get_policies
List and inspect Prisma SD-WAN policy sets, stacks, rules, and status across network, priority, NAT, security, or performance families. Provide a policy name or ID to fetch its rules and status.
Instructions
Inspect the major Prisma SD-WAN policy families using human policy names.
sets and stacks can be listed tenant-wide. rules and status
require policy as an exact/partial name or ID; ambiguous policy names are
never auto-selected. Security policy-set status is not present in the source
registry and is therefore reported unsupported instead of invented.
Args:
family: Which policy family to inspect: network, priority, nat,
security, performance, or all to query every family at
once (each item tagged with policy_family). all only
supports operation="sets" or "stacks" — rules/status
need a single policy name, which is meaningless across
families at once.
operation: sets (default) or stacks list every policy set/stack
tenant-wide, no policy needed. rules lists the rules inside
one policy set — requires policy. status gets one policy
set's status — requires policy; not available for family="security"
(reported as unsupported_operation, not guessed).
policy: Exact/partial policy-set name or controller ID. Required for
rules/status, ignored for sets/stacks. Ambiguous
partial matches are never auto-picked — the error lists every
candidate so you can retry with an exact name or ID.
cursor: Opaque pagination token copied from a previous response's
next_cursor. Omit on the first call.
limit: Max items to return in this page. Omit to use the server
default page size (50; max 200).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max items to return in this page. Omit to use the server default page size (50; max 200). | |
| cursor | No | Opaque pagination token copied from a previous response's `next_cursor`. Omit on the first call. | |
| family | Yes | Which policy family to inspect: `network`, `priority`, `nat`, `security`, `performance`, or `all` to query every family at once (each item tagged with `policy_family`). `all` only supports `operation="sets"` or `"stacks"` — `rules`/`status` need a single `policy` name, which is meaningless across families at once. | |
| policy | No | Exact/partial policy-set name or controller ID. Required for `rules`/`status`, ignored for `sets`/`stacks`. Ambiguous partial matches are never auto-picked — the error lists every candidate so you can retry with an exact name or ID. | |
| operation | No | `sets` (default) or `stacks` list every policy set/stack tenant-wide, no `policy` needed. `rules` lists the rules inside one policy set — requires `policy`. `status` gets one policy set's status — requires `policy`; not available for `family="security"` (reported as `unsupported_operation`, not guessed). | sets |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |