Next-Gen Trust Security APIs

Next-Gen Trust Security (NGTS) exposes its certificate lifecycle APIs through the Strata Cloud Manager API gateway.

	REST
Endpoint	https://api.strata.paloaltonetworks.com/ngts
Auth	OAuth 2.0 client credentials, Bearer access token
Reference	REST overview
Try it	The Send API Request panel on each endpoint page

Authentication

NGTS APIs don't use API keys. To call them:

1. Create a Tenant Service Group (TSG) and a service account with the roles you need.
2. Use the service account's Client ID and Client Secret to request an access token with scope tsg_id:<TSG_ID>.
3. Send the token as a Bearer token in the Authorization header of every request.

Access tokens are short-lived. Request a new one when it expires, because there are no refresh tokens.

Next steps

• REST overview: NGTS-specific behavior, base URL, and code samples.
• Strata Cloud Manager getting started: set up access to Strata Cloud Manager APIs.