prisma-airs-sdk

TypeScript SDK for Palo Alto Networks Prisma AIRS — covering the full lifecycle from configuration management to operational scanning across all three service domains: AI Runtime Security, AI Red Teaming, and Model Security.

Installation

npm install @cdot65/prisma-airs-sdk

Requires Node.js 18+. Zero external HTTP dependencies (native fetch + crypto).

What's Included

| Service | Client | Auth | Capabilities | | ----------------------- | --------------------- | ------- | ---------------------------------------------------------- | | AI Runtime Security | Scanner | API Key | Sync/async content scanning, prompt injection detection | | Management | ManagementClient | OAuth2 | Profiles, topics, API keys, apps, DLP, deployment, logs | | Model Security | ModelSecurityClient | OAuth2 | ML model scanning, security groups, rule management | | AI Red Teaming | RedTeamClient | OAuth2 | Automated red team scans, reports, targets, custom attacks |

All OAuth2 services share credentials and handle token lifecycle automatically (caching, proactive refresh, 401/403 auto-retry).

Quick Start

import { init, Scanner, Content } from '@cdot65/prisma-airs-sdk';

init({ apiKey: 'YOUR_API_KEY' });

const scanner = new Scanner();
const content = new Content({
  prompt: 'What is the capital of France?',
  response: 'The capital of France is Paris.',
});

const result = await scanner.syncScan({ profile_name: 'my-profile' }, content);

console.log(result.category); // "benign" | "malicious"
console.log(result.action); // "allow" | "block"

That's the API-key scanning path. The OAuth2 clients (ManagementClient, ModelSecurityClient, RedTeamClient), authentication setup, error handling, and runnable examples are all covered in the documentation.

Documentation

Full docs at cdot65.github.io/prisma-airs-sdk:

• Getting Started — installation, quick start, configuration, environment variables
• Scan API — sync/async content scanning
• Management API — profiles, topics, API keys, apps, DLP, deployment, logs
• Model Security API — model scans, security groups, rules
• Red Team API — scans, reports, targets, custom attacks
• OAuth Lifecycle & Error Handling
• API Reference — generated from source

Runnable example scripts live in docs-site/examples/.

Development

npm install
npm run build          # tsup (CJS + ESM + .d.ts)
npm run test           # vitest
npm run lint           # eslint
npm run typecheck      # tsc --noEmit

License

MIT