Palo Alto Networks

Palo Alto Networks Report API

Operations for generating and retrieving scan job reports for static and dynamic.

GitHub OpenAPI

Operations 17

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /v1/report/static/{job_id}/list-attacks List attacks run in an attack library scan · List attacks for a scan #
Ask an LLM
“Which attacks succeeded against my AI model in an attack library scan?”
“Can I filter scan attacks by category, severity or compliance framework?”
Tell an agent
List the attacks in attack library scan {job_id} with status {status}.
Show attacks of category {category} and severity {severity} in scan {job_id}.
GET /v1/report/static/{job_id}/attack/{attack_id} Get one single-turn attack's details · Get attack details #
Ask an LLM
“What did the model output for a specific attack in my scan?”
“Which framework techniques does a single attack map to?”
Tell an agent
Get details of attack {attack_id} in scan {job_id}.
Show the model outputs and techniques for single-turn attack {attack_id} from job {job_id}.
GET /v1/report/static/{job_id}/report Get the attack library scan report · Get attack library report #
Ask an LLM
“Where do I read the summary report for an attack library red teaming scan?”
“Why is my attack library report locked when the scan only partially completed?”
Tell an agent
Get the attack library report for scan {job_id}.
Summarize the red teaming results of attack library job {job_id}.
GET /v1/report/static/{job_id}/runtime-policy-config Get runtime profile suggested by a library scan · Get attack library runtime security profile #
Ask an LLM
“What runtime security profile is recommended from my attack library scan?”
“Can an attack library scan tell me how to configure runtime protection?”
Tell an agent
Get the runtime security profile for attack library scan {job_id}.
Show the recommended runtime protection settings from library job {job_id}.
GET /v1/report/static/{job_id}/remediation Get remediation steps from a library scan · Get attack library scan remediation #
Ask an LLM
“Beyond runtime protection, what other fixes does an attack library scan suggest?”
“Which remediation measures came out of my model's attack library scan?”
Tell an agent
Get the remediation measures for attack library scan {job_id}.
List other fixes recommended by library job {job_id}.
GET /v1/report/dynamic/{job_id}/report Get the agent scan report · Get agent scan report #
Ask an LLM
“Where do I see the results of a dynamic agent red teaming scan?”
“What did an agent scan find about my AI agent's weaknesses?”
Tell an agent
Get the agent scan report for job {job_id}.
Summarize dynamic agent scan {job_id}.
GET /v1/report/dynamic/{job_id}/runtime-policy-config Get runtime profile suggested by an agent scan · Get agent scan runtime security profile #
Ask an LLM
“Which runtime security profile should protect my agent based on its dynamic scan?”
“Does an agent scan produce a runtime protection configuration?”
Tell an agent
Get the runtime security profile from agent scan {job_id}.
Show the runtime protection settings recommended by dynamic job {job_id}.
GET /v1/report/dynamic/{job_id}/remediation Get remediation steps from an agent scan · Get agent scan remediation #
Ask an LLM
“What should I fix in my AI agent after a dynamic scan?”
“Which non-runtime remediations did an agent scan recommend?”
Tell an agent
Get the remediation measures for agent scan {job_id}.
List the fixes the dynamic scan {job_id} recommends for my agent.
GET /v1/report/dynamic/{job_id}/list-goals List goals tested in an agent scan · List agent scan goals #
Ask an LLM
“Which attacker goals did the agent scan try to achieve?”
“Can I search agent scan goals by type, category or status?”
Tell an agent
List the goals of agent scan {job_id}.
Find goals in agent scan {job_id} of category {goal_category} with status {status}.
GET /v1/report/dynamic/{job_id}/goal/{goal_id}/list-streams List the attack streams for an agent scan goal · List agent scan goal deatils #
Ask an LLM
“How was a particular goal pursued in my agent scan?”
“What streams of attempts were run for one agent scan goal?”
Tell an agent
List the streams for goal {goal_id} in agent scan {job_id}.
Show how goal {goal_id} of job {job_id} was attempted.
GET /v1/report/dynamic/stream/{stream_id} Get iteration details for an agent scan stream · List agent scan stream details #
Ask an LLM
“Can I see each iteration of a single agent scan stream?”
“What happened turn by turn in one stream of a dynamic scan?”
Tell an agent
Get the details of agent scan stream {stream_id}.
Show the iteration data for stream {stream_id}.
GET /v1/report/{job_id}/download Download red teaming scan report files · Download report #
Ask an LLM
“Can I export a red teaming scan report as CSV or JSON?”
“How do I download all report files for a scan job?”
Tell an agent
Download the report for job {job_id} as {file_format}.
Export every report file format for scan {job_id} using format {file_format}.
POST /v1/report/{job_id}/generate-partial-report Unlock a partially complete scan report · Generate partial scan report #
Ask an LLM
“How do I unlock the report for a scan that only partially completed?”
“Does unlocking a partial scan report use up a quota credit?”
Tell an agent
Unlock the partial report for job {job_id}.
Spend a quota credit to generate the partial report for scan {job_id}.
GET /v1/report/static/{job_id}/attack-multi-turn/{attack_id} Get a multi-turn attack's details · Get multi-turn attack details #
Ask an LLM
“How do I review the full conversation of a multi-turn attack against my model?”
“Which techniques were used across the turns of a multi-turn jailbreak attempt?”
Tell an agent
Get multi-turn attack {attack_id} from scan {job_id}.
Show every turn's output for multi-turn attack {attack_id} in job {job_id}.
POST /get/report Get a WildFire analysis report · Palo Alto Networks Get Analysis Report #
Ask an LLM
“How do I get the WildFire sandbox report for a file hash?”
“Can I get WildFire behavioral analysis as a PDF or XML?”
Tell an agent
Get the WildFire report for hash {hash} in {format} format.
Show the network and registry activity WildFire recorded for sample {hash} as {format}.
POST /get/sample Download a WildFire malware sample · Palo Alto Networks Download Sample #
Ask an LLM
“Can I download the original file WildFire judged as malware?”
“Which samples am I allowed to download from WildFire?”
Tell an agent
Download the WildFire sample with hash {hash}.
Fetch the original malicious file {hash} from WildFire.
POST /get/pcap Download a WildFire sample's packet capture · Palo Alto Networks Get PCAP File #
Ask an LLM
“How do I get the network traffic a sample generated during WildFire detonation?”
“Can I choose which sandbox platform's PCAP to download?”
Tell an agent
Download the PCAP for sample {hash} on platform {platform}.
Get the packet capture WildFire recorded for {hash} on sandbox platform {platform}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-report-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-report-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-report-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Report API
  version: '1.0'
  description: 'Operations tagged Report across 2 of this provider''s published API definitions: palo-alto-prisma-airs-redteam-data-plane-dp-openapi-openapi.yaml, palo-alto-wildfire-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.sase.paloaltonetworks.com/ai-red-teaming/data-plane
- url: https://wildfire.paloaltonetworks.com/publicapi
  description: WildFire global cloud (US).
- url: https://wildfire.{region}.paloaltonetworks.com/publicapi
  description: WildFire regional cloud endpoint.
  variables:
    region:
      description: Regional deployment (e.g., eu, jp).
      default: eu
tags:


# --- truncated at 32 KB (97 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-report-api-openapi.yml