Palo Alto Networks · Capability

Prisma Cloud: Managed Security Service Provider (MSSP) — MSSP Managed Tenant Lifecycle Endpoints

Prisma Cloud: Managed Security Service Provider (MSSP) — MSSP Managed Tenant Lifecycle Endpoints. 6 operations. Lead operation: Palo Alto Networks Get the Managed Tenants for an MSSP. Self-contained Naftiko capability covering one Palo Alto Networks business surface.

Run with Naftiko Palo Alto NetworksMSSP Managed Tenant Lifecycle Endpoints

What You Can Do

GET

Getmanagedtenants — Palo Alto Networks Get the Managed Tenants for an MSSP

/v1/api/v1/mssp/{mssp-id}/managed-tenant

POST

Createmanagedtenant — Palo Alto Networks Create a New Managed Tenant

/v1/api/v1/mssp/{mssp-id}/managed-tenant

GET

Getmanagedtenantbyid — Palo Alto Networks Get the Details of an Existing Managed Tenant

/v1/api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}

DELETE

Softdeletemanagedtenant — Palo Alto Networks Delete a Managed Tenant

/v1/api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}

PATCH

Updatemanagedtenant — Palo Alto Networks Modify an Existing Managed Tenant

/v1/api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}

GET

Seamlesslogin — Palo Alto Networks Seamless Login

/v1/api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}/login

MCP Tools

palo-alto-networks-get-managed

Palo Alto Networks Get the Managed Tenants for an MSSP

read-only idempotent

palo-alto-networks-create-new

Palo Alto Networks Create a New Managed Tenant

palo-alto-networks-get-details

Palo Alto Networks Get the Details of an Existing Managed Tenant

read-only idempotent

palo-alto-networks-delete-managed

Palo Alto Networks Delete a Managed Tenant

idempotent

palo-alto-networks-modify-existing

Palo Alto Networks Modify an Existing Managed Tenant

idempotent

palo-alto-networks-seamless-login

Palo Alto Networks Seamless Login

read-only idempotent

Capability Spec

naftiko: 1.0.0-alpha2
info:
  label: 'Prisma Cloud: Managed Security Service Provider (MSSP) — MSSP Managed Tenant Lifecycle Endpoints'
  description: 'Prisma Cloud: Managed Security Service Provider (MSSP) — MSSP Managed Tenant Lifecycle Endpoints. 6 operations.
    Lead operation: Palo Alto Networks Get the Managed Tenants for an MSSP. Self-contained Naftiko capability covering one
    Palo Alto Networks business surface.'
  tags:
  - Palo Alto Networks
  - MSSP Managed Tenant Lifecycle Endpoints
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    PALO_ALTO_NETWORKS_API_KEY: PALO_ALTO_NETWORKS_API_KEY
capability:
  consumes:
  - type: http
    namespace: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints
    baseUri: https://mssp-api.prismacloud.io
    description: 'Prisma Cloud: Managed Security Service Provider (MSSP) — MSSP Managed Tenant Lifecycle Endpoints business
      capability. Self-contained, no shared references.'
    resources:
    - name: api-v1-mssp-mssp-id-managed-tenant
      path: /api/v1/mssp/{mssp-id}/managed-tenant
      operations:
      - name: getmanagedtenants
        method: GET
        description: Palo Alto Networks Get the Managed Tenants for an MSSP
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: mssp-id
          in: path
          type: string
          description: the mssp the managed tenants belong to
          required: true
        - name: tenant_group
          in: query
          type: array
          description: the tenant groups the managed tenants belong to, accepts multiple. Maximum limit of 10
        - name: show_synthetic_tenant
          in: query
          type: boolean
          description: show synthetic tenant, defaults to false
        - name: show_deleted_tenants
          in: query
          type: boolean
          description: show deleted tenants, defaults to false
        - name: next_page_token
          in: query
          type: string
          description: pagination token to continue a previous query
      - name: createmanagedtenant
        method: POST
        description: Palo Alto Networks Create a New Managed Tenant
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: mssp-id
          in: path
          type: string
          description: the id of the MSSP of interest
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-mssp-mssp-id-managed-tenant-tenant-id
      path: /api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}
      operations:
      - name: getmanagedtenantbyid
        method: GET
        description: Palo Alto Networks Get the Details of an Existing Managed Tenant
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: mssp-id
          in: path
          type: string
          description: the mssp the managed tenants belong to
          required: true
        - name: tenant-id
          in: path
          type: string
          description: the prisma id or external tenant id of the managed tenant of interest
          required: true
      - name: softdeletemanagedtenant
        method: DELETE
        description: Palo Alto Networks Delete a Managed Tenant
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: mssp-id
          in: path
          type: string
          description: the mssp the managed tenants belong to
          required: true
        - name: tenant-id
          in: path
          type: string
          description: the prisma id or external tenant if of the managed tenant of interest
          required: true
      - name: updatemanagedtenant
        method: PATCH
        description: Palo Alto Networks Modify an Existing Managed Tenant
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: mssp-id
          in: path
          type: string
          description: the mssp the managed tenants belong to
          required: true
        - name: tenant-id
          in: path
          type: string
          description: the prisma id or external tenant id of the managed tenant of interest
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: api-v1-mssp-mssp-id-managed-tenant-tenant-id-login
      path: /api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}/login
      operations:
      - name: seamlesslogin
        method: GET
        description: Palo Alto Networks Seamless Login
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: mssp-id
          in: path
          type: string
          description: the mssp the managed tenants belong to
          required: true
        - name: tenant-id
          in: path
          type: string
          description: the prisma id or external tenant if of the managed tenant of interest
          required: true
        - name: landing_page
          in: query
          type: string
          description: The landing page for redirection on prisma tenant
    authentication:
      type: bearer
      token: '{{env.PALO_ALTO_NETWORKS_API_KEY}}'
  exposes:
  - type: rest
    namespace: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints-rest
    port: 8080
    description: 'REST adapter for Prisma Cloud: Managed Security Service Provider (MSSP) — MSSP Managed Tenant Lifecycle
      Endpoints. One Spectral-compliant resource per consumed operation, prefixed with /v1.'
    resources:
    - path: /v1/api/v1/mssp/{mssp-id}/managed-tenant
      name: api-v1-mssp-mssp-id-managed-tenant
      description: REST surface for api-v1-mssp-mssp-id-managed-tenant.
      operations:
      - method: GET
        name: getmanagedtenants
        description: Palo Alto Networks Get the Managed Tenants for an MSSP
        call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.getmanagedtenants
        with:
          mssp-id: rest.mssp-id
          tenant_group: rest.tenant_group
          show_synthetic_tenant: rest.show_synthetic_tenant
          show_deleted_tenants: rest.show_deleted_tenants
          next_page_token: rest.next_page_token
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: createmanagedtenant
        description: Palo Alto Networks Create a New Managed Tenant
        call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.createmanagedtenant
        with:
          mssp-id: rest.mssp-id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}
      name: api-v1-mssp-mssp-id-managed-tenant-tenant-id
      description: REST surface for api-v1-mssp-mssp-id-managed-tenant-tenant-id.
      operations:
      - method: GET
        name: getmanagedtenantbyid
        description: Palo Alto Networks Get the Details of an Existing Managed Tenant
        call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.getmanagedtenantbyid
        with:
          mssp-id: rest.mssp-id
          tenant-id: rest.tenant-id
        outputParameters:
        - type: object
          mapping: $.
      - method: DELETE
        name: softdeletemanagedtenant
        description: Palo Alto Networks Delete a Managed Tenant
        call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.softdeletemanagedtenant
        with:
          mssp-id: rest.mssp-id
          tenant-id: rest.tenant-id
        outputParameters:
        - type: object
          mapping: $.
      - method: PATCH
        name: updatemanagedtenant
        description: Palo Alto Networks Modify an Existing Managed Tenant
        call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.updatemanagedtenant
        with:
          mssp-id: rest.mssp-id
          tenant-id: rest.tenant-id
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/api/v1/mssp/{mssp-id}/managed-tenant/{tenant-id}/login
      name: api-v1-mssp-mssp-id-managed-tenant-tenant-id-login
      description: REST surface for api-v1-mssp-mssp-id-managed-tenant-tenant-id-login.
      operations:
      - method: GET
        name: seamlesslogin
        description: Palo Alto Networks Seamless Login
        call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.seamlesslogin
        with:
          mssp-id: rest.mssp-id
          tenant-id: rest.tenant-id
          landing_page: rest.landing_page
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints-mcp
    port: 9090
    transport: http
    description: 'MCP adapter for Prisma Cloud: Managed Security Service Provider (MSSP) — MSSP Managed Tenant Lifecycle Endpoints.
      One tool per consumed operation, routed inline through this capability''s consumes block.'
    tools:
    - name: palo-alto-networks-get-managed
      description: Palo Alto Networks Get the Managed Tenants for an MSSP
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.getmanagedtenants
      with:
        mssp-id: tools.mssp-id
        tenant_group: tools.tenant_group
        show_synthetic_tenant: tools.show_synthetic_tenant
        show_deleted_tenants: tools.show_deleted_tenants
        next_page_token: tools.next_page_token
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-create-new
      description: Palo Alto Networks Create a New Managed Tenant
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.createmanagedtenant
      with:
        mssp-id: tools.mssp-id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-get-details
      description: Palo Alto Networks Get the Details of an Existing Managed Tenant
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.getmanagedtenantbyid
      with:
        mssp-id: tools.mssp-id
        tenant-id: tools.tenant-id
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-delete-managed
      description: Palo Alto Networks Delete a Managed Tenant
      hints:
        readOnly: false
        destructive: true
        idempotent: true
      call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.softdeletemanagedtenant
      with:
        mssp-id: tools.mssp-id
        tenant-id: tools.tenant-id
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-modify-existing
      description: Palo Alto Networks Modify an Existing Managed Tenant
      hints:
        readOnly: false
        destructive: false
        idempotent: true
      call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.updatemanagedtenant
      with:
        mssp-id: tools.mssp-id
        tenant-id: tools.tenant-id
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-seamless-login
      description: Palo Alto Networks Seamless Login
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: palo-alto-prisma-cloud-mssp-mssp-managed-tenant-lifecycle-endpoints.seamlesslogin
      with:
        mssp-id: tools.mssp-id
        tenant-id: tools.tenant-id
        landing_page: tools.landing_page
      outputParameters:
      - type: object
        mapping: $.