Palo Alto Networks

Palo Alto Networks Vulnerability Protection Profiles API

Vulnerability Protection Profiles

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /vulnerability-protection-profiles List vulnerability protection profiles · List vulnerability protection profiles #
Ask an LLM
“Which vulnerability protection profiles are defined in Strata Cloud Manager?”
“Can I list the vulnerability profiles scoped to a specific folder, snippet or device?”
Tell an agent
List vulnerability protection profiles in folder {folder}.
Find the vulnerability protection profile named {name}.
POST /vulnerability-protection-profiles Create a vulnerability protection profile · Create a vulnerability protection profile #
Ask an LLM
“How do I create a new vulnerability protection profile for my security policy?”
“Can I add threat exceptions when defining a new vulnerability profile?”
Tell an agent
Create a vulnerability protection profile named {name} with rules {rules}.
Create vulnerability profile {name} with threat exceptions {threat_exception}.
GET /vulnerability-protection-profiles/{id} Get a vulnerability protection profile · Get a vulnerability protection profile #
Ask an LLM
“What rules and threat exceptions does a particular vulnerability protection profile contain?”
“How do I fetch one vulnerability profile by its UUID?”
Tell an agent
Show vulnerability protection profile {id}.
Retrieve the rules of vulnerability profile {id}.
PUT /vulnerability-protection-profiles/{id} Update a vulnerability protection profile · Update an vulnerability protection profile #
Ask an LLM
“Can I change the rules on a vulnerability protection profile that already exists?”
“How do I add a threat exception to an existing vulnerability profile?”
Tell an agent
Replace the rules on existing vulnerability profile {id} ({name}) with {rules}.
Update the threat exceptions of vulnerability profile {id} named {name} to {threat_exception}.
DELETE /vulnerability-protection-profiles/{id} Delete a vulnerability protection profile · Delete a vulnerability protection profile #
Ask an LLM
“How do I remove a vulnerability protection profile I no longer use?”
“Can a vulnerability profile be deleted by its UUID?”
Tell an agent destructive · confirm first
Delete vulnerability protection profile {id}.
Remove the vulnerability profile with UUID {id}.
GET /sse/config/v1/vulnerability-protection-profiles List vulnerability protection profiles · List vulnerability protection profiles #
Ask an LLM
“Which vulnerability protection profiles are configured in my folder?”
“Can I find a vulnerability protection profile by name?”
Tell an agent
List vulnerability protection profiles in folder {folder} through the SSE config v1 path.
Find vulnerability protection profile {name} in folder {folder}.
POST /sse/config/v1/vulnerability-protection-profiles Create a vulnerability protection profile · Create a vulnerability protection profile #
Ask an LLM
“How do I create a profile that blocks exploit attempts against known vulnerabilities?”
“Can I include threat exceptions in a new vulnerability protection profile?”
Tell an agent
Create vulnerability protection profile {name} in folder {folder}.
Add vulnerability protection profile {name} in {folder} with rules {rules}.
DELETE /sse/config/v1/vulnerability-protection-profiles/{id} Delete a vulnerability protection profile · Delete an vulnerability protection profile #
Ask an LLM
“How do I remove a vulnerability protection profile?”
“Can a vulnerability profile be deleted by ID?”
Tell an agent destructive · confirm first
Delete vulnerability protection profile {id} using the SSE config v1 endpoint.
Remove vulnerability profile {id}.
GET /sse/config/v1/vulnerability-protection-profiles/{id} Get a vulnerability protection profile · Get a vulnerability protection profile by ID #
Ask an LLM
“What rules are in a specific vulnerability protection profile?”
“Can I look up a vulnerability protection profile by ID?”
Tell an agent
Show vulnerability protection profile {id} from the SSE config v1 path.
Get the threat exceptions in vulnerability profile {id}.
PUT /sse/config/v1/vulnerability-protection-profiles/{id} Edit a vulnerability protection profile · Edit an vulnerability protection profile #
Ask an LLM
“How do I change the rules in an existing vulnerability protection profile?”
“Can I add a threat exception to a vulnerability profile I already use?”
Tell an agent
Update vulnerability protection profile {id} named {name} with rules {rules}.
Add threat exceptions {threat_exception} to vulnerability profile {id} named {name}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-vulnerability-protection-profiles-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-vulnerability-protection-profiles-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-vulnerability-protection-profiles-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 2.0.0
  title: Security Services Vulnerability Protection Profiles API
  description: These APIs are used for defining and managing security services configurations within Strata Cloud Manager.
  termsOfService: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
  contact:
    email: support@paloaltonetworks.com
    name: Palo Alto Networks Technical Support
    url: https://support.paloaltonetworks.com
  license:
    name: MIT
    url: https://opensource.org/license/mit
servers:
- url: https://api.strata.paloaltonetworks.com/config/security/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
security:
- scmToken: []
tags:


# --- truncated at 32 KB (33 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-vulnerability-protection-profiles-api-openapi.yml