Palo Alto Networks · Example Payload

Threat Vault Api Threat List Example

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Threat Vault Api Threat List Example is an example object payload from Palo Alto Networks, with 6 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

successdatacounttotaloffsetlimit

Example Payload

{
  "success": false,
  "data": {
    "zingbox": [
      {
        "id": 724,
        "name": "Production Sensor 38",
        "type": "antivirus",
        "subtype": "custom",
        "severity": "medium",
        "description": "Allowed response allowed alert under investigation updated malware.",
        "cve": [
          "example-cve_item",
          "example-cve_item"
        ],
        "default_action": "reset-server",
        "min_version": "7.4.4",
        "max_version": "10.7.4",
        "status": "deprecated",
        "ori_release_version": "4.8.0",
        "latest_release_version": "5.8.1",
        "first_release_time": "2026-09-24T18:21:09Z",
        "latest_release_time": "2024-10-05T21:08:06Z",
        "sha256": [
          "example-sha256_item",
          "example-sha256_item"
        ]
      },
      {
        "id": 693,
        "name": "Staging Firewall 69",
        "type": "fileformat",
        "subtype": "advanced",
        "severity": "informational",
        "description": "Traffic suspicious traffic rule blocked firewall and response for applied under.",
        "cve": [
          "example-cve_item",
          "example-cve_item",
          "example-cve_item"
        ],
        "default_action": "drop",
        "min_version": "5.1.3",
        "max_version": "9.5.4",
        "status": "released",
        "ori_release_version": "9.2.2",
        "latest_release_version": "7.6.0",
        "first_release_time": "2026-04-18T23:59:52Z",
        "latest_release_time": "2025-11-13T17:30:40Z",
        "sha256": [
          "example-sha256_item"
        ]
      },
      {
        "id": 611,
        "name": "Production Connector 46",
        "type": "antivirus",
        "subtype": "custom",
        "severity": "informational",
        "description": "Analysis for threat network incident blocked configured blocked threat threat traffic network network.",
        "cve": [
          "example-cve_item",
          "example-cve_item",
          "example-cve_item"
        ],
        "default_action": "drop",
        "min_version": "10.7.9",
        "max_version": "9.5.6",
        "status": "deprecated",
        "ori_release_version": "2.1.3",
        "latest_release_version": "6.2.8",
        "first_release_time": "2024-10-02T05:09:53Z",
        "latest_release_time": "2025-06-01T05:18:22Z",
        "sha256": [
          "example-sha256_item",
          "example-sha256_item",
          "example-sha256_item"
        ]
      }
    ]
  },
  "count": 231,
  "total": 460,
  "offset": 822,
  "limit": 665
}

Work with this as data

Every example here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for examples

4 MCP tools reach this

find_examplesBrowse and filter every example in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This example

curl "https://apis.io/api/v1/examples/threat-vault-api-threat-list-example"

All examples

curl "https://apis.io/api/v1/examples?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.