# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Prisma Cloud API Overview Access Keys API
  version: 1.0.0
extends: openapi/palo-alto-networks-access-keys-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 5
- target: $.paths['/access_keys'].get
  update:
    x-apievangelist-phrasing:
      intent: List access keys
      effect: read
      questions:
      - Which Prisma Cloud access keys exist for me or my tenant?
      - Can a System Admin see every access key in the tenant?
      instructions:
      - text: List my Prisma Cloud access keys.
      - text: Show all access keys in the tenant with their status.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/access_keys'].post
  update:
    x-apievangelist-phrasing:
      intent: Create an access key
      effect: write
      questions:
      - How do I generate a new API access key for myself?
      - Can I create an access key for a service account with an expiry date?
      instructions:
      - text: Create an access key named {name} that expires on {expiresOn}.
        slots:
          name: requestBody.name
          expiresOn: requestBody.expiresOn
      - text: Add access key {name} for service account {serviceAccountName}.
        slots:
          name: requestBody.name
          serviceAccountName: requestBody.serviceAccountName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/access_keys/{id}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get an access key's metadata
      effect: read
      questions:
      - When does a specific access key expire and who owns it?
      - How do I view the metadata of one access key?
      instructions:
      - text: Get metadata for access key {id}.
        slots:
          id: path.id
      - text: Show the expiry and status of access key {id}.
        slots:
          id: path.id
      method: generated
      generated: '2026-09-26'
- target: $.paths['/access_keys/{id}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete an access key
      effect: destructive
      questions:
      - How do I permanently delete an access key that leaked?
      - Does deleting an access key free up a slot for a new one?
      instructions:
      - text: Delete access key {id}.
        slots:
          id: path.id
      - text: Permanently remove access key {id}.
        slots:
          id: path.id
      method: generated
      generated: '2026-09-26'
- target: $.paths['/access_keys/{id}/status/{status}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Activate or deactivate an access key
      effect: write
      questions:
      - Can I temporarily deactivate an access key instead of deleting it?
      - Is it possible to reactivate an expired access key?
      instructions:
      - text: Set access key {id} status to {status}.
        slots:
          id: path.id
          status: path.status
      - text: Deactivate access key {id} by setting its status to {status}.
        slots:
          id: path.id
          status: path.status
      method: generated
      generated: '2026-09-26'