# Palo Alto Networks

**Canonical:** https://apis.io/providers/palo-alto-networks/  
**Website:** https://www.paloaltonetworks.com  
**APIs profiled:** 741

Palo Alto Networks is a global cybersecurity leader providing advanced security platforms and services across network security, cloud security, and security operations. Its developer platform at pan.dev offers REST and XML APIs for PAN-OS firewalls, Strata Cloud Manager, Prisma Cloud (CSPM, CWPP, code security), Prisma Access and SD-WAN for SASE, Cortex XDR/XSOAR/XSIAM for security operations, and cloud-delivered security services including WildFire, Threat Vault, IoT Security, and DLP.

## Kin Score — 63.9 / 100 (strong)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 63.9).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 84.3 |
| Governance | 26.5 |
| Contract Governance | 26.5 |
| Operational Transparency | 68.4 |
| Developer Ergonomics | 66.7 |
| Commercial Clarity | 50.0 |
| Access Clarity | 50.0 |

## Agent readiness — 52.4 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | verified |
| MCP Server | documented |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | verified |
| Event Surface Described | derived |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Enterprise · Self-serve signup — onboarding: self-serve, pricing: enterprise, trial: no (confidence: high).

## APIs (741)

- **PAN-OS XML API** — The comprehensive XML-based API for PAN-OS providing full access to all firewall configuration, operational commands, reporting, logging, and commit operations. Supports request...
- **PAN-OS OpenConfig API** — Management interface for PAN-OS based on OpenConfig standard data models, providing gNMI and gNOI services through the OpenConfig plugin. Supports network automation for BGP, in...
- **Panorama API** — The Panorama API uses the same PAN-OS XML and REST API interfaces but provides centralized management of multiple firewalls from a single management server. Supports device grou...
- **AutoFocus API (Deprecated)** — A threat intelligence API that provided contextual information about malware, campaigns, and threat actors observed across the Palo Alto Networks global threat intelligence netw...
- **Prisma SASE Service Status API** — A public JSON API for monitoring Prisma SASE service health and status built on the Atlassian StatusPage platform. Provides endpoints for overall service status, individual comp...
- **Cross-Platform Service Status API** — A public JSON API for monitoring the status of all Palo Alto Networks cloud services and products built on the Atlassian StatusPage platform. Provides endpoints for portfolio-wi...
- **SASE Authentication Service API** — The OAuth 2.0 authentication service that provides access tokens for all Prisma SASE platform APIs. Uses Client ID and Client Secret credentials to generate short-lived bearer t...
- **Expedition API (Deprecated)** — A RESTful API for the Expedition 2.0 migration tool enabling programmatic firewall configuration migration from third-party vendors, policy optimization, and rule analysis. Supp...
- **VM-Series Licensing API** — A REST API for licensing VM-Series virtual firewalls that do not have direct internet access to the Palo Alto Networks license server. Supports automated license activation, dea...
- **Palo Alto Networks 5G Deregistered Trend API** — The 5G Deregistered Trend API from Palo Alto Networks — 1 operation(s) for 5g deregistered trend.
- **Palo Alto Networks 5G Network Interconnects and Bandwidth API** — The 5G Network Interconnects and Bandwidth API from Palo Alto Networks — 1 operation(s) for 5g network interconnects and bandwidth.
- **Palo Alto Networks 5G Registered Trend API** — The 5G Registered Trend API from Palo Alto Networks — 1 operation(s) for 5g registered trend.
- **Palo Alto Networks 5G Unknown IPs Trend API** — The 5G Unknown IPs Trend API from Palo Alto Networks — 1 operation(s) for 5g unknown ips trend.
- **Palo Alto Networks Access Policies API** — Access policy management for role-based access control.
- **Palo Alto Networks Active Mappings API** — The Active Mappings API from Palo Alto Networks — 1 operation(s) for active mappings.
- **Palo Alto Networks Added and Cleared Mappings API** — The Added and Cleared Mappings API from Palo Alto Networks — 1 operation(s) for added and cleared mappings.
- **Palo Alto Networks Addresses API** — Address object management.
- **Palo Alto Networks AddressGroups API** — Address group management.
- **Palo Alto Networks Advisories API** — Query and retrieve PSIRT security advisories.
- **Palo Alto Networks Agents API** — Monitored agent and endpoint inventory management.
- **Palo Alto Networks AgentScores API** — Agent and endpoint experience score monitoring for tracking the health and experience of monitored user devices.
- **Palo Alto Networks Aggregation Queries API** — Multi-tenant aggregated data queries.
- **Palo Alto Networks Alerts API** — Alert retrieval and management.
- **Palo Alto Networks API Stats API** — The API Stats API from Palo Alto Networks — 1 operation(s) for api stats.
- **Palo Alto Networks App Catalog API** — SaaS application catalog and metadata.
- **Palo Alto Networks Applications API** — Monitored application inventory management.
- **Palo Alto Networks ApplicationScores API** — Application experience score monitoring providing aggregated performance ratings for SaaS and internal applications.
- **Palo Alto Networks Apps API** — SaaS application onboarding and management.
- **Palo Alto Networks Assets API** — Internet-exposed asset discovery and enumeration.
- **Palo Alto Networks ATP API** — Advanced Threat Prevention detailed analysis reports and PCAP files.
- **Palo Alto Networks Attachments API** — Email attachment retrieval operations.
- **Palo Alto Networks Attack Categories API** — Available attack category reference data.
- **Palo Alto Networks AttackSurfaceRules API** — Attack surface rule configuration and management.
- **Palo Alto Networks Audit API** — Audit and management log retrieval.
- **Palo Alto Networks Authentication API** — Token-based authentication for API access.
- **Palo Alto Networks Bandwidth API** — Bandwidth allocation visibility.
- **Palo Alto Networks BPA Reports API** — Completed assessment report retrieval.
- **Palo Alto Networks BPA Requests API** — Best Practice Assessment request submission and status tracking.
- **Palo Alto Networks Catalog API** — The Catalog API from Palo Alto Networks — 1 operation(s) for catalog.
- **Palo Alto Networks Classifications API** — Data classification results and taxonomy operations.
- …and 701 more, listed in full on the page.

## MCP servers (1)

- **MCP Server**

## Agentic access (1)

- **Palo Alto Networks Agentic Access** — 526 operations · 269 acting · 5 human-in-the-loop

## Security (2)

- **Palo Alto Networks Authentication** — apiKey/http/oauth2 · 13 schemes
- **Palo Alto Networks Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Plans (1)

- **Palo Alto Networks Plans Pricing**

## Use cases (10)

- **SOC Automation** — Automate alert triage, incident investigation, and response actions using Cortex XDR, XSOAR playbooks, and XSIAM correlation rules.
- **Firewall Policy Management** — Programmatically manage security policies, address objects, and NAT rules across PAN-OS firewalls and Panorama using REST or XML APIs.
- **Cloud Security Posture** — Monitor and remediate cloud misconfigurations, compliance violations, and vulnerabilities across AWS, Azure, and GCP using Prisma Cloud APIs.
- **Threat Hunting** — Query threat intelligence databases, submit suspicious files for analysis, and correlate IOCs across Threat Vault, WildFire, and DNS Security.
- **SASE Deployment Automation** — Automate Prisma Access remote network onboarding, SD-WAN site configuration, and ZTNA connector deployment using SASE platform APIs.
- **DevSecOps Pipeline Integration** — Embed security scanning into CI/CD pipelines with Prisma Cloud code security APIs for IaC scanning, SCA, and secrets detection.
- **AI Application Security** — Integrate Prisma AIRS API Intercept into AI application code to scan LLM prompts and responses for security threats in real time.
- **Compliance Monitoring** — Continuously assess cloud infrastructure against CIS benchmarks, PCI DSS, HIPAA, SOC 2, and custom compliance standards using Prisma Cloud.
- **Log Forwarding and SIEM Integration** — Forward security logs from firewalls and cloud services to Splunk, QRadar, and other SIEMs using Strata Logging Service APIs.
- **Multi-Tenant Security Operations** — Manage security across tenant hierarchies with aggregate monitoring, shared notifications, and delegated administration for MSSPs.

## Tags

Cloud Security, Cybersecurity, Firewall, Network Security, SASE, SOAR, Threat Intelligence, XDR

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/palo-alto-networks/). Scores are computed from the provider's own public artifacts under a published rubric.