Palo Alto Networks

Palo Alto Networks Waas API

The Waas API from Palo Alto Networks — 2 operation(s) for waas.

GitHub OpenAPI

Operations 2

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /api/v34.03/waas/openapi-scans Scan an OpenAPI file for WAAS findings (v34.03) · Scan OpenAPI Specification File for WAAS Observations #
Ask an LLM
“Can the v34.03 API check my OpenAPI spec for WAAS observations?”
“Is there an older v34.03 endpoint for scanning an API definition file?”
Tell an agent
Scan my OpenAPI specification for WAAS observations using API v34.03.
Run a v34.03 WAAS OpenAPI scan on this spec file.
POST /api/v34.04/waas/openapi-scans Scan an OpenAPI file for WAAS findings (v34.04) · Scan OpenAPI Specification File for WAAS Observations #
Ask an LLM
“How do I find WAAS issues in an OpenAPI definition with the current v34.04 API?”
“What observations does a v34.04 OpenAPI scan return?”
Tell an agent
Submit this OpenAPI file to the v34.04 WAAS scanner.
Check my API spec for web application and API security observations on v34.04.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-waas-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-waas-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-waas-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Waas API
  x-description-source: desc/intro.md
  version: '1.0'
  description: 'Operations tagged Waas across 2 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json. Each path carries the servers of the definition it was published in.'
tags:
- name: Waas
paths:
  /api/v34.03/waas/openapi-scans:
    post:
      description: 'Scan OpenAPI Specification File for WAAS Observations. POST /api/v34.03/waas/openapi-scans on the Waas API. Documented responses: 200.'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/waas.OpenAPIScan'
          description: OpenAPIScan represents the OpenAPI file scan
        default:
          description: ''
      tags:
      - Waas
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: post-waas-openapi-scans
      summary: Scan OpenAPI Specification File for WAAS Observations
      x-description-source: desc/waas/openapi-scans_post.md
  /api/v34.04/waas/openapi-scans:
    post:
      description: 'Scan OpenAPI Specification File for WAAS Observations. POST /api/v34.04/waas/openapi-scans on the Waas API. Documented responses: 200.'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/waas.OpenAPIScan'
          description: OpenAPIScan represents the OpenAPI file scan
        default:
          description: ''
      tags:
      - Waas
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: postApiV3404WaasOpenapiScans
      summary: Scan OpenAPI Specification File for WAAS Observations
      x-description-source: desc/waas/openapi-scans_post.md
      x-operation-id-source: normalized
      x-operation-id-original: post-waas-openapi-scans
components:
  schemas:
    waas.OpenAPIScanInfo:
      description: OpenAPIScanInfo is the OpenAPI scan info
      properties:
        appID:
          description: 'AppID is the WAAS app id the file was imported from.

            '
          type: string
        policyType:
          $ref: '#/components/schemas/common.PolicyType'
        ruleID:
          description: 'RuleID is the WAAS rule id the file was imported from.

            '
          type: string
        source:
          $ref: '#/components/schemas/waas.OpenAPIScanSource'
      type: object
    waas.OpenAPIScanIssueResult:
      description: 'OpenAPIScanIssueResult represents a specific issue result in the OpenAPI spec file

        Fields reflect the KICS rego queries result,

        Example: https://github.com/Checkmarx/kics/blob/master/assets/queries/openAPI/general/items_undefined/query.rego'
      properties:
        _id:
          description: 'ID is the issue result ID.

            '
          type: integer
        category:
          description: 'Category is the issue category.

            '
          type: string
        descriptionText:
          description: 'DescriptionText is the issue description.

            '
          type: string
        descriptionUrl:
          description: 'DescriptionURL is the issue information url.

            '
          type: string
        id:
          description: 'ID is the unique identifier of the issue metadata.

            '
          type: string
        override:
          additionalProperties:
            $ref: '#/components/schemas/waas.OpenAPIScanIssueMetadata'
          description: 'Override is the list of possible override fields by OpenAPI version.

            '
          type: object
        queryName:
          description: 'Name is the issue name.

            '
          type: string
        searchKey:
          description: 'SearchKey is the issue location in the spec file.

            '
          type: string
        severity:
          $ref: '#/components/schemas/waas.OpenAPIScanIssueSeverity'
        status:
          description: 'Status is the issue status.

            '
          type: string
      type: object
    waas.OpenAPIScanIssueSeverity:
      description: OpenAPIScanIssueSeverity is the OpenAPI spec file issue severity
      enum:
      - - INFO
        - LOW
        - MEDIUM
        - HIGH
      type: string
    waas.OpenAPIScanIssueMetadata:
      description: 'OpenAPIScanIssueMetadata represents the static metadata of an API definition issue

        Fields reflect the KICS metadata,

        Example: https://github.com/Checkmarx/kics/blob/master/assets/queries/openAPI/general/items_undefined/metadata.json'
      properties:
        category:
          description: 'Category is the issue category.

            '
          type: string
        descriptionText:
          description: 'DescriptionText is the issue description.

            '
          type: string
        descriptionUrl:
          description: 'DescriptionURL is the issue information url.

            '
          type: string
        id:
          description: 'ID is the unique identifier of the issue metadata.

            '
          type: string
        override:
          additionalProperties:
            $ref: '#/components/schemas/waas.OpenAPIScanIssueMetadata'
          description: 'Override is the list of possible override fields by OpenAPI version.

            '
          type: object
        queryName:
          description: 'Name is the issue name.

            '
          type: string
        severity:
          $ref: '#/components/schemas/waas.OpenAPIScanIssueSeverity'
      type: object
    waas.OpenAPIScanIssuesSeverityDistribution:
      description: OpenAPIScanIssuesSeverityDistribution counts the number of issues per severity type
      properties:
        high:
          description: 'High is the high severity issues count.

            '
          type: integer
        info:
          description: 'Info is the info severity issues count.

            '
          type: integer
        low:
          description: 'Low is the low severity issues count.

            '
          type: integer
        medium:
          description: 'Medium is the medium severity issues count.

            '
          type: integer
      type: object
    waas.OpenAPIScan:
      description: OpenAPIScan represents the OpenAPI file scan
      properties:
        _id:
          description: 'ID is the scan identifier.

            '
          type: string
        issueResults:
          description: 'IssueResults are the scanned issues results.

            '
          items:
            $ref: '#/components/schemas/waas.OpenAPIScanIssueResult'
          type: array
        scanInfo:
          $ref: '#/components/schemas/waas.OpenAPIScanInfo'
        scanStartTime:
          description: 'ScanStartTime is the scan started.

            '
          format: date-time
          type: string
        severityDistribution:
          $ref: '#/components/schemas/waas.OpenAPIScanIssuesSeverityDistribution'
        specInfo:
          $ref: '#/components/schemas/waas.OpenAPISpecInfo'
      type: object
    byte:
      format: byte
      type: string
    waas.OpenAPISpecInfo:
      description: OpenAPISpecInfo is the OpenAPI spec info
      properties:
        content:
          description: 'Content is the OpenAPI spec content.

            '
          items:
            $ref: '#/components/schemas/byte'
          type: array
        contentType:
          description: 'ContentType is the OpenAPI spec file content type.

            '
          type: string
        fileName:
          description: 'FileName is the OpenAPI spec file name.

            '
          type: string
      type: object
    common.PolicyType:
      description: PolicyType represents the type of the policy
      enum:
      - - containerVulnerability
        - containerCompliance
        - ciImagesVulnerability
        - ciImagesCompliance
        - hostVulnerability
        - hostCompliance
        - vmVulnerability
        - vmCompliance
        - serverlessCompliance
        - ciServerlessCompliance
        - serverlessVulnerability
        - ciServerlessVulnerability
        - containerRuntime
        - appEmbeddedRuntime
        - containerAppFirewall
        - hostAppFirewall
        - outOfBandAppFirewall
        - agentlessAppFirewall
        - serverObserverAppFirewall
        - appEmbeddedAppFirewall
        - serverlessAppFirewall
        - networkFirewall
        - secrets
        - hostRuntime
        - serverlessRuntime
        - kubernetesAudit
        - trust
        - admission
        - codeRepoCompliance
        - ciCodeRepoCompliance
        - ciCodeRepoVulnerability
        - codeRepoVulnerability
      type: string
    waas.OpenAPIScanSource:
      description: OpenAPIScanSource is the scan trigger source
      enum:
      - - app
        - cli
        - manual
      type: string
x-refined-from:
- palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json
- palo-alto-compute-openapi-34-04-145-sh-openapi.json