www.paloaltonetworks.com/company/trademarks.html). All other marks mentioned herein may be trademarks of their respective companies."
tags:
- name: Report API
paths:
/mt/pab/report/count:
post:
summary: Get Report Event
description: Retrieves the total count of security events for the specified tenant.
operationId: PostMtPabReportCount
responses:
'200':
description: Successfully retrieved report count
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get report count for tenant 1615680886
value:
tsg_id: '1615680886'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
/mt/pab/report/extension_blocked:
post:
summary: Get blocked extension reports
description: Retrieves reports of browser extensions that were blocked for the specified tenant.
operationId: PostMtPabReportExtension_blocked
responses:
'200':
description: Successfully retrieved blocked extension reports
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get blocked extension report for tenant 1297178607
value:
tsg_id: '1297178607'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
/mt/pab/report/extension_category:
post:
summary: Get extension category reports
description: Retrieves browser extension reports categorized by type for the specified tenant.
operationId: PostMtPabReportExtension_category
responses:
'200':
description: Successfully retrieved extension category reports
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get extension category report for tenant 1297178607
value:
tsg_id: '1297178607'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
/mt/pab/report/malicious_website:
post:
summary: Get malicious website reports
description: Retrieves reports of malicious websites detected for the specified tenant.
operationId: PostMtPabReportMalicious_website
responses:
'200':
description: Successfully retrieved malicious website reports
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get malicious website report for tenant 1297178607
value:
tsg_id: '1297178607'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
/mt/pab/report/malware_blocked:
post:
summary: Get blocked malware reports
description: Retrieves reports of malware that was blocked for the specified tenant.
operationId: PostMtPabReportMalware_blocked
responses:
'200':
description: Successfully retrieved blocked malware reports
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get blocked malware report for tenant 1742569585
value:
tsg_id: '1742569585'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
/mt/pab/report/malware_website:
post:
summary: Get malware website reports
description: Retrieves reports of websites identified as malware sources for the specified tenant.
operationId: PostMtPabReportMalware_website
responses:
'200':
description: Successfully retrieved malware website reports
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get malware website report for tenant 1615680886
value:
tsg_id: '1615680886'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
/mt/pab/report/website_blocked:
post:
summary: Get blocked website reports
description: Retrieves reports of websites that were blocked for the specified tenant.
operationId: PostMtPabReportWebsite_blocked
responses:
'200':
description: Successfully retrieved blocked website reports
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get blocked website report for tenant 1742569585
value:
tsg_id: '1742569585'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
/mt/pab/report/website_category:
post:
summary: Get website category reports
description: Retrieves website access reports categorized by website type for the specified tenant.
operationId: PostMtPabReportWebsite_category
responses:
'200':
description: Successfully retrieved website category reports
content:
application/json: {}
'400':
description: Invalid request payload
'404':
description: Tenant not found
'500':
description: Internal server error
parameters: []
tags:
- Report API
requestBody:
description: Tenant Service Group ID for the report request
content:
application/json:
examples:
Example Request:
description: Get website category report for tenant 1821219322
value:
tsg_id: '1821219322'
schema:
$ref: '#/components/schemas/ReportRequest'
required: true
security:
- authKey: []
components:
schemas:
ReportRequest:
type: object
required:
- tsg_id
examples:
- tsg_id: '1615680886'
description: Request payload for report operations
properties:
tsg_id:
type: string
minLength: 1
examples:
- '1615680886'
description: Tenant Service Group ID for which to retrieve report data
securitySchemes:
authKey: {}