BLAZINGFAST — VPS
Reviewed: 5 October 2026. Setup: 00-index.txt.
Production release: SDK/CLI 0.1.17; contract 2026-10-07.1. Check GET /v1/version and GET /v1/capabilities before using optional workflow features. Strict response validation is enforced.

PURPOSE
Virtual servers for applications, websites, development and infrastructure.
Select a currently offered size, location, OS and billing period from the catalog.
Do not hard-code prices, RAM, disk size or available regions into integrations.

PUBLIC API
GET /v1/products?region=nl&type=vps and product/variant order-options: discover valid choices.
POST /v1/billing/orders/preview: price quote, not a capacity reservation.
POST /v1/billing/orders/draft: create unpaid order; pay the invoice separately.
GET /v1/vps/{serviceId}/status: hostname, assigned region, power, recorded OS/network and runtime metrics.
GET /v1/services?status=suspended&type=vps: paginated suspended VPS list.
Service lists/details include recorded hostname, region and type, never passwords.
Region is a two-letter hosting-country code (for example NL or PT), not a datacenter
building or IP geolocation. Summary region may fall back to the original order
location; VPS status reports its currently assigned region. Null means unavailable.
GET /v1/vps/{serviceId}/credentials: recorded rootPassword; vps.credentials.read.
GET /v1/vps/{serviceId}/console: authenticated browser console link; vps.read.
POST /v1/vps/{serviceId}/start, /stop, /reboot: request power operations.
GET /v1/vps/{serviceId}/actions/{actionId}: inspect accepted action.
GET /v1/vps/{serviceId}/reinstall/os: compatible images.
POST /v1/vps/{serviceId}/reinstall: destructive reinstall, queued HTTP 202 receipt.
Poll the returned operation_url; acceptance is not completion or SSH readiness.
After completion, read credentials separately with vps.credentials.read.
Retry the same intent with the same request key; do not create a new key after timeout.
POST /v1/vps/{serviceId}/password/reset, /sshkey, /firewall/policy/apply.
Permissions: vps.read / vps.write plus billing permissions for order/payment.

CLI
bf products --region nl --type vps
bf vps images --region nl
bf billing order-options PRODUCT_UUID VARIANT_UUID --region nl
bf billing order-preview --file order.json
bf service list vps
bf service list vps --status suspended
bf vps status SERVICE_UUID
bf vps console SERVICE_UUID
Private terminal only: bf vps credentials SERVICE_UUID
bf vps reinstall-os SERVICE_UUID
bf vps backup get SERVICE_UUID
After confirming interruption is acceptable: bf vps reboot SERVICE_UUID
Inspect the returned action: bf vps action-status SERVICE_UUID ACTION_ID
Use bf vps --help for reinstall, password reset, keys, backups and snapshots.

MCP
Hosted list_products(region="nl", type="vps"), get_product_order_options,
quote_order and create_new_order support complete configuration/add-on selection.
An owned public SSH key may be selected with userConfig.sshKeyId.
Hosted: get_vps_status, list_vps_os, request_vps_start/stop/reboot,
request_vps_reinstall, get_vps_action; backups/firewall/snapshots also exposed.
list_services(status="suspended", type="vps") filters services.
get_vps_console returns a browser link; hosted MCP never reveals passwords.
Use the connection's policy and inspect get_operation_request when returned.
Local: bf_vps_status and backup/snapshot viewing tools; opt-in bf_vps_start,
bf_vps_stop, bf_vps_reboot. Local MCP is not the full VPS API/CLI.

LIMITS AND SAFETY
Reinstall/restore overwrite data; stop/reboot interrupt applications.
Suspended/terminated services cannot bypass lifecycle rules through the API.
CPU fraction 0.25 means 25%. Uptime is seconds; missing metrics are unavailable.
Network/disk byte counters are cumulative, not transfer rates or IOPS.
VM disk counters do not prove guest filesystem free space.
Console links require a separate browser login and ownership check; they are not
bearer VNC tickets or a native CLI tunnel. VPS access requires an active service.
Recorded passwords are not live guest verification and can become stale after
manual OS changes. Local bf_vps_credentials needs its scope and the explicit
BF_API_MCP_ENABLE_CREDENTIALS=1 opt-in; results enter the local AI transcript.

Workflow metadata: discover purchase.draft_order / purchase.atomic_deploy, then
follow requirements_url/options_url for canonical deployment inputs and sources.
Quotes are optional and not price-locked. Approve quote.recommended_max_total and
send max_total; deployment_price_limit_exceeded refuses a higher final total.
Follow returned links.operation/service/invoice/order when present. Canonical
write receipts are opt-in with x-bf-response-format: operation and capability
support; default v1 fields remain compatible. After losing a tracked write
response, GET /v1/operations?idempotency_key=ORIGINAL_KEY without repeating it.
Missing or expired receipts never authorize a replacement key. Poll status/done,
then read the successful result's resource IDs. MCP approval is separate from
execution. DNSSEC retains its own polling contract. See the integration guide.