Palo Alto Networks Tenant API

The Tenant API API from Palo Alto Networks — 6 operation(s) for tenant api.

Business capability
Tenant Provisioning & Lifecycle BC-4230.10

Operations 6

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /mt/pab/tenant Create a managed tenant · Create a new tenant #
Ask an LLM
“How do I provision a new managed tenant in a specific region?”
“Can a new tenant use the MSP identity provider or its own?”
Tell an agent
Create tenant {tenant_name} under {root_tsg_id} in region {region} for {user_quantity} users with {identity_provider_type}, serial {serial_number}.
Provision tenant {tenant_name} in {region} using directory {directory} and groups {user_groups}.
GET /mt/pab/tenant/auth_profile List tenant authentication profiles · Get authentication profiles #
Ask an LLM
“Which authentication profiles can I assign to a new tenant?”
“What auth profiles exist for my tenant service group?”
Tell an agent
List the authentication profiles for my tenant service group.
Show available auth profiles for tenant setup.
GET /mt/pab/tenant/directories List available directories · Get available directories #
Ask an LLM
“Which user directories are available for tenant onboarding?”
“What directories can a new tenant pull users from?”
Tell an agent
List available directories for my tenant service group.
Show the directories I can attach to a tenant.
GET /mt/pab/tenant/licenses Get tenant license utilization · Get license utilization information #
Ask an LLM
“How many licenses have we used and how many remain?”
“Do I have enough license capacity to create another tenant?”
Tell an agent
Show license utilization for my tenant service group.
Get remaining license availability.
GET /mt/pab/tenant/region List tenant deployment regions · Get available regions #
Ask an LLM
“In which regions can I deploy a new tenant?”
“Is a given country region available for tenant deployment?”
Tell an agent
List regions available for tenant deployment.
Show where I can deploy a tenant.
POST /mt/pab/tenant/user_group List user groups in a directory · Get user groups for a directory #
Ask an LLM
“Which user groups exist in a particular directory?”
“Can I see the groups I could assign when onboarding a tenant from one directory?”
Tell an agent
List user groups in directory {directory_name}.
Show the groups available from directory {directory_name}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-tenant-api-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-tenant-api-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Prisma Browser for MSP Tenant API
  version: '1.0'
  description: The Prisma Browser for MSP API provides a suite of endpoints to automate the management of security services for the SMB market.
tags:
- name: Tenant API
paths:
  /mt/pab/tenant:
    post:
      summary: Create a new tenant
      description: Creates a new tenant with the specified configuration including region, identity provider, and user groups.
      operationId: PostMtPabTenant
      responses:
        '200':
          description: Tenant created successfully
          content:
            application/json: {}
        '400':
          description: Invalid request payload or validation failed
        '404':
          description: Required resource not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Tenant API
      requestBody:
        description: Tenant creation request payload with all required configuration details
        content:
          application/json:
            examples:
              MSP IDP Tenant:
                description: Create a tenant using MSP Identity Provider
                value:
                  tenant_vertical: High Tech
                  auth_profile_id: test_profile
                  directory: pab_standalone_test_directory
                  identity_provider_type: MSP IDP
                  region: us
                  root_tsg_id: '1868805847'
                  tenant_name: test_tenant_1
                  serial_number: SN12345678
                  user_groups:
                  - Everyone
                  user_quantity: 3
            schema:
              $ref: '#/components/schemas/CreateTenantRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/tenant/auth_profile:
    get:
      summary: Get authentication profiles
      description: Retrieves all available authentication profiles for the tenant service group.
      operationId: GetMtPabTenantAuth_profile
      responses:
        '200':
          description: Successfully retrieved authentication profiles
          content:
            application/json: {}
        '400':
          description: Invalid request
        '404':
          description: Authentication profiles not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Tenant API
      security:
      - authKey: []
  /mt/pab/tenant/directories:
    get:
      summary: Get available directories
      description: Retrieves a list of all available directories for the tenant service group.
      operationId: GetMtPabTenantDirectories
      responses:
        '200':
          description: Successfully retrieved directories
          content:
            application/json: {}
        '400':
          description: Invalid request
        '404':
          description: Directories not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Tenant API
      security:
      - authKey: []
  /mt/pab/tenant/licenses:
    get:
      summary: Get license utilization information
      description: Retrieves current license utilization metrics and availability for the tenant service group.
      operationId: GetMtPabTenantLicenses
      responses:
        '200':
          description: Successfully retrieved license utilization
          content:
            application/json: {}
        '400':
          description: Invalid request
        '404':
          description: License information not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Tenant API
      security:
      - authKey: []
  /mt/pab/tenant/region:
    get:
      summary: Get available regions
      description: Retrieves a list of all available regions for tenant deployment.
      operationId: GetMtPabTenantRegion
      responses:
        '200':
          description: Successfully retrieved regions
          content:
            application/json: {}
        '400':
          description: Invalid request
        '404':
          description: Regions not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Tenant API
      security:
      - authKey: []
  /mt/pab/tenant/user_group:
    post:
      summary: Get user groups for a directory
      description: Retrieves all user groups associated with the specified directory name.
      operationId: PostMtPabTenantUser_group
      responses:
        '200':
          description: Successfully retrieved user groups
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Directory not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Tenant API
      requestBody:
        description: Directory name for which to retrieve user groups
        content:
          application/json:
            examples:
              Example Request:
                description: Get user groups for the specified directory
                value:
                  directory_name: pab_test_directory
            schema:
              $ref: '#/components/schemas/UserGroupRequest'
        required: true
      security:
      - authKey: []
components:
  schemas:
    UserGroupRequest:
      type: object
      required:
      - directory_name
      examples:
      - directory_name: pab_test_directory
      description: Request payload for retrieving user groups from a directory
      properties:
        directory_name:
          type: string
          minLength: 1
          examples:
          - pab_test_directory
          description: Name of the directory from which to retrieve user groups
    CreateTenantRequest:
      type: object
      required:
      - root_tsg_id
      - tenant_name
      - serial_number
      - region
      - user_quantity
      - identity_provider_type
      description: Request payload for creating a new PAB tenant
      properties:
        root_tsg_id:
          type: string
          minLength: 1
          examples:
          - '1868805847'
          description: Root Tenant Service Group ID under which the new tenant will be created
        tenant_name:
          type: string
          minLength: 1
          examples:
          - test_tenant_1
          description: Name of the tenant to be created
        tenant_vertical:
          type: string
          examples:
          - High Tech
          description: Vertical or industry type for the tenant
        serial_number:
          type: string
          minLength: 1
          examples:
          - SN12345678
          description: Serial number for the tenant deployment
        region:
          type: string
          minLength: 1
          examples:
          - us
          description: 'SLS region where the tenant will be deployed. Valid values: us, eu, jp, uk, in, sg, ca, id, au, de'
        user_quantity:
          type: integer
          format: int32
          examples:
          - 3
          description: Number of user licenses to allocate to this tenant
          minimum: 1
        identity_provider_type:
          type: string
          minLength: 1
          examples:
          - MSP IDP
          description: 'Type of identity provider to use for authentication. Valid values: ''MSP IDP'', ''Tenant IDP'''
        directory:
          type: string
          examples:
          - pab_standalone_test_directory
          description: Directory name for user authentication (required when using MSP IDP)
        auth_profile_id:
          type: string
          examples:
          - test_profile
          description: Authentication profile ID to use for the tenant
        user_groups:
          type: array
          examples:
          - - Everyone
          items:
            type: string
          description: Array of user group names to be assigned to the tenant
  securitySchemes:
    authKey: {}