--- title: "Palo Alto Networks Cortex XDR MCP server - actionlake" description: "Give Claude 117 Palo Alto Networks Cortex XDR actions through one MCP server: endpoints. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/palo-alto-networks-cortex-xdr updated: 2026-10-23 --- Connectors · Identity & security # Palo Alto Networks Cortex XDR MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Palo Alto Networks Cortex XDR and the rest of your systems. It gives your agent 117 Palo Alto Networks Cortex XDR actions (53 reads, 48 writes and 16 that wait for a confirmation) and holds the Palo Alto Networks Cortex XDR credential itself, so the agent never does. It paces Palo Alto Networks Cortex XDR's limits and records every call. [Connect Palo Alto Networks Cortex XDR free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "palo_alto_cortex_xdr.endpoints.list", intent: "check which Palo Alto Networks Cortex XDR account is connected" } # Get Endpoint · read · 1 upstream call ``` - 117 actions in one signed file - 53 read look, never change - 48 write create and update - 16 wait for a yes destructive, confirmed first Set up ## Connect Palo Alto Networks Cortex XDR in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Palo Alto Networks Cortex XDR. Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_key` Cortex XDR Standard API key - `api_key_id` The key's ID from the ID column of the API Keys table - `host` Where your Palo Alto Networks Cortex XDR lives: your host ``` account { op: "connections.requirements", service: "palo_alto_cortex_xdr" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "palo_alto_cortex_xdr.endpoints.list" } # get endpoint · read · 1 upstream call check { action: "palo_alto_cortex_xdr.endpoints.delete", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Palo Alto Networks Cortex XDR at a glance **Sign-in** Header credentials. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_key` `api_key_id` **Setup fields** `host` **Limits we pace to** 10 calls a second, per connection **API covered** Cortex XDR 3.x REST API (OpenAPI 3.0, doc version 3.18), at your Palo Alto Networks Cortex XDR instance's API base URL, which you enter when connecting **Built from** Palo Alto Networks Cortex XDR's documentation, read 23 October 2026[cortex-docs.paloaltonetworks.com](https://cortex-docs.paloaltonetworks.com/xdr-3-api/get-started-with-cortex-xdr-apis) [cortex-docs.paloaltonetworks.com](https://cortex-docs.paloaltonetworks.com/xdr-3-api/cortex-xdr-3.x-apis/incident-management) [cortex-docs.paloaltonetworks.com](https://cortex-docs.paloaltonetworks.com/xdr-3-api/cortex-xdr-3.x-apis/endpoint-management) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 53 of 53 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 6, so ask can line Palo Alto Networks Cortex XDR up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Palo Alto Networks Cortex XDR. 117 actions in 35 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **53** read look, never change - **48** write create and update - **16** destructive wait for a confirmation 1. ### Endpoints 13 3 read · 7 write · 3 destructive Get Endpoint · Delete Endpoints · Get all Endpoints · Retrieve File 2. ### Alerts 7 4 read · 3 write · 0 destructive Get all Alerts · Update Alerts · Retrieve PCAP Packet · Insert CEF Alerts 3. ### Brokers 7 1 read · 4 write · 2 destructive Generate a Broker VM registration token · List registered Broker VMs · Reboot a Broker VM · Edit a Broker VM 4. ### Distributions 6 4 read · 1 write · 1 destructive Create distributions · Get Distributions · Get Distribution version · Get Distribution status 5. ### Authentication settings 5 2 read · 2 write · 1 destructive Get authentication settings for all configured domains · Create authentication settings for IdP SSO or metadata URL · Update authentication settings · Delete authentication settings by domain 6. ### Broker applets 5 1 read · 4 write · 0 destructive Trigger an immediate Network Mapper scan · Activate an applet with a configuration · Edit an applet's configuration · Deactivate an applet 7. ### Disable prevention rules 5 2 read · 2 write · 1 destructive Add Disable Prevention Rule · Get Disable Prevention Rules · Get Disable Prevention Modules · Edit Disable Prevention Rule 8. ### Legacy exceptions 5 2 read · 2 write · 1 destructive Add Legacy Exception Rule · Fetch Legacy Exception Rules · Get Legacy Exceptions Modules · Edit Legacy Exception Rule **27 more areas · 64 actions** - Scripts **5** - Syslog servers **5** - Endpoint tags **4** - Featured fields **4** - Prevention profiles **4** - Datasets **3** - Disable injection prevention rules **3** - Incidents **3** - Lookup data **3** - Risk **3** - Script executions **3** - XQL queries **3** - Actions **2** - Broker log bundles **2** - Hash exceptions **2** - Indicators **2** - System **2** - Users **2** - Audit agent reports **1** - Audit management logs **1** - Broker actions **1** - Device control violations **1** - Endpoint profiles **1** - Quarantine **1** - Roles **1** - Triage presets **1** - User groups **1** Top actions ## The Palo Alto Networks Cortex XDR API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 23 of Palo Alto Networks Cortex XDR's 23 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `palo_alto_cortex_xdr.users.list` Get Users | Get Users. | read | `identity.user.list` 474 connectors | | `palo_alto_cortex_xdr.user_groups.list` Get User Groups | Get User Groups. | read | `identity.group.list` 262 connectors | | `palo_alto_cortex_xdr.roles.list` Get Roles | Get Roles. | read | `identity.role.list` 184 connectors | | `palo_alto_cortex_xdr.endpoints.list` Get Endpoint | Get Endpoint. | read | `device.endpoint.list` 65 connectors | | `palo_alto_cortex_xdr.alerts.list` Get all Alerts | Get all Alerts. | read | `security.alert.list` 22 connectors | | `palo_alto_cortex_xdr.incidents.list` Get all Incidents | Get all Incidents. | read | `security.incident.list` 17 connectors | | `palo_alto_cortex_xdr.audit_management_logs.list` Get Audit Management Log | Get Audit Management Log. | read | `security.audit_log.list` 69 connectors | | `palo_alto_cortex_xdr.incidents.get` Get Extra Incident Data | Get Extra Incident Data. | read | `security.incident.get` 17 connectors | | `palo_alto_cortex_xdr.endpoints.delete` Delete Endpoints | Delete Endpoints. | destructive | `device.endpoint.delete` 35 connectors | | `palo_alto_cortex_xdr.incidents.update` Update an Incident | Update an Incident. | write | `security.incident.update` 13 connectors | | `palo_alto_cortex_xdr.alerts.update` Update Alerts | Update Alerts. | write | `security.alert.update` 12 connectors | | `palo_alto_cortex_xdr.prevention_profiles.create` Add Prevention Profile | Add Prevention Profile. | write | `security.policy.create` 25 connectors | Try it ## Prompts to paste into Claude. Each one names the Palo Alto Networks Cortex XDR actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which Palo Alto Networks Cortex XDR incidents are open, and how long has each been open? calls `palo_alto_cortex_xdr.incidents.list` 2. Write write Update an Incident in Palo Alto Networks Cortex XDR. Show me exactly what you will send before you save it. calls `palo_alto_cortex_xdr.incidents.update` Governance for Palo Alto Networks Cortex XDR ## Destructive actions wait for a yes. 16 Palo Alto Networks Cortex XDR actions are destructive. These are all of them: - Delete Endpoints `palo_alto_cortex_xdr.endpoints.delete` - Delete authentication settings by domain `palo_alto_cortex_xdr.authentication_settings.delete` - Delete a dataset `palo_alto_cortex_xdr.datasets.delete` - Isolate Endpoints `palo_alto_cortex_xdr.endpoints.isolate` - Run Script `palo_alto_cortex_xdr.scripts.run` - Run Snippet Code Script `palo_alto_cortex_xdr.scripts.run_snippet` - Cancel Scan Endpoints `palo_alto_cortex_xdr.endpoints.abort_scan` - Set a User Role `palo_alto_cortex_xdr.users.set_role` - Remove a Broker VM from the tenant `palo_alto_cortex_xdr.brokers.delete` - Shut down a Broker VM `palo_alto_cortex_xdr.brokers.shutdown` - Remove data from a lookup dataset `palo_alto_cortex_xdr.lookup_data.delete` - Delete agent installation packages `palo_alto_cortex_xdr.distributions.delete` - Delete Tags Permanently `palo_alto_cortex_xdr.endpoint_tags.delete` - Delete all or filtered syslog integrations `palo_alto_cortex_xdr.syslog_servers.delete` - Delete Legacy Exception Rules `palo_alto_cortex_xdr.legacy_exceptions.delete` - Delete Disable Prevention Rules `palo_alto_cortex_xdr.disable_prevention_rules.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do palo_alto_cortex_xdr.endpoints.delete confirm_policy: **human** Delete Endpoints? **intent:** the user asked me to delete Endpoints run suspended · waiting for a named person · key _palo-alto-cortex-xdr-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "palo-alto-cortex-xdr-agent", allowed_actions: ["palo_alto_cortex_xdr.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "palo_alto_cortex_xdr.endpoints.delete", approver: "lead@example.com" }, { match: "palo_alto_cortex_xdr.authentication_settings.delete", approver: "lead@example.com" }, { match: "palo_alto_cortex_xdr.datasets.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Palo Alto Networks Cortex XDR only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Palo Alto Networks Cortex XDR costs on actionlake. Every Palo Alto Networks Cortex XDR action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Palo Alto Networks Cortex XDR refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 117 Palo Alto Networks Cortex XDR actions - 117 actions page each page of a long list is one call - 53 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Palo Alto Networks Cortex XDR action. 117 actions by area: the id your agent calls, what it does, and its effect. **Endpoints 13** - `palo_alto_cortex_xdr.endpoints.abort_scan` Cancel Scan Endpoints destructive - `palo_alto_cortex_xdr.endpoints.delete` Delete Endpoints destructive - `palo_alto_cortex_xdr.endpoints.get_policy` Get Policy read - `palo_alto_cortex_xdr.endpoints.isolate` Isolate Endpoints destructive - `palo_alto_cortex_xdr.endpoints.list` Get Endpoint read - `palo_alto_cortex_xdr.endpoints.list_all` Get all Endpoints read - `palo_alto_cortex_xdr.endpoints.quarantine_file` Quarantine Files write - `palo_alto_cortex_xdr.endpoints.restore_file` Restore File write - `palo_alto_cortex_xdr.endpoints.retrieve_file` Retrieve File write - `palo_alto_cortex_xdr.endpoints.scan` Scan Endpoints write - `palo_alto_cortex_xdr.endpoints.set_alias` Set an Endpoint Alias write - `palo_alto_cortex_xdr.endpoints.triage` Initiate Forensics Triage write - `palo_alto_cortex_xdr.endpoints.unisolate` Unisolate Endpoints write **Alerts 7** - `palo_alto_cortex_xdr.alerts.get_pcap` Retrieve PCAP Packet read - `palo_alto_cortex_xdr.alerts.insert_cef` Insert CEF Alerts write - `palo_alto_cortex_xdr.alerts.insert_parsed` Insert Parsed Alerts write - `palo_alto_cortex_xdr.alerts.list` Get all Alerts read - `palo_alto_cortex_xdr.alerts.list_multi_events` Get Alerts Multi-Events v2 read - `palo_alto_cortex_xdr.alerts.list_multi_events_v1` Get Alerts Multi-Events v1 read - `palo_alto_cortex_xdr.alerts.update` Update Alerts write **Brokers 7** - `palo_alto_cortex_xdr.brokers.create_registration_token` Generate a Broker VM registration token write - `palo_alto_cortex_xdr.brokers.delete` Remove a Broker VM from the tenant destructive - `palo_alto_cortex_xdr.brokers.list` List registered Broker VMs read - `palo_alto_cortex_xdr.brokers.reboot` Reboot a Broker VM write - `palo_alto_cortex_xdr.brokers.shutdown` Shut down a Broker VM destructive - `palo_alto_cortex_xdr.brokers.update` Edit a Broker VM write - `palo_alto_cortex_xdr.brokers.upgrade` Upgrade a Broker VM to the latest available version write **Distributions 6** - `palo_alto_cortex_xdr.distributions.create` Create distributions write - `palo_alto_cortex_xdr.distributions.delete` Delete agent installation packages destructive - `palo_alto_cortex_xdr.distributions.get_status` Get Distribution status read - `palo_alto_cortex_xdr.distributions.get_url` Get Distribution URL read - `palo_alto_cortex_xdr.distributions.list` Get Distributions read - `palo_alto_cortex_xdr.distributions.list_versions` Get Distribution version read **Authentication settings 5** - `palo_alto_cortex_xdr.authentication_settings.create` Create authentication settings for IdP SSO or metadata URL write - `palo_alto_cortex_xdr.authentication_settings.delete` Delete authentication settings by domain destructive - `palo_alto_cortex_xdr.authentication_settings.get_metadata` Get IdP metadata read - `palo_alto_cortex_xdr.authentication_settings.list` Get authentication settings for all configured domains read - `palo_alto_cortex_xdr.authentication_settings.update` Update authentication settings write **Broker applets 5** - `palo_alto_cortex_xdr.broker_applets.activate` Activate an applet with a configuration write - `palo_alto_cortex_xdr.broker_applets.configure` Edit an applet's configuration write - `palo_alto_cortex_xdr.broker_applets.deactivate` Deactivate an applet write - `palo_alto_cortex_xdr.broker_applets.get` Get an applet's configuration and status read - `palo_alto_cortex_xdr.broker_applets.network_mapper_scan_now` Trigger an immediate Network Mapper scan write **Disable prevention rules 5** - `palo_alto_cortex_xdr.disable_prevention_rules.create` Add Disable Prevention Rule write - `palo_alto_cortex_xdr.disable_prevention_rules.delete` Delete Disable Prevention Rules destructive - `palo_alto_cortex_xdr.disable_prevention_rules.list` Get Disable Prevention Rules read - `palo_alto_cortex_xdr.disable_prevention_rules.list_modules` Get Disable Prevention Modules read - `palo_alto_cortex_xdr.disable_prevention_rules.update` Edit Disable Prevention Rule write **Legacy exceptions 5** - `palo_alto_cortex_xdr.legacy_exceptions.create` Add Legacy Exception Rule write - `palo_alto_cortex_xdr.legacy_exceptions.delete` Delete Legacy Exception Rules destructive - `palo_alto_cortex_xdr.legacy_exceptions.list` Fetch Legacy Exception Rules read - `palo_alto_cortex_xdr.legacy_exceptions.list_modules` Get Legacy Exceptions Modules read - `palo_alto_cortex_xdr.legacy_exceptions.update` Edit Legacy Exception Rule write **Scripts 5** - `palo_alto_cortex_xdr.scripts.get` Get Script Metadata read - `palo_alto_cortex_xdr.scripts.get_code` Get Script Code read - `palo_alto_cortex_xdr.scripts.list` Get Scripts read - `palo_alto_cortex_xdr.scripts.run` Run Script destructive - `palo_alto_cortex_xdr.scripts.run_snippet` Run Snippet Code Script destructive **Syslog servers 5** - `palo_alto_cortex_xdr.syslog_servers.create` Create a syslog integration write - `palo_alto_cortex_xdr.syslog_servers.delete` Delete all or filtered syslog integrations destructive - `palo_alto_cortex_xdr.syslog_servers.list` Get all or filtered syslog servers read - `palo_alto_cortex_xdr.syslog_servers.test` Test syslog integration read - `palo_alto_cortex_xdr.syslog_servers.update` Update a syslog integration write **Endpoint tags 4** - `palo_alto_cortex_xdr.endpoint_tags.assign` Assign Tags write - `palo_alto_cortex_xdr.endpoint_tags.create` Create Tag write - `palo_alto_cortex_xdr.endpoint_tags.delete` Delete Tags Permanently destructive - `palo_alto_cortex_xdr.endpoint_tags.remove` Remove Tags write **Featured fields 4** - `palo_alto_cortex_xdr.featured_fields.replace_ad_groups` Replace Featured Active Directory Groups write - `palo_alto_cortex_xdr.featured_fields.replace_hosts` Replace Featured Hosts write - `palo_alto_cortex_xdr.featured_fields.replace_ip_addresses` Replace Featured IP Addresses write - `palo_alto_cortex_xdr.featured_fields.replace_users` Replace Featured Users write **Prevention profiles 4** - `palo_alto_cortex_xdr.prevention_profiles.add_signer_cn_to_allowlist` Add Signer CN to Allowlist write - `palo_alto_cortex_xdr.prevention_profiles.create` Add Prevention Profile write - `palo_alto_cortex_xdr.prevention_profiles.list_modules` Get Prevention Profile Modules read - `palo_alto_cortex_xdr.prevention_profiles.update` Edit Prevention Profile write **Datasets 3** - `palo_alto_cortex_xdr.datasets.create` Add Dataset write - `palo_alto_cortex_xdr.datasets.delete` Delete a dataset destructive - `palo_alto_cortex_xdr.datasets.list` Get all datasets read **Disable injection prevention rules 3** - `palo_alto_cortex_xdr.disable_injection_prevention_rules.create` Add Disable Injection and Prevention rule write - `palo_alto_cortex_xdr.disable_injection_prevention_rules.disable` Disable Disable Injection and Prevention Rules write - `palo_alto_cortex_xdr.disable_injection_prevention_rules.list` Get Disable Injection and Prevention rules read **Incidents 3** - `palo_alto_cortex_xdr.incidents.get` Get Extra Incident Data read - `palo_alto_cortex_xdr.incidents.list` Get all Incidents read - `palo_alto_cortex_xdr.incidents.update` Update an Incident write **Lookup data 3** - `palo_alto_cortex_xdr.lookup_data.delete` Remove data from a lookup dataset destructive - `palo_alto_cortex_xdr.lookup_data.list` Get data from a lookup dataset read - `palo_alto_cortex_xdr.lookup_data.upsert` Add or update data in a lookup dataset write **Risk 3** - `palo_alto_cortex_xdr.risk.get_score` Get Risk Score read - `palo_alto_cortex_xdr.risk.list_risky_hosts` Get Risky Hosts read - `palo_alto_cortex_xdr.risk.list_risky_users` Get Risky Users read **Script executions 3** - `palo_alto_cortex_xdr.script_executions.get_result_files_link` Get Script Execution Result Files read - `palo_alto_cortex_xdr.script_executions.get_results` Get Script Execution Results read - `palo_alto_cortex_xdr.script_executions.get_status` Get Script Execution Status read **XQL queries 3** - `palo_alto_cortex_xdr.xql_queries.get_quota` Get XQL Query Quota read - `palo_alto_cortex_xdr.xql_queries.get_results` Get XQL Query Results read - `palo_alto_cortex_xdr.xql_queries.start` Start an XQL Query write **Actions 2** - `palo_alto_cortex_xdr.actions.get_file_retrieval_details` File Retrieval Details read - `palo_alto_cortex_xdr.actions.get_status` Get Action Status read **Broker log bundles 2** - `palo_alto_cortex_xdr.broker_log_bundles.generate` Request asynchronous log-bundle collection from a broker write - `palo_alto_cortex_xdr.broker_log_bundles.get_status` Poll the status of a log-bundle request read **Hash exceptions 2** - `palo_alto_cortex_xdr.hash_exceptions.allowlist` Allow List Files write - `palo_alto_cortex_xdr.hash_exceptions.blocklist` Block List Files write **Indicators 2** - `palo_alto_cortex_xdr.indicators.insert` Insert Simple Indicators, JSON write - `palo_alto_cortex_xdr.indicators.insert_csv` Insert Simple Indicators, CSV write **System 2** - `palo_alto_cortex_xdr.system.get_tenant_info` Get Tenant Info read - `palo_alto_cortex_xdr.system.healthcheck` System Health Check read **Users 2** - `palo_alto_cortex_xdr.users.list` Get Users read - `palo_alto_cortex_xdr.users.set_role` Set a User Role destructive **Audit agent reports 1** - `palo_alto_cortex_xdr.audit_agent_reports.list` Get Audit Agent Report read **Audit management logs 1** - `palo_alto_cortex_xdr.audit_management_logs.list` Get Audit Management Log read **Broker actions 1** - `palo_alto_cortex_xdr.broker_actions.get_status` Poll the status of an asynchronous broker action read **Device control violations 1** - `palo_alto_cortex_xdr.device_control_violations.list` Get Violations read **Endpoint profiles 1** - `palo_alto_cortex_xdr.endpoint_profiles.list` Get endpoint security profiles read **Quarantine 1** - `palo_alto_cortex_xdr.quarantine.get_status` Get Quarantine Status read **Roles 1** - `palo_alto_cortex_xdr.roles.list` Get Roles read **Triage presets 1** - `palo_alto_cortex_xdr.triage_presets.list` Get triage presets read **User groups 1** - `palo_alto_cortex_xdr.user_groups.list` Get User Groups read Questions ## The Palo Alto Networks Cortex XDR MCP server, answered. **Is there a Palo Alto Networks Cortex XDR MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 117 Palo Alto Networks Cortex XDR actions across endpoints, alerts, brokers and distributions, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Palo Alto Networks Cortex XDR. **What do I need to connect Palo Alto Networks Cortex XDR?** Cortex XDR Standard API key and The key's ID from the ID column of the API Keys table. Plus your host. The free call account { op: "connections.requirements", service: "palo_alto_cortex_xdr" } lists exactly what to paste. **Can an AI agent delete or change things in Palo Alto Networks Cortex XDR?** Only if its key allows it, and only with an explicit confirmation. 16 Palo Alto Networks Cortex XDR actions are destructive, including delete Endpoints, delete authentication settings by domain and delete a dataset. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Palo Alto Networks Cortex XDR API limit?** actionlake paces every call to the limits in the Palo Alto Networks Cortex XDR service file: 10 calls a second per connection. Repeated reads are answered from cache (53 Palo Alto Networks Cortex XDR actions can be), which never reaches Palo Alto Networks Cortex XDR. **What does a Palo Alto Networks Cortex XDR action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (117 Palo Alto Networks Cortex XDR actions page). Cache hits, searches, dry runs and calls Palo Alto Networks Cortex XDR refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Palo Alto Networks Cortex XDR API does it cover?** The Cortex XDR 3.x REST API (OpenAPI 3.0, doc version 3.18) at your Palo Alto Networks Cortex XDR instance's API base URL, which you enter when connecting. It is built from Palo Alto Networks Cortex XDR's documentation as read on 23 October 2026. 117 actions in 35 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Palo Alto Networks Cortex XDR data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Palo Alto Networks Cortex XDR credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Palo Alto Networks Cortex XDR Shares the most action names with - [Trend Vision One 12](https://actionlake.com/connectors/trend-vision-one) - [Palo Alto Networks Cortex XSOAR 11](https://actionlake.com/connectors/palo-alto-networks-cortex-xsoar) - [Microsoft Graph Security (Defender XDR) 6](https://actionlake.com/connectors/microsoft-graph-security-defender-xdr) - [Expel Workbench 6](https://actionlake.com/connectors/expel-workbench) - [Palo Alto Networks Strata Cloud Manager / Prisma Access 5](https://actionlake.com/connectors/palo-alto-networks-strata-cloud-manager-prisma-access) - [LimaCharlie 4](https://actionlake.com/connectors/limacharlie) Joins with, on shared entities - [Commvault Cloud 5](https://actionlake.com/connectors/commvault-cloud) - [Sophos Central 5](https://actionlake.com/connectors/sophos-central) - [Zabbix 5](https://actionlake.com/connectors/zabbix) - [Rootly 4](https://actionlake.com/connectors/rootly) - [FireHydrant 4](https://actionlake.com/connectors/firehydrant) - [PagerDuty 4](https://actionlake.com/connectors/pagerduty) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Palo Alto Networks Cortex XDR; the name is the vendor's own. Counts are from the Palo Alto Networks Cortex XDR service file, version 1.0.0. ## Give your agent Palo Alto Networks Cortex XDR today. [Connect Palo Alto Networks Cortex XDR free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/palo-alto-networks-cortex-xdr More: https://actionlake.com/llms.txt