Palo Alto Networks Control Plane Resource API

The Control Plane Resource API API from Palo Alto Networks — 9 operation(s) for control plane resource api.

Operations 12

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /mt/manage/5g/control/cert/download Download the 5G security certificate · Download Security Certificate #
Ask an LLM
“How do I download the certificate needed to activate 5G connectivity for a region?”
“Where do I get the security certificate file for my local 5G control plane?”
Tell an agent
Download the 5G control plane security certificate.
Export the regional 5G activation certificate for the local control plane.
GET /mt/manage/5g/control/proxycert Check whether a 5G proxy certificate exists · Verify Certificate Status #
Ask an LLM
“Is a proxy certificate already present in my root TSG before 5G activation?”
“Can I verify the 5G proxy certificate status as a pre-activation check?”
Tell an agent
Verify whether the root TSG has a 5G proxy certificate.
Check the proxy certificate status for the 5G control plane.
POST /mt/manage/5g/control/proxycert/upload Upload a 5G proxy certificate · Upload Proxy Certificate #
Ask an LLM
“How do I upload a proxy certificate to secure 5G control plane signaling?”
“Can I upload the proxy cert file for a specific TSG?”
Tell an agent
Upload proxy certificate file {file} for TSG {tsgId}.
Inject proxy cert {filename} into root TSG {rootTsgId}.
GET /mt/manage/5g/control/radiusProxy Get the RADIUS proxy shared secret · Fetch Proxy Secret #
Ask an LLM
“Where can I audit the RADIUS proxy shared secret configured on the root TSG?”
“What RADIUS proxy is my 5G control plane authenticating through?”
Tell an agent
Fetch the RADIUS proxy configuration for the root TSG.
Show the RADIUS proxy secret used by the 5G control plane.
POST /mt/manage/5g/control/radiusProxy Configure the RADIUS proxy server · Configure Radius Proxy #
Ask an LLM
“How do I point the 5G control plane at a RADIUS proxy by name and IP address?”
“Can I register a RADIUS proxy server for 5G authentication traffic?”
Tell an agent
Configure RADIUS proxy {name} at {ipaddress}.
Set the 5G RADIUS proxy address to {ipaddress}.
GET /mt/manage/5g/control/radiusSecret View the RADIUS shared secret · View Radius Secret #
Ask an LLM
“How can I see the active RADIUS shared secret to troubleshoot 5G auth failures?”
“Does the RADIUS secret on the root TSG match my on-prem server?”
Tell an agent
Show the active RADIUS shared secret for the root TSG.
Display the current RADIUS secret for troubleshooting.
POST /mt/manage/5g/control/radiusSecret Set or rotate the RADIUS shared secret · Set Radius Secret #
Ask an LLM
“How do I rotate the RADIUS shared secret for the root TSG?”
“Do RADIUS secret changes take effect immediately?”
Tell an agent
Set the RADIUS shared secret to {secret}.
Rotate the RADIUS secret to {secret}, recorded as created by {created_by}.
GET /mt/manage/5g/control/radiusServers List RADIUS servers for 5G · List Radius Servers #
Ask an LLM
“Which RADIUS servers are configured for 5G connectivity in my region?”
“Can I audit the active authentication nodes for regional redundancy?”
Tell an agent
List the RADIUS servers configured for 5G.
Show all regional RADIUS authentication servers.
GET /mt/manage/5g/control/supported/interfaces List interfaces supported for 5G · List Supported Interfaces #
Ask an LLM
“What interface types can the 5G control plane integrate with?”
“Which connection types are supported when planning a 5G deployment?”
Tell an agent
List the supported 5G control plane interfaces.
Show the interface types available for 5G integration.
GET /mt/manage/5g/control/interface Show the interface assigned to 5G · Show Selected Interface #
Ask an LLM
“Which network interface is currently assigned to 5G operations?”
“Did my interface change for 5G signaling actually take effect?”
Tell an agent
Show the currently selected 5G interface.
Get the active interface configuration for 5G traffic.
POST /mt/manage/5g/control/interface Assign the 5G control plane interface · Assign Network Interface #
Ask an LLM
“How do I choose the interface type, such as RADIUS, for 5G control plane traffic?”
“Can I enable interim messages with a reporting interval when assigning the interface?”
Tell an agent
Assign interface type {interfaceType} to the 5G control plane.
Use {interfaceType} for 5G with interim messages every {interimMsgInterval}.
PUT /mt/manage/5g/control/interimMsg Update interim message settings · Update Message Intervals #
Ask an LLM
“How do I change how often interim messages are reported for active 5G sessions?”
“Can I turn off interim message processing on the active interface?”
Tell an agent
Set the interim message interval to {interval}.
Turn interim message processing {processMsg} with interval {interval}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-control-plane-resource-api-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-control-plane-resource-api-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: SASE 5G Manage Service Control Plane Resource API
  version: '1.0'
  description: 'The SASE 5G Management Service provides the administrative framework required to provision,

    configure, and oversee 5G security infrastructure within the Strata Cloud Manager (SCM) ecosystem.'
servers:
- url: https://stratacloudmanager.paloaltonetworks.com
security:
- JWT: []
tags:
- name: Control Plane Resource API
paths:
  /mt/manage/5g/control/cert/download:
    get:
      tags:
      - Control Plane Resource API
      summary: Download Security Certificate
      description: 'Exports the security certificate required to enable 5G connectivity for a specific region.

        Administrators download this file to the local control plane during the activation phase

        to authenticate regional 5G nodes securely. This step is mandatory before regional

        traffic paths can be established.'
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: GetMtManage5gControlCertDownload
  /mt/manage/5g/control/proxycert:
    get:
      tags:
      - Control Plane Resource API
      summary: Verify Certificate Status
      description: 'Validates whether a proxy certificate exists within the root TSG configuration.

        Engineers perform this check during pre-activation to ensure the control plane

        is prepared for encrypted signaling before establishing child tenant connectivity.

        This prevents signaling failures during regional onboarding.'
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: GetMtManage5gControlProxycert
  /mt/manage/5g/control/proxycert/upload:
    post:
      tags:
      - Control Plane Resource API
      summary: Upload Proxy Certificate
      description: 'Injects a proxy certificate into the root TSG via multipart form-data to facilitate

        secure 5G control plane communications. Users execute this during gateway configuration

        to establish encrypted regional signaling paths. The management plane validates the

        file format before committing the record.'
      requestBody:
        content:
          multipart/form-data:
            schema:
              type: object
              properties:
                file:
                  format: binary
                  type: string
                filename:
                  type: string
                tsgId:
                  type: string
                rootTsgId:
                  type: string
            encoding:
              file:
                contentType: application/octet-stream
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: PostMtManage5gControlProxycertUpload
  /mt/manage/5g/control/radiusProxy:
    get:
      tags:
      - Control Plane Resource API
      summary: Fetch Proxy Secret
      description: 'Retrieves the Radius server shared secret associated with the root TSG. Administrators

        call this during system audits to verify authentication credentials between the 5G

        control plane and Radius infrastructure. The response ensures that the management

        plane retains the correct shared keys for secure access.'
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: GetMtManage5gControlRadiusproxy
    post:
      tags:
      - Control Plane Resource API
      summary: Configure Radius Proxy
      description: 'Assigns a Radius server shared secret to the root TSG to manage authentication traffic.

        Security teams perform this during integration to bridge 5G access requests with

        existing Radius authentication services. Configuration involves mapping the server

        name to its specific IP Address address within the management plane.'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RadiusProxyRequest'
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: PostMtManage5gControlRadiusproxy
  /mt/manage/5g/control/radiusSecret:
    get:
      tags:
      - Control Plane Resource API
      summary: View Radius Secret
      description: 'Displays the active Radius server shared secret for the root TSG. Technical leads

        use this when troubleshooting authentication failures to ensure secrets match the

        on-premise Radius server configuration. This visibility is restricted to authorized

        management plane users.'
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: GetMtManage5gControlRadiussecret
    post:
      tags:
      - Control Plane Resource API
      summary: Set Radius Secret
      description: 'Updates the Radius server shared secret for the root TSG. Administrators use this

        during credential rotation or initial onboarding to secure communication between

        SASE components and external authentication servers. Changes are applied

        immediately across the regional control plane.'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RadiusServerSecretRequest'
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: PostMtManage5gControlRadiussecret
  /mt/manage/5g/control/radiusServers:
    get:
      tags:
      - Control Plane Resource API
      summary: List Radius Servers
      description: 'Lists Radius server details currently configured for 5G connectivity in a specific

        region. Infrastructure teams audit this information to verify which authentication

        nodes are active within the service environment and ensure regional redundancy.'
      responses:
        '200':
          description: Success
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: GetMtManage5gControlRadiusservers
  /mt/manage/5g/control/supported/interfaces:
    get:
      tags:
      - Control Plane Resource API
      summary: List Supported Interfaces
      description: 'Displays available network interfaces compatible with 5G control plane integration.

        Network engineers reference this list during planning to determine the correct

        connection types for specific 5G deployments within the SASE fabric.'
      responses:
        '200':
          description: Successful response
        '500':
          description: Server Error
      operationId: GetMtManage5gControlSupportedInterfaces
  /mt/manage/5g/control/interface:
    get:
      tags:
      - Control Plane Resource API
      summary: Show Selected Interface
      description: 'Retrieves the specific network interface currently assigned to 5G operations.

        Administrators use this to verify active configuration settings after committing

        interface changes to ensure signal traffic routing matches the intended design.'
      responses:
        '200':
          description: Successful response
        '500':
          description: Server Error
      operationId: GetMtManage5gControlInterface
    post:
      tags:
      - Control Plane Resource API
      summary: Assign Network Interface
      description: 'Defines the interface type (e.g., RADIUS) and reporting intervals used for 5G control

        plane traffic. Users configure these settings during initial setup to customize how

        authentication data flows between regional nodes and the management plane.'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SetInterface'
      responses:
        '200':
          description: Successful response
        '400':
          description: Bad Request
        '500':
          description: Server Error
      operationId: PostMtManage5gControlInterface
  /mt/manage/5g/control/interimMsg:
    put:
      tags:
      - Control Plane Resource API
      summary: Update Message Intervals
      description: 'Modifies the interim message configuration for the active 5G control plane.

        Administrators adjust these reporting frequencies to balance management plane

        traffic with real-time session visibility for active subscriber devices.'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateInterimMsg'
      responses:
        '200':
          description: Successful response
        '400':
          description: Bad Request
        '404':
          description: Data Not Found
        '500':
          description: Server Error
      operationId: PutMtManage5gControlInterimmsg
components:
  schemas:
    SetInterface:
      type: object
      properties:
        interfaceType:
          type: string
          example: RADIUS
        processInterimMsg:
          type: boolean
          default: false
        interimMsgInterval:
          type: integer
          description: How often interim messages will come(in minutes)
      required:
      - interfaceType
    RadiusProxyRequest:
      type: object
      properties:
        name:
          type: string
        ipaddress:
          type: string
    UpdateInterimMsg:
      type: object
      properties:
        processMsg:
          type: boolean
          default: false
        interval:
          type: integer
          description: How often interim messages will come(in minutes)
    RadiusServerSecretRequest:
      type: object
      properties:
        secret:
          type: string
        created_by:
          type: string