Palo Alto Networks · Capability

Palo Alto Networks Cloud Security Posture

Unified cloud security posture capability for managing alerts, policies, compliance, code security scanning, and data security posture across Prisma Cloud CSPM, Code Security, and DSPM.

Run with Naftiko Palo Alto NetworksCloud SecurityCSPMComplianceData SecurityMSSP

What You Can Do

POST
Login —
/v1/auth/login
GET
Get alerts —
/v1/alerts
GET
Get alert —
/v1/alerts/{id}
POST
Dismiss alerts —
/v1/alerts/dismiss
POST
Reopen alerts —
/v1/alerts/reopen
GET
List data security alerts —
/v1/data-security-alerts
GET
List policies —
/v1/policies
POST
Create policy —
/v1/policies
GET
Get policy —
/v1/policies/{policyId}
PUT
Update policy —
/v1/policies/{policyId}
GET
List dspm policies —
/v1/dspm-policies
GET
List cloud accounts —
/v1/cloud-accounts
POST
Add cloud account —
/v1/cloud-accounts/{cloudType}
DELETE
Remove cloud account —
/v1/cloud-accounts/{cloudType}/{id}
POST
Search asset —
/v1/search/assets
POST
Search config —
/v1/search/config
GET
List compliance standards —
/v1/compliance-standards
GET
List reports —
/v1/reports
GET
List repositories —
/v1/repositories
POST
Add repository —
/v1/repositories
DELETE
Remove repository —
/v1/repositories
GET
List scan integrations —
/v1/scan-integrations
POST
Trigger scan —
/v1/scans
GET
Get scan status —
/v1/scans/{scan_id}
GET
List suppressions —
/v1/suppressions
POST
Create suppression —
/v1/suppressions
DELETE
Delete suppression —
/v1/suppressions/{suppression_id}
GET
Get errors by branch —
/v1/code-errors
GET
Get fix suggestions for pr —
/v1/fix-suggestions
GET
List data assets —
/v1/data-assets
GET
Get data asset —
/v1/data-assets/{id}
GET
List risks —
/v1/data-risks
GET
Get risk —
/v1/data-risks/{id}
PUT
Update risk status —
/v1/data-risks/{id}/status
GET
List data stores —
/v1/data-stores
GET
List classifications —
/v1/classifications

MCP Tools

authenticate

Authenticate to Prisma Cloud and retrieve a JWT token

idempotent
list-cspm-alerts

Retrieve a list of CSPM alerts based on filters

read-only idempotent
get-cspm-alert

Retrieve details for a specific CSPM alert

read-only idempotent
dismiss-cspm-alerts

Dismiss one or more CSPM alerts

reopen-cspm-alerts

Reopen one or more previously dismissed CSPM alerts

list-data-security-alerts

Retrieve a list of DSPM data security alerts

read-only idempotent
list-policies

Retrieve a list of all CSPM policies

read-only idempotent
create-policy

Create a new CSPM security policy

get-policy

Retrieve details for a specific CSPM policy

read-only idempotent
update-policy

Update an existing CSPM security policy

idempotent
list-dspm-policies

Retrieve a list of DSPM policies

read-only idempotent
list-cloud-accounts

Retrieve a list of all onboarded cloud accounts

read-only idempotent
add-cloud-account

Onboard a new cloud account

remove-cloud-account

Remove an onboarded cloud account

idempotent
search-assets

Search for cloud assets using RQL queries

read-only idempotent
search-config

Search for cloud configuration data using RQL queries

read-only idempotent
list-compliance-standards

Retrieve a list of all compliance standards

read-only idempotent
list-reports

Retrieve a list of all compliance reports

read-only idempotent
list-repositories

List all code security repositories with pagination and filtering

read-only idempotent
add-repository

Add a new repository for code security scanning

remove-repository

Remove a repository from code security scanning

idempotent
list-scan-integrations

List all CI/CD scan integrations with pagination

read-only idempotent
trigger-scan

Trigger a new code security scan for a repository

get-scan-status

Get the status of a code security scan

read-only idempotent
list-suppressions

List all code security suppressions with pagination and filtering

read-only idempotent
create-suppression

Create a new code security suppression

delete-suppression

Delete a specific code security suppression by ID

idempotent
get-code-errors

Get code security errors for a specific repository branch

read-only idempotent
get-fix-suggestions

Get fix suggestions for a pull request

read-only idempotent
list-data-assets

Retrieve a list of discovered data assets

read-only idempotent
get-data-asset

Retrieve details for a specific data asset

read-only idempotent
list-data-risks

Retrieve a list of data security risks

read-only idempotent
get-data-risk

Retrieve details for a specific data security risk

read-only idempotent
update-data-risk-status

Update the status of a specific data security risk

idempotent
list-data-stores

Retrieve a list of data stores

read-only idempotent
list-classifications

Retrieve a list of data classifications

read-only idempotent

Who This Is For

👤
Cloud Security Engineer
Monitors and remediates cloud security misconfigurations and compliance violations.
👤
Compliance Officer
Ensures cloud infrastructure meets regulatory and industry compliance standards.
👤
MSSP Operator
Manages multi-tenant security operations at scale for managed service providers.

APIs Used

prisma-cloud-cspm prisma-cloud-code-security prisma-cloud-dspm prisma-cloud-mssp