openapi: 3.2.0
info:
  title: Prisma Browser for MSP Report API API
  version: '1.0'
  description: "The Prisma Browser for MSP API provides a suite of endpoints to automate the management of security services for the SMB market. \nThis API allows developers to programmatically create and configure new tenants, manage license allocation, and retrieve detailed security reports on blocked malware, \nmalicious websites, and unauthorized extensions. By using these services, MSPs can integrate multi-tenant visibility and lifecycle management directly into their \nown dashboards or third-party platforms like ServiceNow. This Open API spec file was created on February 23, 2026. © 2026 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be found at [https://www.paloaltonetworks.com/company/trademarks.html](https://www.paloaltonetworks.com/company/trademarks.html). All other marks mentioned herein may be trademarks of their respective companies."
tags:
- name: Report API
paths:
  /mt/pab/report/count:
    post:
      summary: Get Report Event
      description: Retrieves the total count of security events for the specified tenant.
      operationId: PostMtPabReportCount
      responses:
        '200':
          description: Successfully retrieved report count
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get report count for tenant 1615680886
                value:
                  tsg_id: '1615680886'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/report/extension_blocked:
    post:
      summary: Get blocked extension reports
      description: Retrieves reports of browser extensions that were blocked for the specified tenant.
      operationId: PostMtPabReportExtension_blocked
      responses:
        '200':
          description: Successfully retrieved blocked extension reports
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get blocked extension report for tenant 1297178607
                value:
                  tsg_id: '1297178607'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/report/extension_category:
    post:
      summary: Get extension category reports
      description: Retrieves browser extension reports categorized by type for the specified tenant.
      operationId: PostMtPabReportExtension_category
      responses:
        '200':
          description: Successfully retrieved extension category reports
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get extension category report for tenant 1297178607
                value:
                  tsg_id: '1297178607'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/report/malicious_website:
    post:
      summary: Get malicious website reports
      description: Retrieves reports of malicious websites detected for the specified tenant.
      operationId: PostMtPabReportMalicious_website
      responses:
        '200':
          description: Successfully retrieved malicious website reports
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get malicious website report for tenant 1297178607
                value:
                  tsg_id: '1297178607'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/report/malware_blocked:
    post:
      summary: Get blocked malware reports
      description: Retrieves reports of malware that was blocked for the specified tenant.
      operationId: PostMtPabReportMalware_blocked
      responses:
        '200':
          description: Successfully retrieved blocked malware reports
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get blocked malware report for tenant 1742569585
                value:
                  tsg_id: '1742569585'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/report/malware_website:
    post:
      summary: Get malware website reports
      description: Retrieves reports of websites identified as malware sources for the specified tenant.
      operationId: PostMtPabReportMalware_website
      responses:
        '200':
          description: Successfully retrieved malware website reports
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get malware website report for tenant 1615680886
                value:
                  tsg_id: '1615680886'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/report/website_blocked:
    post:
      summary: Get blocked website reports
      description: Retrieves reports of websites that were blocked for the specified tenant.
      operationId: PostMtPabReportWebsite_blocked
      responses:
        '200':
          description: Successfully retrieved blocked website reports
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get blocked website report for tenant 1742569585
                value:
                  tsg_id: '1742569585'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
  /mt/pab/report/website_category:
    post:
      summary: Get website category reports
      description: Retrieves website access reports categorized by website type for the specified tenant.
      operationId: PostMtPabReportWebsite_category
      responses:
        '200':
          description: Successfully retrieved website category reports
          content:
            application/json: {}
        '400':
          description: Invalid request payload
        '404':
          description: Tenant not found
        '500':
          description: Internal server error
      parameters: []
      tags:
      - Report API
      requestBody:
        description: Tenant Service Group ID for the report request
        content:
          application/json:
            examples:
              Example Request:
                description: Get website category report for tenant 1821219322
                value:
                  tsg_id: '1821219322'
            schema:
              $ref: '#/components/schemas/ReportRequest'
        required: true
      security:
      - authKey: []
components:
  schemas:
    ReportRequest:
      type: object
      required:
      - tsg_id
      examples:
      - tsg_id: '1615680886'
      description: Request payload for report operations
      properties:
        tsg_id:
          type: string
          minLength: 1
          examples:
          - '1615680886'
          description: Tenant Service Group ID for which to retrieve report data
  securitySchemes:
    authKey: {}