>
    Strata Copilot
    Query Verdicts by IP Address
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Prisma Access User-Based Policy
    5. Third-Party Device-ID APIs
    6. Query Verdicts by IP Address
    Download PDF
    Prisma Access

    Query Verdicts by IP Address

    Table of Contents

    Query Verdicts by IP Address

    Retrieves IP address-to-device mappings based on IP address.

    Synopsis

    URI/api/v1/token/verdicts?ip={STRING} (recommended API method)
    /api/v1/token/{apiKey}/verdicts?ip={STRING} (legacy API method)
    HTTP MethodGET

    Description

    Uses IP addresses to return corresponding device mappings. You can retrieve multiple mappings by providing a list of up to 10 IP addresses, separated by commas, appended to the URI.
    If the service can't find a mapping associated with an IP address, it won't return a mapping for that IP address.

    Success Response

    Upon success, the HTTP response code is 200. In addition, the response contains a JSON object with the following fields:
    FieldDescription
    countInteger representing the number of mappings returned in the response.
    verdictsObject that contains the mappings specified in the request.
    For example:
    {     
    "count": 1,
    "verdicts" : [
        {   
            "ip": "10.10.10.10",
            "updateTime": 1623974506,
            "mac": "0a:d4:5f:e9:96:10",
            "category": "Smartphone or Tablet",
            "vendor": "Apple Inc.",
            "model": "iPad2",
            "os": "iOS 9.3.6",
            "osFamily": "iOS",
            "profile": "iPad"
        }
    ]
}
}

    Error Response

    Upon error, the HTTP response code is one of the following:
    Response CodeDescription
    400
    Invalid request. The request was incomplete or malformed in some way.
    Fix the request before retrying.
    401Unauthorized token.
    429Too many requests. The system couldn’t process the request because the system has issued too many requests in a specific period of time. Don't exceed more than one request per second. Wait and try again.
    In addition, the response body contains the following fields:
    Field
    Description
    codeThe error code.
    messageThe error message.

    © 2026 Palo Alto Networks, Inc. All rights reserved.