# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Manage API Tokens API
  version: 1.0.0
extends: openapi/palo-alto-networks-manage-api-tokens-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-10-01'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 4
- target: $.paths['/v1/mgmt/tokens'].get
  update:
    x-apievangelist-phrasing:
      intent: Describe programmatic access settings
      effect: read
      questions:
      - Is programmatic API access enabled for my Cloud NGFW tenant?
      - What programmatic access configuration does my account have?
      instructions:
      - text: Describe my programmatic access settings.
      - text: Show whether API programmatic access is enabled.
      method: generated
      generated: '2026-10-01'
- target: $.paths['/v1/mgmt/tokens/cloudfirewalladmin'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a token for the firewall admin role
      effect: read
      questions:
      - How do I get a JWT to call firewall management APIs as a CloudFirewallAdmin?
      - Can I set how long a firewall admin token stays valid?
      instructions:
      - text: Get a CloudFirewallAdmin access token.
      - text: Issue a CloudFirewallAdmin token that expires in {expiry}.
        slots:
          expiry: requestBody.ExpiryTime
      method: generated
      generated: '2026-10-01'
- target: $.paths['/v1/mgmt/tokens/cloudglobalrulestackadmin'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a token for the global rulestack admin role
      effect: read
      questions:
      - Which token do I need to manage global rulestacks programmatically?
      - Can a global rulestack admin token have a custom expiry time?
      instructions:
      - text: Get a CloudGlobalRulestackAdmin access token.
      - text: Issue a CloudGlobalRulestackAdmin token valid for {expiry}.
        slots:
          expiry: requestBody.ExpiryTime
      method: generated
      generated: '2026-10-01'
- target: $.paths['/v1/mgmt/tokens/cloudrulestackadmin'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a token for the local rulestack admin role
      effect: read
      questions:
      - What token lets me manage local rulestacks through the API?
      - Can I choose the expiry of a local rulestack admin token?
      instructions:
      - text: Get a CloudRulestackAdmin access token.
      - text: Issue a CloudRulestackAdmin token lasting {expiry}.
        slots:
          expiry: requestBody.ExpiryTime
      method: generated
      generated: '2026-10-01'