Palo Alto Networks Security Advisory API — Advisories

naftiko: 1.0.0-alpha2
info:
  label: Palo Alto Networks Security Advisory API — Advisories
  description: 'Palo Alto Networks Security Advisory API — Advisories. 3 operations. Lead operation: Palo Alto Networks List
    All Security Advisories. Self-contained Naftiko capability covering one Palo Alto Networks business surface.'
  tags:
  - Palo Alto Networks
  - Advisories
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    PALO_ALTO_NETWORKS_API_KEY: PALO_ALTO_NETWORKS_API_KEY
capability:
  consumes:
  - type: http
    namespace: palo-alto-security-advisory-advisories
    baseUri: https://security.paloaltonetworks.com/api
    description: Palo Alto Networks Security Advisory API — Advisories business capability. Self-contained, no shared references.
    resources:
    - name: advisories
      path: /advisories
      operations:
      - name: listadvisories
        method: GET
        description: Palo Alto Networks List All Security Advisories
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: severity
          in: query
          type: string
          description: Filter advisories by severity level.
        - name: affected_product
          in: query
          type: string
          description: 'Filter by affected product name. Examples: PAN-OS, Cortex XDR Agent, Prisma Cloud, GlobalProtect,
            Cortex XSOAR.'
        - name: sort
          in: query
          type: string
          description: Field and direction to sort results by.
        - name: limit
          in: query
          type: integer
          description: Maximum number of advisories to return per page.
        - name: offset
          in: query
          type: integer
          description: Number of results to skip for pagination.
    - name: advisories-cve-cve_id
      path: /advisories/cve/{cve_id}
      operations:
      - name: getadvisorybycve
        method: GET
        description: Palo Alto Networks Get Advisories by CVE ID
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: cve_id
          in: path
          type: string
          description: CVE identifier (e.g., CVE-2024-3400).
          required: true
    - name: advisories-advisory_id
      path: /advisories/{advisory_id}
      operations:
      - name: getadvisory
        method: GET
        description: Palo Alto Networks Get a Single Security Advisory
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: advisory_id
          in: path
          type: string
          description: Palo Alto Networks advisory identifier (e.g., PAN-SA-2024-0001).
          required: true
  exposes:
  - type: rest
    namespace: palo-alto-security-advisory-advisories-rest
    port: 8080
    description: REST adapter for Palo Alto Networks Security Advisory API — Advisories. One Spectral-compliant resource per
      consumed operation, prefixed with /v1.
    resources:
    - path: /v1/advisories
      name: advisories
      description: REST surface for advisories.
      operations:
      - method: GET
        name: listadvisories
        description: Palo Alto Networks List All Security Advisories
        call: palo-alto-security-advisory-advisories.listadvisories
        with:
          severity: rest.severity
          affected_product: rest.affected_product
          sort: rest.sort
          limit: rest.limit
          offset: rest.offset
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/advisories/cve/{cve-id}
      name: advisories-cve-cve-id
      description: REST surface for advisories-cve-cve_id.
      operations:
      - method: GET
        name: getadvisorybycve
        description: Palo Alto Networks Get Advisories by CVE ID
        call: palo-alto-security-advisory-advisories.getadvisorybycve
        with:
          cve_id: rest.cve_id
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/advisories/{advisory-id}
      name: advisories-advisory-id
      description: REST surface for advisories-advisory_id.
      operations:
      - method: GET
        name: getadvisory
        description: Palo Alto Networks Get a Single Security Advisory
        call: palo-alto-security-advisory-advisories.getadvisory
        with:
          advisory_id: rest.advisory_id
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: palo-alto-security-advisory-advisories-mcp
    port: 9090
    transport: http
    description: MCP adapter for Palo Alto Networks Security Advisory API — Advisories. One tool per consumed operation, routed
      inline through this capability's consumes block.
    tools:
    - name: palo-alto-networks-list-all
      description: Palo Alto Networks List All Security Advisories
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: palo-alto-security-advisory-advisories.listadvisories
      with:
        severity: tools.severity
        affected_product: tools.affected_product
        sort: tools.sort
        limit: tools.limit
        offset: tools.offset
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-get-advisories
      description: Palo Alto Networks Get Advisories by CVE ID
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: palo-alto-security-advisory-advisories.getadvisorybycve
      with:
        cve_id: tools.cve_id
      outputParameters:
      - type: object
        mapping: $.
    - name: palo-alto-networks-get-single
      description: Palo Alto Networks Get a Single Security Advisory
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: palo-alto-security-advisory-advisories.getadvisory
      with:
        advisory_id: tools.advisory_id
      outputParameters:
      - type: object
        mapping: $.