Palo Alto Networks

Palo Alto Networks Widgets API

The Widgets API from Palo Alto Networks — 5 operation(s) for widgets.

GitHub OpenAPI

Operations 5

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /commandcenter/api/v1/metrics/alert-count-by-resolution-reason Count resolved alerts by resolution reason · Get Alerts Count By Resolution Reason #
Ask an LLM
“Why are my alerts being resolved, broken down by reason?”
“How many alerts were resolved for each resolution reason in a time range?”
Tell an agent
Count resolved alerts by resolution reason over {timeRange}.
Break down resolved alerts by reason for {timeRange} with filters {filters}.
POST /commandcenter/api/v1/metrics/alert-mean-resolution-time Get mean alert resolution time by severity · Get Mean Resolution Time #
Ask an LLM
“How long does it take on average to resolve alerts of each severity?”
“What's our mean time to resolve alerts over a period?”
Tell an agent
Get the mean alert resolution time per severity for {timeRange}.
Show average days to resolve alerts over {timeRange} using filters {filters}.
POST /adoptionadvisor/api/v2/compute/vulnerabilities/trend Get the vulnerabilities trend over time · Get Vulnerabilities Trend #
Ask an LLM
“Are we discovering more vulnerabilities than we resolve over time?”
“What does the vulnerability trend look like across images, hosts, functions and containers?”
Tell an agent
Get the vulnerabilities trend for {timeRange}.
Show vulnerabilities discovered versus resolved over time.
POST /adoptionadvisor/api/v2/cspm/riskyasset/trend Get the trend of assets generating alerts · Get Assets with Alerts #
Ask an LLM
“Which cloud assets are generating alerts?”
“How has the number of risky assets with alerts changed over time?”
Tell an agent
Get the assets generating alerts over {timeRange}.
List risky assets with alerts matching {filters}.
POST /adoptionadvisor/api/v2/compute/discovered-secured/trend Compare discovered versus secured resources · Get Discovered and Secured Resources #
Ask an LLM
“How many discovered resources are actually protected by defenders?”
“What's the gap between resources found by Cloud Discovery and those secured?”
Tell an agent
Get discovered versus secured resources for {timeRange}.
Show how many discovered resources are secured by defenders.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-widgets-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-widgets-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-widgets-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Widgets API
  version: '1.0'
  description: 'Operations tagged Widgets across 2 of this provider''s published API definitions: palo-alto-cspm-commandcentermicroservice-openapi.json, palo-alto-cspm-widgets-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:
- name: Widgets
  x-public: 'true'
  x-ga: 24.1.2
paths:
  /commandcenter/api/v1/metrics/alert-count-by-resolution-reason:
    post:
      tags:
      - Widgets
      summary: Get Alerts Count By Resolution Reason
      description: 'The API returns number of resolved alerts grouped by the resolution reason.

        You must have **Alert_READ** permission to access this endpoint.'
      operationId: value-widgets-alert-metrics-resolution-reason
      parameters: []
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/WidgetApiRequestResolutionReasonFilterRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResolutionReasonResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: Too Many Requests
      x-public: 'true'
      x-ga: 24.1.2
      security:
      - x-redlock-auth: []
    servers:
    - url: https://api.prismacloud.io
    - url: https://api2.prismacloud.io
    - url: https://api3.prismacloud.io
    - url: https://api4.prismacloud.io
    - url: https://api.anz.prismacloud.io
    - url: https://api.eu.prismacloud.io
    - url: https://api2.eu.prismacloud.io
    - url: https://api.gov.prismacloud.io
    - url: https://api.prismacloud.cn
    - url: https://api.ca.prismacloud.io
    - url: https://api.sg.prismacloud.io
    - url: https://api.uk.prismacloud.io
    - url: https://api.ind.prismacloud.io
    - url: https://api.jp.prismacloud.io
    - url: https://api.fr.prismacloud.io
  /commandcenter/api/v1/metrics/alert-mean-resolution-time:
    post:
      tags:
      - Widgets
      summary: Get Mean Resolution Time
      description: 'The API returns the mean resolution time of the alert in days per severity based on the filters.

        You must have **Alert_READ** permission to access this endpoint.'
      operationId: value-widgets-alert-metrics
      parameters: []
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/WidgetApiRequestMeanResolutionTimeFilterRequest'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MeanResolutionResponse'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '429':
          description: Too Many Requests
      x-public: 'true'
      x-ga: 24.1.2
      security:
      - x-redlock-auth: []
    servers:
    - url: https://api.prismacloud.io
    - url: https://api2.prismacloud.io
    - url: https://api3.prismacloud.io
    - url: https://api4.prismacloud.io
    - url: https://api.anz.prismacloud.io
    - url: https://api.eu.prismacloud.io
    - url: https://api2.eu.prismacloud.io
    - url: https://api.gov.prismacloud.io
    - url: https://api.prismacloud.cn
    - url: https://api.ca.prismacloud.io
    - url: https://api.sg.prismacloud.io
    - url: https://api.uk.prismacloud.io
    - url: https://api.ind.prismacloud.io
    - url: https://api.jp.prismacloud.io
    - url: https://api.fr.prismacloud.io
  /adoptionadvisor/api/v2/compute/vulnerabilities/trend:
    post:
      description: Get vulnerabilities discovered and resolved over time across images, hosts, functions, and containers for the impacted resources.
      operationId: value-widgets-get-vulnerabilities-trend
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CWPWidgetRequestModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                $ref: '#/components/schemas/VulnerabilitiesTrendResponse'
          description: successful operation
        '400':
          description: bad_request
        '401':
          description: unauthorized_access
      security:
      - x-redlock-auth: []
      summary: Get Vulnerabilities Trend
      tags:
      - Widgets
      x-ga: 24.1.1
      x-public: 'true'
    servers:
    - url: https://api.prismacloud.io
    - url: https://api2.prismacloud.io
    - url: https://api3.prismacloud.io
    - url: https://api4.prismacloud.io
    - url: https://api.anz.prismacloud.io
    - url: https://api.eu.prismacloud.io
    - url: https://api2.eu.prismacloud.io
    - url: https://api.gov.prismacloud.io
    - url: https://api.prismacloud.cn
    - url: https://api.ca.prismacloud.io
    - url: https://api.sg.prismacloud.io
    - url: https://api.uk.prismacloud.io
    - url: https://api.ind.prismacloud.io
    - url: https://api.jp.prismacloud.io
    - url: https://api.fr.prismacloud.io
  /adoptionadvisor/api/v2/cspm/riskyasset/trend:
    post:
      description: Get the list of assets generating alerts.
      operationId: value-widgets-get-assets-with-alerts
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AssetsWithAlertsRequestModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                $ref: '#/components/schemas/AssetsWithUrgentAlerts'
          description: successful operation
        '400':
          description: bad_request
        '401':
          description: unauthorized_access
      security:
      - x-redlock-auth: []
      summary: Get Assets with Alerts
      tags:
      - Widgets
      x-ga: 24.1.1
      x-public: 'true'
    servers:
    - url: https://api.prismacloud.io
    - url: https://api2.prismacloud.io
    - url: https://api3.prismacloud.io
    - url: https://api4.prismacloud.io
    - url: https://api.anz.prismacloud.io
    - url: https://api.eu.prismacloud.io
    - url: https://api2.eu.prismacloud.io
    - url: https://api.gov.prismacloud.io
    - url: https://api.prismacloud.cn
    - url: https://api.ca.prismacloud.io
    - url: https://api.sg.prismacloud.io
    - url: https://api.uk.prismacloud.io
    - url: https://api.ind.prismacloud.io
    - url: https://api.jp.prismacloud.io
    - url: https://api.fr.prismacloud.io
  /adoptionadvisor/api/v2/compute/discovered-secured/trend:
    post:
      description: Get resources detected by Cloud Discovery as well as the resources secured by deployed defenders.
      operationId: value-widgets-get-discovered-vs-secured
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CWPWidgetRequestModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                $ref: '#/components/schemas/DiscoverVsSecuredResponse'
          description: successful operation
        '400':
          description: bad_request
        '401':
          description: unauthorized_access
      security:
      - x-redlock-auth: []
      summary: Get Discovered and Secured Resources
      tags:
      - Widgets
      x-ga: 24.1.1
      x-public: 'true'
    servers:
    - url: https://api.prismacloud.io
    - url: https://api2.prismacloud.io
    - url: https://api3.prismacloud.io
    - url: https://api4.prismacloud.io
    - url: https://api.anz.prismacloud.io
    - url: https://api.eu.prismacloud.io
    - url: https://api2.eu.prismacloud.io
    - url: https://api.gov.prismacloud.io
    - url: https://api.prismacloud.cn
    - url: https://api.ca.prismacloud.io
    - url: https://api.sg.prismacloud.io
    - url: https://api.uk.prismacloud.io
    - url: https://api.ind.prismacloud.io
    - url: https://api.jp.prismacloud.io
    - url: https://api.fr.prismacloud.io
components:
  schemas:
    ResolutionReasonFilterRequest:
      type: object
      properties:
        name:
          description: Filter name.
          type: string
          allOf:
          - $ref: '#/components/schemas/ResolutionReasonFilter'
        operator:
          description: Only operator allowed for this filter is '='.
          type: string
        value:
          description: Filter value.
          type: string
    MeanResolutionTimeMetric:
      type: object
      properties:
        severity:
          description: Severity name
          type: string
        numberOfDays:
          format: double
          description: Mean resolution time in days
          type: number
    ResolutionReasonCountMetric:
      type: object
      properties:
        resolutionReason:
          description: Reason for resolution
          type: string
        count:
          format: int32
          description: Alert count for the resolution reason
          type: integer
    MeanResolutionResponse:
      type: object
      properties:
        startTime:
          format: int64
          description: Start time of the time range
          type: integer
        endTime:
          format: int64
          description: End time of the time range
          type: integer
        lastScanTs:
          format: int64
          description: Last scan time of the backend job
          type: integer
        dataAvailableFrom:
          format: int64
          description: Time since when the data is aggregated in the response
          type: integer
        value:
          description: Alert metrics details
          type: array
          items:
            $ref: '#/components/schemas/MeanResolutionTimeMetric'
    WidgetApiRequestResolutionReasonFilterRequest:
      required:
      - timeRange
      type: object
      properties:
        filters:
          description: List of filters that can be applied for the API
          type: array
          items:
            $ref: '#/components/schemas/ResolutionReasonFilterRequest'
        timeRange:
          description: Time range for which the API is requested
          type: object
          allOf:
          - $ref: '#/components/schemas/WidgetRelativeTimeRangeConfig'
    ResolutionReasonFilter:
      enum:
      - alert.resolutionReason
      - policy.severity
      - account.groupId
      - policy.complianceStandardId
      - cloud.type
      - policy.type
      - policy.id
      - policy.category
      - cloud.accountId
      type: string
    MeanResolutionTimeFilter:
      enum:
      - policy.severity
      - account.groupId
      - policy.complianceStandardId
      - cloud.type
      - policy.type
      - policy.id
      - policy.category
      - cloud.accountId
      type: string
    WidgetTimeUnit:
      enum:
      - hour
      - week
      - month
      - year
      type: string
    WidgetRelativeTimeDuration:
      type: object
      properties:
        unit:
          $ref: '#/components/schemas/WidgetTimeUnit'
        amount:
          format: int32
          type: integer
    MeanResolutionTimeFilterRequest:
      type: object
      properties:
        name:
          description: Filter name.
          type: string
          allOf:
          - $ref: '#/components/schemas/MeanResolutionTimeFilter'
        operator:
          description: Only operator allowed for this filter is '='.
          type: string
        value:
          description: Filter value.
          type: string
    Error:
      type: object
      properties:
        code:
          type: string
        message:
          type: string
        target:
          type: string
    WidgetApiRequestMeanResolutionTimeFilterRequest:
      required:
      - timeRange
      type: object
      properties:
        filters:
          description: List of filters that can be applied for the API
          type: array
          items:
            $ref: '#/components/schemas/MeanResolutionTimeFilterRequest'
        timeRange:
          description: Time range for which the API is requested
          type: object
          allOf:
          - $ref: '#/components/schemas/WidgetRelativeTimeRangeConfig'
    WidgetRelativeTimeRangeConfig:
      type: object
      properties:
        type:
          description: 'Type of time ranges supported: [relative]'
          type: string
        value:
          description: 'Relative time supporting past 24 hour, 7 days, 1 month, 3 months, 6 months and 1 year. '
          type: object
          allOf:
          - $ref: '#/components/schemas/WidgetRelativeTimeDuration'
    ResolutionReasonResponse:
      type: object
      properties:
        startTime:
          format: int64
          description: Start time of the time range
          type: integer
        endTime:
          format: int64
          description: End time of the time range
          type: integer
        lastScanTs:
          format: int64
          description: Last scan time of the backend job
          type: integer
        dataAvailableFrom:
          format: int64
          description: Time since when the data is aggregated in the response
          type: integer
        value:
          description: Alert metrics details
          type: array
          items:
            $ref: '#/components/schemas/ResolutionReasonCountMetric'
    ErrorResponse:
      type: object
      properties:
        error:
          $ref: '#/components/schemas/Error'
    DiscoverVsSecuredResponse:
      description: Model for Discover vs Secured Widget Response
      properties:
        privilege:
          description: privilege
          type: string
        rowCount:
          description: Row count
          format: int32
          type: integer
        rows:
          description: List of vulnerabilities trend data
          items:
            $ref: '#/components/schemas/DiscoverVsSecured'
          type: array
      type: object
    AbsoluteTimeRangeConfigModel:
      allOf:
      - $ref: '#/components/schemas/TimeRangeConfigModel'
      - description: Model for AbsoluteTimeRangeConfig
        properties:
          type:
            example: absolute
            type: string
          value:
            allOf:
            - $ref: '#/components/schemas/TimeModel'
            - description: Time range object
        required:
        - value
        type: object
    AssetsWithAlertsFilter:
      properties:
        name:
          description: Name of the allowed Filter types.
          enum:
          - CLOUD_TYPE
          - ALERT_SEVERITY
          type: string
        operator:
          description: Only allowed operator for the filter is '='
          type: string
        value:
          description: Value for the applied filter
          type: string
      type: object
    CWPWidgetRequestModel:
      description: Model for Discovered vs Secured and Vulnerabilities Trend
      properties:
        timeRange:
          allOf:
          - $ref: '#/components/schemas/TimeRangeConfigModel'
          - description: Time range
      type: object
    DiscoverVsSecured:
      description: cloud type and alerts count
      properties:
        critical:
          description: critical
          format: int64
          type: integer
        high:
          description: high
          format: int64
          type: integer
        informational:
          description: informational
          format: int64
          type: integer
        low:
          description: low
          format: int64
          type: integer
        medium:
          description: medium
          format: int64
          type: integer
        type:
          description: cloudType
          type: string
      type: object
    DailyAssetWithUrgentAlerts:
      description: Model for daily Assets With Urgent Alerts
      properties:
        alertsByCloudType:
          description: alerts
          items:
            $ref: '#/components/schemas/DiscoverVsSecured'
          type: array
        criticalAssets:
          description: criticalAssets
          format: int64
          type: integer
        highAssets:
          description: highAssets
          format: int64
          type: integer
        informationalAssets:
          description: informationalAssets
          format: int64
          type: integer
        insertTs:
          description: insertTs
          format: int64
          type: integer
        lowAssets:
          description: lowAssets
          format: int64
          type: integer
        mediumAssets:
          description: mediumAssets
          format: int64
          type: integer
      type: object
    RelativeTimeDurationModel:
      description: Model for RelativeTimeDuration
      properties:
        amount:
          description: Number of time units
          format: int32
          type: integer
        unit:
          description: Time unit
          enum:
          - minute
          - hour
          - day
          - week
          - month
          - year
          type: string
      type: object
    VulnerabilitiesTrend:
      description: timestamp, vulnerability stats
      properties:
        ts:
          description: timestamp
          format: int64
          type: integer
        vulStatsContainerC:
          description: vulStatsContainerC
          format: int64
          type: integer
        vulStatsContainerH:
          description: vulStatsContainerH
          format: int64
          type: integer
        vulStatsContainerL:
          description: vulStatsContainerL
          format: int64
          type: integer
        vulStatsContainerM:
          description: vulStatsContainerM
          format: int64
          type: integer
        vulStatsFunctionC:
          description: vulStatsFunctionC
          format: int64
          type: integer
        vulStatsFunctionH:
          description: vulStatsFunctionH
          format: int64
          type: integer
        vulStatsFunctionL:
          description: vulStatsFunctionL
          format: int64
          type: integer
        vulStatsFunctionM:
          description: vulStatsFunctionM
          format: int64
          type: integer
        vulStatsHostC:
          description: vulStatsHostC
          format: int64
          type: integer
        vulStatsHostH:
          description: vulStatsHostH
          format: int64
          type: integer
        vulStatsHostL:
          description: vulStatsHostL
          format: int64
          type: integer
        vulStatsHostM:
          description: vulStatsHostM
          format: int64
          type: integer
        vulStatsImageC:
          description: vulStatsImageC
          format: int64
          type: integer
        vulStatsImageH:
          description: vulStatsImageH
          format: int64
          type: integer
        vulStatsImageL:
          description: vulStatsImageL
          format: int64
          type: integer
        vulStatsImageM:
          description: vulStatsImageM
          format: int64
          type: integer
      type: object
    ToNowTimeRangeConfigModel:
      allOf:
      - $ref: '#/components/schemas/TimeRangeConfigModel'
      - description: Model for ToNowTimeRangeConfig
        properties:
          value:
            description: Time range object
            enum:
            - MINUTE
            - HOUR
            - DAY
            - WEEK
            - MONTH
            - YEAR
            - EPOCH
            - LOGIN
            type: string
        type: object
    TimeRangeConfigModel:
      description: 'See the [Time Range Model](/prisma-cloud/api/cspm/api-time-range-model) for details.

        '
      discriminator:
        mapping:
          absolute: '#/components/schemas/AbsoluteTimeRangeConfigModel'
          relative: '#/components/schemas/RelativeTimeRangeConfigModel'
          to_now: '#/components/schemas/ToNowTimeRangeConfigModel'
        propertyName: type
      oneOf:
      - $ref: '#/components/schemas/RelativeTimeRangeConfigModel'
      - $ref: '#/components/schemas/AbsoluteTimeRangeConfigModel'
      - $ref: '#/components/schemas/ToNowTimeRangeConfigModel'
      properties:
        type:
          description: Time type
          type: string
      required:
      - type
      type: object
    AssetsWithAlertsRequestModel:
      description: Model for Assets With Alerts Request
      properties:
        filters:
          description: List of filters that can be applied for the API
          items:
            $ref: '#/components/schemas/AssetsWithAlertsFilter'
          type: array
        timeRange:
          allOf:
          - $ref: '#/components/schemas/TimeRangeConfigModel'
          - description: Time range
      type: object
    RelativeTimeRangeConfigModel:
      allOf:
      - $ref: '#/components/schemas/TimeRangeConfigModel'
      - description: Model for RelativeTimeRangeConfig
        properties:
          relativeTimeType:
            description: Direction in which to count time. Default = BACKWARD
            enum:
            - BACKWARD
            - FORWARD
            type: string
          type:
            example: relative
            type: string
          value:
            allOf:
            - $ref: '#/components/schemas/RelativeTimeDurationModel'
            - description: Time range object
        required:
        - value
        type: object
    AssetsWithUrgentAlerts:
      description: Model for Assets With Urgent Alerts Widget api response
      properties:
        assetsWithAlerts:
          description: Assets with Alerts
          items:
            $ref: '#/components/schemas/DailyAssetWithUrgentAlerts'
          type: array
        privilege:
          description: privilege
          type: string
        rowCount:
          description: Row count
          format: int32
          type: integer
      type: object
    TimeModel:
      description: Model for Time
      properties:
        endTime:
          description: End timestamp
          format: int64
          type: integer
        startTime:
          description: Start timestamp
          format: int64
          type: integer
      type: object
    VulnerabilitiesTrendResponse:
      description: Model for Vulnerabilities Trend Response
      properties:
        privilege:
          description: privilege
          type: string
        rowCount:
          description: Row count
          format: int32
          type: integer
        rows:
          description: List of vulnerabilities trend data
          items:
            $ref: '#/components/schemas/VulnerabilitiesTrend'
          type: array
      type: object
  securitySchemes:
    x-redlock-auth:
      description: The x-redlock-auth value is a JSON Web Token (JWT).
      in: header
      name: x-redlock-auth
      type: apiKey
x-refined-from:
- palo-alto-cspm-commandcentermicroservice-openapi.json
- palo-alto-cspm-widgets-openapi.json