Palo Alto Networks

Palo Alto Networks Settings API

{'$ref': 'desc/settings/settings.md'}

GitHub OpenAPI

Operations 84

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /api/v34.03/settings/certificates Set custom CA client cert settings (v34.03) · Add Certificate Settings for Clients Accessing a Custom CA #
Ask an LLM
“Can I upload a custom CA certificate through the v34.03 settings API?”
“What certificate period can I set for custom-CA clients on v34.03?”
Tell an agent
Using API v34.03, set the custom CA certificate to {accessCaCert}.
On v34.03, set the custom-CA certificate period to {certificatePeriodDays} days.
GET /api/v34.03/settings/certs Get Compute certificate settings (v34.03) · Get Certificate Settings for Prisma Cloud Compute #
Ask an LLM
“What does the v34.03 API report for Compute certificate settings?”
“Where is the CA expiration shown in the older 34.03 certs endpoint?”
Tell an agent
Show Compute certificate settings from API v34.03.
Get console SAN and CA expiration using the v34.03 endpoint.
POST /api/v34.03/settings/certs Set Compute certificate settings (v34.03) · Add Certificate Settings for Prisma Cloud Compute #
Ask an LLM
“Can I change the console SAN list via the v34.03 API?”
“Where do I set CA expiration on the older 34.03 API?”
Tell an agent
On v34.03, set the console SAN list to {consoleSAN}.
Using API v34.03, set the CA expiration to {caExpiration}.
POST /api/v34.03/settings/console-certificate Set console access cert settings (v34.03) · Add Certificate Settings for Clients Accessing Prisma Cloud Compute #
Ask an LLM
“Can I set a custom console certificate through the v34.03 API?”
“Does v34.03 let me require revocation checks for console clients?”
Tell an agent
Using API v34.03, set the console CA certificate to {consoleCaCert}.
On v34.03, set console certificate revocation checking to {checkRevocation}.
GET /api/v34.03/settings/custom-labels Get custom alert labels (v34.03) · Get Alert Labels #
Ask an LLM
“Which alert labels does the v34.03 API return?”
“Where do I read custom alert labels on the older 34.03 API?”
Tell an agent
Show custom alert labels from API v34.03.
List alert labels using the v34.03 endpoint.
POST /api/v34.03/settings/custom-labels Set custom alert labels (v34.03) · Add Alert Labels #
Ask an LLM
“Can I add alert labels through the v34.03 settings API?”
“Where do I define alert labels on API version 34.03?”
Tell an agent
Using API v34.03, set alert labels to {labels}.
On v34.03, add alert labels {labels}.
GET /api/v34.03/settings/defender Get advanced Defender settings (v34.03) · Get Advanced Defender Settings #
Ask an LLM
“What does the v34.03 API return for advanced Defender settings?”
“Where are Defender settings on the older 34.03 API?”
Tell an agent
Show advanced Defender settings from API v34.03.
Get the Defender configuration using the v34.03 endpoint.
GET /api/v34.03/settings/intelligence Get Intelligence Stream settings (v34.03) · Get Intelligence Stream Settings #
Ask an LLM
“What Intelligence Stream settings does the v34.03 API report?”
“Is the custom Intelligence endpoint shown on the older 34.03 API?”
Tell an agent
Show Intelligence Stream settings from API v34.03.
Check the Windows feed setting using the v34.03 endpoint.
POST /api/v34.03/settings/intelligence Configure Intelligence Stream (v34.03) · Add Intelligence Stream Settings #
Ask an LLM
“Can I enable the Intelligence Stream through the v34.03 API?”
“Does v34.03 support a custom Intelligence endpoint?”
Tell an agent
On v34.03, enable Intelligence Stream at {address} with token {token}.
Using API v34.03, set custom endpoint {customEndpoint} with credential {customEndpointCredentialID}.
GET /api/v34.03/settings/ldap Get LDAP integration settings (v34.03) · Get LDAP Integration Settings #
Ask an LLM
“What LDAP settings does the v34.03 API return?”
“Where do I read the LDAP search base on the older 34.03 API?”
Tell an agent
Show LDAP settings from API v34.03.
Get the LDAP server type using the v34.03 endpoint.
POST /api/v34.03/settings/ldap Configure LDAP integration (v34.03) · Add LDAP Integration Settings #
Ask an LLM
“Can I set up LDAP through the v34.03 settings API?”
“Does v34.03 let me set user and group search bases for LDAP?”
Tell an agent
Using API v34.03, enable LDAP at {url} of type {type} with search base {searchBase}.
On v34.03, set LDAP bind account {accountUpn} and group search base {groupSearchBase}.
GET /api/v34.03/settings/license Get the Compute license (v34.03) · Get Prisma Cloud Compute License #
Ask an LLM
“What license does the v34.03 API report for Compute?”
“Where do I read license details on the older 34.03 API?”
Tell an agent
Show the Compute license from API v34.03.
Get license details using the v34.03 endpoint.
POST /api/v34.03/settings/license Install a Compute license key (v34.03) · Add Prisma Cloud Compute License #
Ask an LLM
“Can I apply a license key through the v34.03 API?”
“Where do I enter a license key on API version 34.03?”
Tell an agent
Using API v34.03, install license key {key}.
On v34.03, replace the license with key {key}.
GET /api/v34.03/settings/logging Get logging settings (v34.03) · Get Logging Settings #
Ask an LLM
“What logging settings does the v34.03 API return?”
“Is syslog shown in the older 34.03 logging endpoint?”
Tell an agent
Show logging settings from API v34.03.
Get syslog configuration using the v34.03 endpoint.
POST /api/v34.03/settings/logging Configure logging settings (v34.03) · Add Logging Settings #
Ask an LLM
“Can I set syslog forwarding through the v34.03 API?”
“Does v34.03 let me include forensic links in logs?”
Tell an agent
On v34.03, set syslog logging to {syslog}.
Using API v34.03, set console address {consoleAddress} and metrics collection {enableMetricsCollection}.
GET /api/v34.03/settings/logon Get logon settings (v34.03) · Get Logon Settings #
Ask an LLM
“What logon settings does the v34.03 API report?”
“Where do I read the session timeout on the older 34.03 API?”
Tell an agent
Show logon settings from API v34.03.
Check basic auth status using the v34.03 endpoint.
POST /api/v34.03/settings/logon Configure logon settings (v34.03) · Add Logon Settings #
Ask an LLM
“Can I change the session timeout through the v34.03 API?”
“Does v34.03 support enforcing strong passwords?”
Tell an agent
Using API v34.03, set session timeout to {sessionTimeoutSec} seconds.
On v34.03, set strong passwords {strongPassword} and basic auth disabled {basicAuthDisabled}.
GET /api/v34.03/settings/oauth Get OAuth sign-in settings (v34.03) · Get OAuth Settings #
Ask an LLM
“What OAuth settings does the v34.03 API return?”
“Where do I read the OAuth client ID on the older 34.03 API?”
Tell an agent
Show OAuth settings from API v34.03.
Get the OAuth provider using the v34.03 endpoint.
POST /api/v34.03/settings/oauth Configure OAuth sign-in (v34.03) · Add OAuth Settings #
Ask an LLM
“Can I set up OAuth login through the v34.03 API?”
“Does v34.03 let me set the OAuth group claim?”
Tell an agent
On v34.03, enable OAuth with client {clientID}, auth URL {authURL} and token URL {tokenURL}.
Using API v34.03, set OAuth provider {providerName} with group claim {groupClaim}.
GET /api/v34.03/settings/oidc Get OpenID Connect settings (v34.03) · Get Open ID Connect Settings #
Ask an LLM
“What OIDC settings does the v34.03 API return?”
“Where is the OIDC issuer URL on the older 34.03 API?”
Tell an agent
Show OpenID Connect settings from API v34.03.
Get the OIDC issuer using the v34.03 endpoint.
POST /api/v34.03/settings/oidc Configure OpenID Connect sign-in (v34.03) · Add Open ID Connect Settings #
Ask an LLM
“Can I set up OIDC single sign-on through the v34.03 API?”
“Does v34.03 let me set the OIDC user claim?”
Tell an agent
Using API v34.03, enable OIDC with issuer {openIDIssuesURL} and client {clientID}.
On v34.03, set OIDC user claim {userClaim} and group scope {groupScope}.
GET /api/v34.03/settings/proxy Get Compute proxy settings (v34.03) · Get Proxy Settings of Prisma Cloud Compute #
Ask an LLM
“What proxy settings does the v34.03 API report?”
“Where is the no-proxy list on the older 34.03 API?”
Tell an agent
Show proxy settings from API v34.03.
Get the proxy address using the v34.03 endpoint.
POST /api/v34.03/settings/proxy Configure the Compute proxy (v34.03) · Add Proxy Settings for Prisma Cloud Compute #
Ask an LLM
“Can I set an HTTP proxy through the v34.03 API?”
“Does v34.03 let Defenders trust a proxy CA?”
Tell an agent
On v34.03, route traffic through proxy {httpProxy} excluding {noProxy}.
Using API v34.03, set proxy user {user} and proxy CA {ca}.
GET /api/v34.03/settings/registry Get registry scanning settings (v34.03) · Get Registry Settings #
Ask an LLM
“What registry scan settings does the v34.03 API return?”
“Where do I list scanned registries on the older 34.03 API?”
Tell an agent
Show registry scan settings from API v34.03.
List configured registries using the v34.03 endpoint.
POST /api/v34.03/settings/registry Add a registry to scan (v34.03) · Add Registry Settings #
Ask an LLM
“Can I add a container registry for scanning via the v34.03 API?”
“Does v34.03 support capping images scanned per repository?”
Tell an agent
On v34.03, add registry {registry} of type {version} with repositories {repository}.
Using API v34.03, add registry {registry} with credential {credentialID} and cap {cap}.
PUT /api/v34.03/settings/registry Replace registry scan specs (v34.03) · Update Registry Settings #
Ask an LLM
“Can I replace all registry specifications through the v34.03 API?”
“Does v34.03 let me save registry settings without starting a scan?”
Tell an agent
Using API v34.03, replace registry specifications with {specifications}.
On v34.03, overwrite registry specs with {specifications} and scan later {scanLater}.
GET /api/v34.03/settings/saml Get SAML sign-in settings (v34.03) · Get SAML Settings of Prisma Cloud Compute #
Ask an LLM
“What SAML settings does the v34.03 API return?”
“Where is the SAML issuer on the older 34.03 API?”
Tell an agent
Show SAML settings from API v34.03.
Get SAML audience using the v34.03 endpoint.
POST /api/v34.03/settings/saml Configure SAML sign-in (v34.03) · Add SAML Settings for Prisma Cloud Compute #
Ask an LLM
“Can I set up SAML SSO through the v34.03 API?”
“Does v34.03 let me set the SAML group attribute?”
Tell an agent
Using API v34.03, enable SAML with SSO URL {url}, issuer {issuer} and audience {audience}.
On v34.03, set SAML group attribute {groupAttribute} and console URL {consoleURL}.
GET /api/v34.03/settings/scan Get global scan settings (v34.03) · Get Global Scan Settings #
Ask an LLM
“What scan intervals does the v34.03 API report?”
“Where are global scan settings on the older 34.03 API?”
Tell an agent
Show global scan settings from API v34.03.
Get image and registry scan periods using the v34.03 endpoint.
POST /api/v34.03/settings/scan Configure global scan settings (v34.03) · Add Global Scan Settings #
Ask an LLM
“Can I change the image scan interval through the v34.03 API?”
“Does v34.03 support a retention period for deleted registry images?”
Tell an agent
On v34.03, set image scan period to {imagesScanPeriodMs} ms.
Using API v34.03, set registry retention {registryScanRetentionDays} days and negligible vulns shown {showNegligibleVulnerabilities}.
GET /api/v34.03/settings/tas Get TAS settings (v34.03) · Get TAS Settings #
Ask an LLM
“What TAS settings does the v34.03 API return?”
“Where are Tanzu settings on the older 34.03 API?”
Tell an agent
Show TAS settings from API v34.03.
Get Tanzu Application Service config using the v34.03 endpoint.
POST /api/v34.03/settings/tas Save TAS settings (v34.03) · Add TAS Settings #
Ask an LLM
“Can I save TAS settings through the v34.03 API?”
“Where do I update Tanzu settings on API version 34.03?”
Tell an agent
Save TAS settings using API v34.03.
On v34.03, update the Tanzu Application Service settings.
GET /api/v34.03/settings/telemetry Get telemetry settings (v34.03) · Get Telemetry Settings #
Ask an LLM
“What telemetry setting does the v34.03 API report?”
“Where do I check telemetry on the older 34.03 API?”
Tell an agent
Show telemetry settings from API v34.03.
Check telemetry status using the v34.03 endpoint.
POST /api/v34.03/settings/telemetry Turn telemetry on or off (v34.03) · Enable or Disable Telemetry Settings #
Ask an LLM
“Can I toggle telemetry through the v34.03 API?”
“Does v34.03 let me opt out of telemetry?”
Tell an agent
Using API v34.03, set telemetry enabled to {enabled}.
On v34.03, switch telemetry to {enabled}.
POST /api/v34.03/settings/trusted-certificate Add one trusted certificate (v34.03) · Add a Certificate to a Trusted Certificate List #
Ask an LLM
“Can I append a single trusted certificate through the v34.03 API?”
“Where do I add one PEM certificate on API version 34.03?”
Tell an agent
Using API v34.03, add certificate {certificate} to the trusted list.
On v34.03, trust PEM certificate {certificate}.
POST /api/v34.03/settings/trusted-certificates Configure trusted certificates (v34.03) · Add Trusted Certificate Settings #
Ask an LLM
“Can I set the full trusted certificate list via the v34.03 API?”
“Does v34.03 support revocation checks for trusted certificates?”
Tell an agent
On v34.03, enable trusted certificates with list {certs}.
Using API v34.03, set trusted certs enabled {enabled} and revocation checking {checkRevocation}.
GET /api/v34.03/settings/vm Get VM image scan settings (v34.03) · Get VM Image Scan Settings #
Ask an LLM
“What VM image scan settings does the v34.03 API return?”
“Where are VM scan rules on the older 34.03 API?”
Tell an agent
Show VM image scan settings from API v34.03.
List VM scan rules using the v34.03 endpoint.
PUT /api/v34.03/settings/vm Update VM image scan settings (v34.03) · Update VM Image Scan Settings #
Ask an LLM
“Can I update VM image scan settings through the v34.03 API?”
“Where do I change VM scanning on API version 34.03?”
Tell an agent
Update VM image scan settings using API v34.03.
On v34.03, replace the VM image scan configuration.
GET /api/v34.03/settings/wildfire Get WildFire settings (v34.03) · Wild Fire Settings #
Ask an LLM
“What WildFire settings does the v34.03 API return?”
“Where do I check WildFire on the older 34.03 API?”
Tell an agent
Show WildFire settings from API v34.03.
Get WildFire configuration using the v34.03 endpoint.
POST /api/v34.04/settings/certificates Set custom CA certificate settings for clients · Add Certificate Settings for Clients Accessing a Custom CA #
Ask an LLM
“Can I upload a custom CA certificate for clients that access through a custom CA?”
“What certificate validity period in days can I set for custom-CA client access?”
Tell an agent
Set the custom CA certificate for client access to {accessCaCert}.
Set the custom-CA client certificate period to {certificatePeriodDays} days.
GET /api/v34.04/settings/certs Get Compute certificate settings · Get Certificate Settings for Prisma Cloud Compute #
Ask an LLM
“When does the Prisma Cloud Compute CA certificate expire?”
“Which SAN entries are set on the Compute console server certificate?”
Tell an agent
Show the Compute certificate settings.
Get the console SAN list and CA expiration from certificate settings.
POST /api/v34.04/settings/certs Set Compute certificate settings · Add Certificate Settings for Prisma Cloud Compute #
Ask an LLM
“Can I change the SAN list used for the Compute console server certificate?”
“Where do I set the CA certificate expiration for Compute?”
Tell an agent
Set the console server certificate SAN list to {consoleSAN}.
Set the Compute CA expiration to {caExpiration}.
POST /api/v34.04/settings/console-certificate Set console access certificate settings · Add Certificate Settings for Clients Accessing Prisma Cloud Compute #
Ask an LLM
“Can I use my own custom certificate for clients accessing the Compute console?”
“Is it possible to require certificate revocation checks for console clients?”
Tell an agent
Set the console CA certificate to {consoleCaCert}.
Turn console client certificate revocation checking to {checkRevocation}.
GET /api/v34.04/settings/custom-labels Get custom alert labels · Get Alert Labels #
Ask an LLM
“Which custom alert labels are configured in Compute?”
“What labels get attached to alerts right now?”
Tell an agent
Show my custom alert labels.
List the alert labels currently configured.
POST /api/v34.04/settings/custom-labels Set custom alert labels · Add Alert Labels #
Ask an LLM
“Can I add custom labels that show up on alerts?”
“Where do I define which labels are included with alerts?”
Tell an agent
Set the custom alert labels to {labels}.
Add alert labels {labels} to Compute.
GET /api/v34.04/settings/defender Get advanced Defender settings · Get Advanced Defender Settings #
Ask an LLM
“What are the advanced Defender settings in Prisma Cloud Compute?”
“Where can I review how Defenders are configured globally?”
Tell an agent
Show the advanced Defender settings.
Get the global Defender configuration.
GET /api/v34.04/settings/intelligence Get Intelligence Stream settings · Get Intelligence Stream Settings #
Ask an LLM
“Is the Intelligence Stream enabled, and what address does it use?”
“Am I using a custom endpoint for the Intelligence Stream feed?”
Tell an agent
Show the Intelligence Stream settings.
Check whether the Windows feed is enabled in Intelligence Stream.
POST /api/v34.04/settings/intelligence Configure the Intelligence Stream · Add Intelligence Stream Settings #
Ask an LLM
“Can I point the Intelligence Stream at a custom endpoint with its own CA?”
“Is there a way to disable log uploading for the Intelligence Stream?”
Tell an agent
Enable the Intelligence Stream at {address} with token {token}.
Use custom Intelligence Stream endpoint {customEndpoint} with credential {customEndpointCredentialID}.
GET /api/v34.04/settings/ldap Get LDAP integration settings · Get LDAP Integration Settings #
Ask an LLM
“Is LDAP integration enabled, and which server URL does it use?”
“What LDAP search bases are configured for users and groups?”
Tell an agent
Show the LDAP integration settings.
Get the LDAP server type and search base.
POST /api/v34.04/settings/ldap Configure LDAP integration · Add LDAP Integration Settings #
Ask an LLM
“Can I connect Compute to Active Directory or OpenLDAP for sign-in?”
“Where do I set the user and group search base for LDAP?”
Tell an agent
Enable LDAP against {url} of type {type} with search base {searchBase}.
Set the LDAP bind account to {accountUpn} and group search base to {groupSearchBase}.
GET /api/v34.04/settings/license Get the Compute license · Get Prisma Cloud Compute License #
Ask an LLM
“What Prisma Cloud Compute license is installed?”
“Where can I check my current Compute license details?”
Tell an agent
Show the installed Compute license.
Get my Prisma Cloud Compute license details.
POST /api/v34.04/settings/license Install a Compute license key · Add Prisma Cloud Compute License #
Ask an LLM
“Can I apply a new license key to Prisma Cloud Compute through the API?”
“Where do I enter a renewed Compute license key?”
Tell an agent
Install Compute license key {key}.
Replace the Compute license with key {key}.
GET /api/v34.04/settings/logging Get logging settings · Get Logging Settings #
Ask an LLM
“Is syslog forwarding turned on for Compute?”
“Which console address is used in logging and alert links?”
Tell an agent
Show the logging settings.
Get the syslog and stdout logging configuration.
POST /api/v34.04/settings/logging Configure logging settings · Add Logging Settings #
Ask an LLM
“Can I send Compute events to a syslog server?”
“Is it possible to include forensic event links in logs?”
Tell an agent
Set syslog logging to {syslog}.
Set the console address used in logs to {consoleAddress} and metrics collection to {enableMetricsCollection}.
GET /api/v34.04/settings/logon Get logon settings · Get Logon Settings #
Ask an LLM
“What is the session timeout for console logons?”
“Is strong password enforcement on for console users?”
Tell an agent
Show the logon settings.
Check whether basic auth is disabled for logons.
POST /api/v34.04/settings/logon Configure logon settings · Add Logon Settings #
Ask an LLM
“Can I shorten the console session timeout?”
“Is there a way to require strong passwords and disable basic auth?”
Tell an agent
Set the console session timeout to {sessionTimeoutSec} seconds.
Set strong password enforcement to {strongPassword} and basic auth disabled to {basicAuthDisabled}.
GET /api/v34.04/settings/oauth Get OAuth sign-in settings · Get OAuth Settings #
Ask an LLM
“Which OAuth identity provider is configured for console sign-in?”
“What auth and token URLs does the OAuth login use?”
Tell an agent
Show the OAuth settings.
Get the OAuth provider name and client ID.
POST /api/v34.04/settings/oauth Configure OAuth sign-in · Add OAuth Settings #
Ask an LLM
“Can users sign in to Compute with an OAuth 2.0 identity provider?”
“Where do I set the OAuth client ID, secret and group claim?”
Tell an agent
Enable OAuth sign-in with client {clientID} at auth URL {authURL} and token URL {tokenURL}.
Set the OAuth provider to {providerName} with group claim {groupClaim}.
GET /api/v34.04/settings/oidc Get OpenID Connect settings · Get Open ID Connect Settings #
Ask an LLM
“Is OpenID Connect login enabled on the console?”
“What OIDC issuer URL is configured?”
Tell an agent
Show the OpenID Connect settings.
Get the OIDC client ID and issuer URL.
POST /api/v34.04/settings/oidc Configure OpenID Connect sign-in · Add Open ID Connect Settings #
Ask an LLM
“Can I set up single sign-on to Compute with an OpenID Connect provider?”
“Which user claim does OIDC login map usernames from?”
Tell an agent
Enable OIDC sign-in with issuer {openIDIssuesURL} and client {clientID}.
Set the OIDC user claim to {userClaim} and group scope to {groupScope}.
GET /api/v34.04/settings/proxy Get Compute proxy settings · Get Proxy Settings of Prisma Cloud Compute #
Ask an LLM
“Is Compute sending traffic through an HTTP proxy?”
“Which addresses bypass the proxy?”
Tell an agent
Show the proxy settings.
Get the proxy address and no-proxy list.
POST /api/v34.04/settings/proxy Configure the Compute proxy · Add Proxy Settings for Prisma Cloud Compute #
Ask an LLM
“Can Defenders trust a TLS-intercepting proxy's CA?”
“Where do I set proxy credentials and exclusions?”
Tell an agent
Route traffic through proxy {httpProxy} excluding {noProxy}.
Set proxy user {user} and trust proxy CA {ca}.
GET /api/v34.04/settings/registry Get registry scanning settings · Get Registry Settings #
Ask an LLM
“Which container registries are configured for scanning?”
“What Harbor scanner and webhook paths are set for registry scanning?”
Tell an agent
Show the registry scan settings.
List the registries configured for image scanning.
POST /api/v34.04/settings/registry Add a registry to scan · Add Registry Settings #
Ask an LLM
“Can I add one more container registry to image scanning?”
“Is there a cap on how many images per repo get scanned when I add a registry?”
Tell an agent
Add registry {registry} of type {version} for scanning, repositories {repository}.
Add registry {registry} using credential {credentialID} and scan the newest {cap} images per repo.
PUT /api/v34.04/settings/registry Replace all registry scanning specifications · Update Registry Settings #
Ask an LLM
“Can I replace the whole list of registry scan specifications at once?”
“Is it possible to save registry settings without kicking off a scan?”
Tell an agent
Replace all registry scan specifications with {specifications}.
Overwrite the registry specifications with {specifications} and scan later {scanLater}.
GET /api/v34.04/settings/saml Get SAML sign-in settings · Get SAML Settings of Prisma Cloud Compute #
Ask an LLM
“Is SAML single sign-on enabled on Compute?”
“Which SAML issuer and SSO URL are configured?”
Tell an agent
Show the SAML settings.
Get the SAML issuer and audience.
POST /api/v34.04/settings/saml Configure SAML sign-in · Add SAML Settings for Prisma Cloud Compute #
Ask an LLM
“Can I set up SAML single sign-on for the Compute console?”
“Where do I set the SAML group attribute used for roles?”
Tell an agent
Enable SAML with IdP SSO URL {url}, issuer {issuer} and audience {audience}.
Set the SAML group attribute to {groupAttribute} and console URL to {consoleURL}.
GET /api/v34.04/settings/scan Get global scan settings · Get Global Scan Settings #
Ask an LLM
“How often are images, hosts and containers scanned?”
“Are negligible vulnerabilities shown in scan results?”
Tell an agent
Show the global scan settings.
Get the scan periods for images and registries.
POST /api/v34.04/settings/scan Configure global scan settings · Add Global Scan Settings #
Ask an LLM
“Can I change how often container images get scanned?”
“Is it possible to keep deleted registry images for a set number of days?”
Tell an agent
Set the image scan period to {imagesScanPeriodMs} ms.
Set registry scan retention to {registryScanRetentionDays} days and show negligible vulnerabilities {showNegligibleVulnerabilities}.
GET /api/v34.04/settings/tas Get TAS settings · Get TAS Settings #
Ask an LLM
“What are the Tanzu Application Service settings in Compute?”
“Where can I review TAS integration settings?”
Tell an agent
Show the TAS settings.
Get the Tanzu Application Service configuration.
POST /api/v34.04/settings/tas Save TAS settings · Add TAS Settings #
Ask an LLM
“Can I save Tanzu Application Service settings through the API?”
“Where do I update the TAS integration?”
Tell an agent
Save the TAS settings.
Update the Tanzu Application Service settings.
GET /api/v34.04/settings/telemetry Get telemetry settings · Get Telemetry Settings #
Ask an LLM
“Is telemetry currently enabled in Compute?”
“Does my console share telemetry?”
Tell an agent
Show the telemetry settings.
Check whether telemetry is on.
POST /api/v34.04/settings/telemetry Turn telemetry on or off · Enable or Disable Telemetry Settings #
Ask an LLM
“Can I opt out of telemetry?”
“Is there a setting to enable telemetry again?”
Tell an agent
Set telemetry enabled to {enabled}.
Disable telemetry by setting enabled to {enabled}.
POST /api/v34.04/settings/trusted-certificate Add one certificate to the trusted list · Add a Certificate to a Trusted Certificate List #
Ask an LLM
“Can I append a single PEM certificate to the trusted certificate list?”
“Where do I add one more trusted certificate without replacing the others?”
Tell an agent
Add certificate {certificate} to the trusted certificate list.
Trust this PEM certificate: {certificate}.
POST /api/v34.04/settings/trusted-certificates Configure trusted certificate settings · Add Trusted Certificate Settings #
Ask an LLM
“Can I turn on the trusted certificates feature and set the full list?”
“Is revocation checking available for trusted certificates?”
Tell an agent
Enable trusted certificates with list {certs}.
Set trusted certificate feature enabled {enabled} with revocation checking {checkRevocation}.
GET /api/v34.04/settings/vm Get VM image scan settings · Get VM Image Scan Settings #
Ask an LLM
“Which VM images are configured for scanning?”
“Where can I see VM image scan settings?”
Tell an agent
Show the VM image scan settings.
List the VM image scan rules.
PUT /api/v34.04/settings/vm Update VM image scan settings · Update VM Image Scan Settings #
Ask an LLM
“Can I change which VM images get scanned?”
“Is updating VM image scan settings a full replacement?”
Tell an agent
Update the VM image scan settings.
Replace the VM image scan configuration.
GET /api/v34.04/settings/wildfire Get WildFire settings · Wild Fire Settings #
Ask an LLM
“Is WildFire malware analysis enabled in Compute?”
“Where do I see the WildFire settings?”
Tell an agent
Show the WildFire settings.
Get the current WildFire configuration.
GET /settings/enterprise Get enterprise settings for the tenant · Enterprise Settings - GET #
Ask an LLM
“What enterprise-wide settings are configured for my Prisma Cloud tenant?”
“Are audit logs and alarms enabled at the tenant level?”
Tell an agent
Show my tenant's enterprise settings.
Get the enterprise session timeout and access key maximum validity.
POST /settings/enterprise Configure enterprise settings for the tenant · Enterprise Settings - POST #
Ask an LLM
“Can I require a note whenever someone dismisses an alert?”
“How do I limit how long access keys stay valid across the tenant?”
Tell an agent
Set the browser session timeout to {sessionTimeout} and access key max validity to {accessKeyMaxValidity} days.
Require an alert dismissal note: {requireAlertDismissalNote}.
POST /appid/api/v1/satellite Add Satellite cluster details · Add Satellite Details #
Ask an LLM
“How do I register a new Satellite cluster with its asset ID?”
“Can I include configuration when adding Satellite details?”
Tell an agent
Add Satellite details for cluster asset {clusterAssetId} in tenant {tenant}.
Register cluster {clusterAssetId} as a Satellite for tenant {tenant} with config {config}.
GET /appid/api/v1/satellite List Satellite cluster details · List Cluster Details #
Ask an LLM
“Which Satellite clusters are registered for my Prisma tenant?”
“Where can I see the details of my onboarded Satellite clusters?”
Tell an agent
List Satellite clusters for tenant {tenant}.
Show all Satellite cluster details for Prisma tenant {tenant}.
DELETE /appid/api/v1/satellite/{id} Delete Satellite details · Delete Satellite Details #
Ask an LLM
“How do I remove a Satellite cluster registration?”
“Is deleting Satellite details done by the Satellite record's ID?”
Tell an agent destructive · confirm first
Delete Satellite {id} for tenant {tenant}.
Remove the Satellite cluster record {id} from tenant {tenant}.
GET /api/settings/log-forwarding Get SaaS Security log forwarding settings · Palo Alto Networks Get Log Forwarding Settings #
Ask an LLM
“Where are my SaaS Security logs being forwarded to?”
“Which syslog servers, SIEM integrations or storage buckets receive SaaS Security logs?”
Tell an agent
Show the SaaS Security log forwarding configuration.
List the enabled log forwarding destinations for my SaaS Security tenant.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-settings-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-settings-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-settings-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Settings API
  x-refined-note:
  - x-description-source differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Settings across 5 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-cspm-consolidated-spec-cspm-spec-openapi.json, palo-alto-cspm-satellite-openapi.json, palo-alto-saas-security-api-openapi-original.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
- url: https://api.aperture.paloaltonetworks.com
  description: SaaS Security (Aperture) API production server.
tags:


# --- truncated at 32 KB (121 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-settings-api-openapi.yml