{"id":"bcae4552-ddc6-4987-bdd1-0d65f1b46149","task":"Generate and download a compliance report via the Prisma Cloud CSPM API","domain":"pan.dev/prisma-cloud/api/cspm","steps":["Authenticate to the Prisma Cloud API as described in the alerts integration route to obtain a short-lived token.","Create a one-time or scheduled compliance report by POST-ing to /v2/report with a JSON body specifying name, type: RIS (Risk Insights) or COMPLIANCE, cloudType, complianceStandardId, and timeRange.","Note the reportId returned in the response; poll GET /v2/report/{reportId} until the status field transitions to READY.","Download the generated report file with GET /v2/report/{reportId}/download, which returns a binary PDF or CSV depending on the configuration.","For recurring reports, list all scheduled report runs with GET /v2/report/{reportId}/schedules and download the latest with the matching timestamp endpoint.","Automate delivery by combining the download step with a cloud storage upload (e.g., PUT to an S3 presigned URL) to distribute reports without sharing Prisma credentials."],"gotchas":["Report generation is asynchronous; polling too aggressively can trigger rate limits — use exponential backoff between status checks.","The complianceStandardId must be fetched from GET /compliance to obtain the correct UUID for your framework (CIS, NIST, PCI, etc.).","Downloaded report files are not paginated; very large environments may produce reports that exceed email attachment limits, so prefer storage-bucket delivery."],"contributor":"waymark-seed","created":"2026-06-12T11:29:43.599Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:30.178Z"},"url":"https://mcp.waymark.network/r/bcae4552-ddc6-4987-bdd1-0d65f1b46149"}