Palo Alto Networks

Palo Alto Networks Service Connections API

Service Connections

GitHub OpenAPI

Operations 12

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /service-connections List service connections · List service connections #
Ask an LLM
“Which Prisma Access service connections are set up?”
“Can I find a service connection by name?”
Tell an agent
List the service connections in folder {folder}.
Find service connection {name} in folder {folder}.
POST /service-connections Stage a new service connection · Create a service connection #
Ask an LLM
“Is a new service connection live right away, or does it need a push?”
“Can I attach a NAT pool and QoS settings when I stage a service connection in the candidate config?”
Tell an agent
Stage service connection {name} in region {region} with IPSec tunnel {ipsec_tunnel}.
Add a candidate service connection {name} in {region} over tunnel {ipsec_tunnel} with NAT pool {nat_pool} and QoS {qos}.
GET /service-connections/{id} Get a service connection · Get a service connection #
Ask an LLM
“What tunnel and region does a given service connection use?”
“Can I fetch one service connection by ID?”
Tell an agent
Get service connection {id}.
Show the tunnel and BGP settings of service connection {id}.
PUT /service-connections/{id} Update a service connection in the candidate config · Update a service connection #
Ask an LLM
“Can I enable QoS on a service connection that already exists?”
“Do edits to a service connection apply before I push the candidate configuration?”
Tell an agent
Update the QoS settings of existing service connection {id} to {qos}.
Change service connection {id} to region {region} in the candidate config.
DELETE /service-connections/{id} Delete a service connection · Delete a service connection #
Ask an LLM
“How do I remove a service connection?”
“Is deleting a service connection permanent?”
Tell an agent destructive · confirm first
Delete service connection {id}.
Remove the service connection {id}.
GET /sse/config/v1/bgp-routing View Prisma Access BGP routing settings · Retrieve BGP routing #
Ask an LLM
“What BGP routing preference is set for my Prisma Access service connections?”
“Can I check whether backbone routing is enabled in a folder?”
Tell an agent
Show the BGP routing settings for folder {folder} at position {position}.
Retrieve BGP routing named {name} in folder {folder} at position {position}.
PUT /sse/config/v1/bgp-routing Change Prisma Access BGP routing settings · Update BGP routing #
Ask an LLM
“How do I switch the routing preference between default and hot-potato?”
“Can I stop Prisma Access from withdrawing static routes?”
Tell an agent
Set the BGP routing preference to {routing_preference}.
Update BGP routing so accept route over service connection is {accept_route_over_SC}.
GET /sse/config/v1/service-connections List service connections in an SSE folder · List service connections #
Ask an LLM
“Which service connections are configured in a given SSE config folder?”
“Can I page through service connections with limit and offset on the sse/config/v1 path?”
Tell an agent
List service connections in SSE folder {folder}.
Find the service connection named {name} in SSE folder {folder}.
POST /sse/config/v1/service-connections Create a service connection (SSE config v1) · Create service connections #
Ask an LLM
“What does a new service connection need, like region and IPsec tunnel, on the SSE v1 API?”
“Can I attach a BGP peer and backup service connection when creating one?”
Tell an agent
Create SSE service connection {name} in region {region} over IPsec tunnel {ipsec_tunnel} in folder {folder}.
Add SSE service connection {name} with subnets {subnets} and BGP peer {bgp_peer} in folder {folder}.
DELETE /sse/config/v1/service-connections/{id} Delete a service connection (SSE config v1) · Delete a service connection #
Ask an LLM
“How do I remove a service connection through the SSE config v1 API?”
“Does deleting an SSE service connection cut access to the data center behind it?”
Tell an agent destructive · confirm first
Delete SSE service connection {id}.
Remove service connection {id} using the sse/config/v1 path.
GET /sse/config/v1/service-connections/{id} Get a service connection by ID (SSE config v1) · Get a service connection #
Ask an LLM
“What IPsec tunnel and region does one SSE service connection use?”
“Can I read one service connection's full config from the sse/config/v1 endpoint?”
Tell an agent
Show SSE service connection {id}.
Get the sse/config/v1 details of service connection {id}.
PUT /sse/config/v1/service-connections/{id} Edit a service connection (SSE config v1) · Edit a service connection #
Ask an LLM
“Can I change the subnets behind an existing SSE service connection?”
“How do I move a service connection to a secondary IPsec tunnel on the SSE v1 API?”
Tell an agent
Edit SSE service connection {id} to use subnets {subnets}.
Set secondary IPsec tunnel {secondary_ipsec_tunnel} on SSE service connection {id}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-service-connections-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-service-connections-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-service-connections-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 2.0.0
  title: Network Deployment Service Connections API
  description: These APIs are used for defining and managing Prisma Access Remote Network and Service Connection configurations within Strata Cloud Manager.
  termsOfService: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  contact:
    email: support@paloaltonetworks.com
    name: Palo Alto Networks Technical Support
    url: https://support.paloaltonetworks.com
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/config/deployment/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
security:
- scmToken: []
tags:


# --- truncated at 32 KB (34 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-service-connections-api-openapi.yml