Palo Alto Networks Serverless API
{'$ref': 'desc/serverless/serverless.md'}
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-serverless-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
OpenAPI Specification
openapi: 3.2.0
info:
title: Palo Alto Networks Serverless API
version: '1.0'
description: 'Operations tagged Serverless across 4 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-cwpp-34-03-openapi-34-03-138-saas-openapi.json, palo-alto-cwpp-openapi-34-04-145-saas-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: PATH_TO_CONSOLE
tags:
- name: Serverless
description: Serverless. 6 operations in this definition.
x-description-source: desc/serverless/serverless.md
paths:
/api/v34.03/serverless:
get:
description: 'Get Serverless Function Scan Results. GET /api/v34.03/serverless on the Serverless API. Takes 15 query parameters. Documented responses: 200.'
parameters:
- description: 'Offsets the result to a specific report count. Offset starts from 0.
'
in: query
name: offset
schema:
type: integer
- description: 'Limit is the amount to fix.
'
in: query
name: limit
schema:
type: integer
- description: 'Sorts the result using a key.
'
in: query
name: sort
schema:
type: string
- description: 'Sorts the result in reverse order.
'
in: query
name: reverse
schema:
type: boolean
- description: 'Retrieves a list of cloud function IDs.
'
in: query
name: id
schema:
description: 'Retrieves a list of cloud function IDs.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
in: query
name: cloudControllerAddresses
schema:
description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud runtimes.
'
in: query
name: runtime
schema:
description: 'Filters the result based on cloud runtimes.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud function''s versions.
'
in: query
name: version
schema:
description: 'Filters the result based on cloud function''s versions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on AWS Lambda Layers.
'
in: query
name: functionLayers
schema:
description: 'Filters the result based on AWS Lambda Layers.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters result based on cloud functions that are connected and protected by a Defender.
'
in: query
name: defended
schema:
type: boolean
- description: 'Filters result based on compliance IDs.
'
in: query
name: complianceIDs
schema:
description: 'Filters result based on compliance IDs.
'
items:
$ref: '#/components/schemas/int'
type: array
- description: 'Filters the result based on applied compliance rule name.
'
in: query
name: complianceRuleName
schema:
type: string
- description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
in: query
name: platform
schema:
description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.
Default is false.
'
in: query
name: normalizedSeverity
schema:
type: boolean
- description: 'Filters results by issue type.
'
in: query
name: issueType
schema:
description: IssueType is used to filter scan results by issue type
enum:
- - vulnerabilities
- compliance
- ''
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/-_serverless.FunctionInfo'
description: ''
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: get-serverless
summary: Get Serverless Function Scan Results
x-description-source: desc/serverless/get.md
/api/v34.03/serverless/download:
get:
description: 'Download Serverless Function Scan Results. GET /api/v34.03/serverless/download on the Serverless API. Takes 15 query parameters. Documented responses: 200.'
parameters:
- description: 'Offsets the result to a specific report count. Offset starts from 0.
'
in: query
name: offset
schema:
type: integer
- description: 'Limit is the amount to fix.
'
in: query
name: limit
schema:
type: integer
- description: 'Sorts the result using a key.
'
in: query
name: sort
schema:
type: string
- description: 'Sorts the result in reverse order.
'
in: query
name: reverse
schema:
type: boolean
- description: 'Retrieves a list of cloud function IDs.
'
in: query
name: id
schema:
description: 'Retrieves a list of cloud function IDs.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
in: query
name: cloudControllerAddresses
schema:
description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud runtimes.
'
in: query
name: runtime
schema:
description: 'Filters the result based on cloud runtimes.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud function''s versions.
'
in: query
name: version
schema:
description: 'Filters the result based on cloud function''s versions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on AWS Lambda Layers.
'
in: query
name: functionLayers
schema:
description: 'Filters the result based on AWS Lambda Layers.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters result based on cloud functions that are connected and protected by a Defender.
'
in: query
name: defended
schema:
type: boolean
- description: 'Filters result based on compliance IDs.
'
in: query
name: complianceIDs
schema:
description: 'Filters result based on compliance IDs.
'
items:
$ref: '#/components/schemas/int'
type: array
- description: 'Filters the result based on applied compliance rule name.
'
in: query
name: complianceRuleName
schema:
type: string
- description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
in: query
name: platform
schema:
description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.
Default is false.
'
in: query
name: normalizedSeverity
schema:
type: boolean
- description: 'Filters results by issue type.
'
in: query
name: issueType
schema:
description: IssueType is used to filter scan results by issue type
enum:
- - vulnerabilities
- compliance
- ''
type: string
responses:
'200':
description: OK
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: get-serverless-download
summary: Download Serverless Function Scan Results
x-description-source: desc/serverless/download_get.md
/api/v34.03/serverless/evaluate:
post:
description: 'Resolve Functions. POST /api/v34.03/serverless/evaluate on the Serverless API. Takes an optional request body. Documented responses: 200.'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/api.ResolveFunctionsReq'
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/api.ResolveFunctionsResp'
description: ResolveFunctionsResp represents the functions resolution API output
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorCI
operationId: post-serverless-evaluate
summary: Resolve Functions
x-description-source: desc/serverless/evaluate_post.md
/api/v34.03/serverless/names:
get:
description: 'Get Serverless Function Names. GET /api/v34.03/serverless/names on the Serverless API. Takes 15 query parameters. Documented responses: 200.'
parameters:
- description: 'Offsets the result to a specific report count. Offset starts from 0.
'
in: query
name: offset
schema:
type: integer
- description: 'Limit is the amount to fix.
'
in: query
name: limit
schema:
type: integer
- description: 'Sorts the result using a key.
'
in: query
name: sort
schema:
type: string
- description: 'Sorts the result in reverse order.
'
in: query
name: reverse
schema:
type: boolean
- description: 'Retrieves a list of cloud function IDs.
'
in: query
name: id
schema:
description: 'Retrieves a list of cloud function IDs.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
in: query
name: cloudControllerAddresses
schema:
description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud runtimes.
'
in: query
name: runtime
schema:
description: 'Filters the result based on cloud runtimes.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud function''s versions.
'
in: query
name: version
schema:
description: 'Filters the result based on cloud function''s versions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on AWS Lambda Layers.
'
in: query
name: functionLayers
schema:
description: 'Filters the result based on AWS Lambda Layers.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters result based on cloud functions that are connected and protected by a Defender.
'
in: query
name: defended
schema:
type: boolean
- description: 'Filters result based on compliance IDs.
'
in: query
name: complianceIDs
schema:
description: 'Filters result based on compliance IDs.
'
items:
$ref: '#/components/schemas/int'
type: array
- description: 'Filters the result based on applied compliance rule name.
'
in: query
name: complianceRuleName
schema:
type: string
- description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
in: query
name: platform
schema:
description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.
Default is false.
'
in: query
name: normalizedSeverity
schema:
type: boolean
- description: 'Filters results by issue type.
'
in: query
name: issueType
schema:
description: IssueType is used to filter scan results by issue type
enum:
- - vulnerabilities
- compliance
- ''
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/-_string'
description: ''
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: get-serverless-names
summary: Get Serverless Function Names
x-description-source: desc/serverless/names_get.md
/api/v34.03/serverless/scan:
post:
description: 'Start Serverless Function Scan. POST /api/v34.03/serverless/scan on the Serverless API. Documented responses: 200.'
responses:
'200':
description: OK
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: post-serverless-scan
summary: Start Serverless Function Scan
x-description-source: desc/serverless/scan_post.md
/api/v34.03/serverless/stop:
post:
description: 'Stop Serverless Function Scan. POST /api/v34.03/serverless/stop on the Serverless API. Documented responses: 200.'
responses:
'200':
description: OK
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: post-serverless-stop
summary: Stop Serverless Function Scan
x-description-source: desc/serverless/stop_post.md
/api/v34.04/serverless:
get:
description: 'Get Serverless Function Scan Results. GET /api/v34.04/serverless on the Serverless API. Takes 15 query parameters. Documented responses: 200.'
parameters:
- description: 'Offsets the result to a specific report count. Offset starts from 0.
'
in: query
name: offset
schema:
type: integer
- description: 'Limit is the amount to fix.
'
in: query
name: limit
schema:
type: integer
- description: 'Sorts the result using a key.
'
in: query
name: sort
schema:
type: string
- description: 'Sorts the result in reverse order.
'
in: query
name: reverse
schema:
type: boolean
- description: 'Retrieves a list of cloud function IDs.
'
in: query
name: id
schema:
description: 'Retrieves a list of cloud function IDs.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
in: query
name: cloudControllerAddresses
schema:
description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud runtimes.
'
in: query
name: runtime
schema:
description: 'Filters the result based on cloud runtimes.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud function''s versions.
'
in: query
name: version
schema:
description: 'Filters the result based on cloud function''s versions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on AWS Lambda Layers.
'
in: query
name: functionLayers
schema:
description: 'Filters the result based on AWS Lambda Layers.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters result based on cloud functions that are connected and protected by a Defender.
'
in: query
name: defended
schema:
type: boolean
- description: 'Filters result based on compliance IDs.
'
in: query
name: complianceIDs
schema:
description: 'Filters result based on compliance IDs.
'
items:
$ref: '#/components/schemas/int'
type: array
- description: 'Filters the result based on applied compliance rule name.
'
in: query
name: complianceRuleName
schema:
type: string
- description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
in: query
name: platform
schema:
description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.
Default is false.
'
in: query
name: normalizedSeverity
schema:
type: boolean
- description: 'Filters results by issue type.
'
in: query
name: issueType
schema:
description: IssueType is used to filter scan results by issue type
enum:
- - vulnerabilities
- compliance
- ''
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/-_serverless.FunctionInfo'
description: ''
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: get-serverless
summary: Get Serverless Function Scan Results
x-description-source: desc/serverless/get.md
/api/v34.04/serverless/download:
get:
description: 'Download Serverless Function Scan Results. GET /api/v34.04/serverless/download on the Serverless API. Takes 15 query parameters. Documented responses: 200.'
parameters:
- description: 'Offsets the result to a specific report count. Offset starts from 0.
'
in: query
name: offset
schema:
type: integer
- description: 'Limit is the amount to fix.
'
in: query
name: limit
schema:
type: integer
- description: 'Sorts the result using a key.
'
in: query
name: sort
schema:
type: string
- description: 'Sorts the result in reverse order.
'
in: query
name: reverse
schema:
type: boolean
- description: 'Retrieves a list of cloud function IDs.
'
in: query
name: id
schema:
description: 'Retrieves a list of cloud function IDs.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
in: query
name: cloudControllerAddresses
schema:
description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud runtimes.
'
in: query
name: runtime
schema:
description: 'Filters the result based on cloud runtimes.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud function''s versions.
'
in: query
name: version
schema:
description: 'Filters the result based on cloud function''s versions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on AWS Lambda Layers.
'
in: query
name: functionLayers
schema:
description: 'Filters the result based on AWS Lambda Layers.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters result based on cloud functions that are connected and protected by a Defender.
'
in: query
name: defended
schema:
type: boolean
- description: 'Filters result based on compliance IDs.
'
in: query
name: complianceIDs
schema:
description: 'Filters result based on compliance IDs.
'
items:
$ref: '#/components/schemas/int'
type: array
- description: 'Filters the result based on applied compliance rule name.
'
in: query
name: complianceRuleName
schema:
type: string
- description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
in: query
name: platform
schema:
description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.
Default is false.
'
in: query
name: normalizedSeverity
schema:
type: boolean
- description: 'Filters results by issue type.
'
in: query
name: issueType
schema:
description: IssueType is used to filter scan results by issue type
enum:
- - vulnerabilities
- compliance
- ''
type: string
responses:
'200':
description: OK
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: get-serverless-download
summary: Download Serverless Function Scan Results
x-description-source: desc/serverless/download_get.md
/api/v34.04/serverless/evaluate:
post:
description: 'Resolve Functions. POST /api/v34.04/serverless/evaluate on the Serverless API. Takes an optional request body. Documented responses: 200.'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/api.ResolveFunctionsReq'
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/api.ResolveFunctionsResp'
description: ResolveFunctionsResp represents the functions resolution API output
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorCI
operationId: post-serverless-evaluate
summary: Resolve Functions
x-description-source: desc/serverless/evaluate_post.md
/api/v34.04/serverless/names:
get:
description: 'Get Serverless Function Names. GET /api/v34.04/serverless/names on the Serverless API. Takes 15 query parameters. Documented responses: 200.'
parameters:
- description: 'Offsets the result to a specific report count. Offset starts from 0.
'
in: query
name: offset
schema:
type: integer
- description: 'Limit is the amount to fix.
'
in: query
name: limit
schema:
type: integer
- description: 'Sorts the result using a key.
'
in: query
name: sort
schema:
type: string
- description: 'Sorts the result in reverse order.
'
in: query
name: reverse
schema:
type: boolean
- description: 'Retrieves a list of cloud function IDs.
'
in: query
name: id
schema:
description: 'Retrieves a list of cloud function IDs.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
in: query
name: cloudControllerAddresses
schema:
description: 'Retrieves a list of cloud controller addresses that contains the cloud functions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud runtimes.
'
in: query
name: runtime
schema:
description: 'Filters the result based on cloud runtimes.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on cloud function''s versions.
'
in: query
name: version
schema:
description: 'Filters the result based on cloud function''s versions.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters the result based on AWS Lambda Layers.
'
in: query
name: functionLayers
schema:
description: 'Filters the result based on AWS Lambda Layers.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Filters result based on cloud functions that are connected and protected by a Defender.
'
in: query
name: defended
schema:
type: boolean
- description: 'Filters result based on compliance IDs.
'
in: query
name: complianceIDs
schema:
description: 'Filters result based on compliance IDs.
'
items:
$ref: '#/components/schemas/int'
type: array
- description: 'Filters the result based on applied compliance rule name.
'
in: query
name: complianceRuleName
schema:
type: string
- description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
in: query
name: platform
schema:
description: 'Filters result based on platforms (OS and architecture) such as Windows, Linux ARM x64, Linux x86, and so on.
'
items:
$ref: '#/components/schemas/string'
type: array
- description: 'Retrieves the result in the normalized form of low, medium, high, and critical based on vulnerability''s severity level.
Default is false.
'
in: query
name: normalizedSeverity
schema:
type: boolean
- description: 'Filters results by issue type.
'
in: query
name: issueType
schema:
description: IssueType is used to filter scan results by issue type
enum:
- - vulnerabilities
- compliance
- ''
type: string
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/-_string'
description: ''
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: get-serverless-names
summary: Get Serverless Function Names
x-description-source: desc/serverless/names_get.md
/api/v34.04/serverless/scan:
post:
description: 'Start Serverless Function Scan. POST /api/v34.04/serverless/scan on the Serverless API. Documented responses: 200.'
responses:
'200':
description: OK
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: post-serverless-scan
summary: Start Serverless Function Scan
x-description-source: desc/serverless/scan_post.md
/api/v34.04/serverless/stop:
post:
description: 'Stop Serverless Function Scan. POST /api/v34.04/serverless/stop on the Serverless API. Documented responses: 200.'
responses:
'200':
description: OK
default:
description: ''
tags:
- Serverless
x-prisma-cloud-target-env:
permission: monitorServerless
operationId: post-serverless-stop
summary: Stop Serverless Function Scan
x-description-source: desc/serverless/stop_post.md
components:
schemas:
vuln.Application:
description: Application represents a detected application
properties:
installedFromPackage:
description: 'Indicates that the app was installed as an OS package.
'
type: boolean
knownVulnerabilities:
description: 'Total number of vulnerabilities for this application.
'
type: integer
l
# --- truncated at 32 KB (136 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-serverless-api-openapi.yml