Palo Alto Networks · OpenAPI Overlay 1.0.0

API Evangelist conversational phrasing for Palo Alto Networks WildFire Submit API

4 actions 4 updates phrasing extends openapi/palo-alto-networks-submit-api-openapi.yml
Generated by API Evangelist Written by API Evangelist tooling for Palo Alto Networks's API. It is a proposal applied on top of the contract, not a document Palo Alto Networks publishes.
View Overlay File View on GitHub Overlay Specification

What the actions change

x-apievangelist-phrasing

Targets 4

$.info
$.paths['/submit/file'].post
$.paths['/submit/url'].post
$.paths['/submit/link'].post

OpenAPI Overlay

Raw ↑
# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Palo Alto Networks WildFire Submit API
  version: 1.0.0
extends: openapi/palo-alto-networks-submit-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 3
- target: $.paths['/submit/file'].post
  update:
    x-apievangelist-phrasing:
      intent: Submit a file to WildFire for malware analysis
      effect: write
      questions:
      - How do I check whether a suspicious executable or Office document is malware?
      - Which file types can WildFire detonate in its sandbox?
      instructions:
      - text: Submit file {file} to WildFire for malware analysis.
        slots:
          file: requestBody.file
      - text: Detonate {file} in the WildFire sandbox and analyze its behavior.
        slots:
          file: requestBody.file
      method: generated
      generated: '2026-09-26'
- target: $.paths['/submit/url'].post
  update:
    x-apievangelist-phrasing:
      intent: Submit a URL to WildFire for phishing analysis
      effect: write
      questions:
      - Can WildFire tell me if a website is phishing or serving malware?
      - What happens when I send a web page URL to WildFire for analysis?
      instructions:
      - text: Submit URL {url} to WildFire for phishing and malware analysis.
        slots:
          url: requestBody.url
      - text: Have WildFire visit {url} and analyze the page and its downloads.
        slots:
          url: requestBody.url
      method: generated
      generated: '2026-09-26'
- target: $.paths['/submit/link'].post
  update:
    x-apievangelist-phrasing:
      intent: Submit an email or document link to WildFire
      effect: write
      questions:
      - How do I analyze a hyperlink I pulled out of an email body?
      - Is there a separate WildFire submission for links extracted from documents?
      instructions:
      - text: Submit the link {link} extracted from an email for WildFire analysis.
        slots:
          link: requestBody.link
      - text: Send document link {link} to WildFire.
        slots:
          link: requestBody.link
      method: generated
      generated: '2026-09-26'

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this
  • find_overlaysBrowse and filter every overlay in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This overlay
curl "https://apis.io/api/v1/overlays/palo-alto-networks-submit-api-phrasing-overlay"
All openapi overlays
curl "https://apis.io/api/v1/overlays?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.