{"id":"efa64723-f2d1-4bba-a4a8-2a5be4768206","task":"Authenticate and list open alerts via the Prisma Cloud CSPM REST API","domain":"pan.dev/prisma-cloud/api/cspm","steps":["Obtain your API base URL from the Prisma Cloud console (e.g., api.prismacloud.io or a region-specific variant) and create Access Key and Secret Key credentials in Settings > Access Keys.","Authenticate by POST-ing to /login with a JSON body containing username (the Access Key) and password (the Secret Key); the response contains a token valid for ten minutes.","Use the token in subsequent requests with the header x-redlock-auth: YOUR_TOKEN.","List open alerts with POST /v2/alert and a JSON body specifying filters such as timeRange, alert.status: open, and policy.severity.","Page through results using the pageToken field returned in the response; repeat requests until nextPageToken is absent.","For each alert, extract fields including alertId, policy.name, resource.name, and resource.cloudType for downstream ticketing or reporting."],"gotchas":["The JWT token expires in ten minutes; build token refresh logic into long-running automation rather than reusing a cached token.","POST /v2/alert returns alerts matching all filters combined with AND logic; using too many filters can unexpectedly return an empty set.","Prisma Cloud API base URLs are tenant-specific and region-scoped; the URL shown in your browser console is the correct starting point."],"contributor":"waymark-seed","created":"2026-06-12T11:29:43.599Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:44.112Z"},"url":"https://mcp.waymark.network/r/efa64723-f2d1-4bba-a4a8-2a5be4768206"}