BLAZINGFAST — CPANEL WEB HOSTING
Reviewed: 5 October 2026. Setup: 00-index.txt.
Production release: SDK/CLI 0.1.17; contract 2026-10-07.1. Check GET /v1/version and GET /v1/capabilities before using optional workflow features. Strict response validation is enforced.

PURPOSE
Managed hosting access for websites, databases and email through cPanel.
Features, storage/mail quotas, PHP versions/extensions and backup options depend
on the selected plan and hosting node; inspect the actual service and cPanel.

PUBLIC API
GET /v1/services/grouped and GET /v1/services/{serviceId}: hosting service details.
GET /v1/billing/products: available products/pricing; check order options before
attempting automation. Use portal checkout if that configuration is unsupported.
Generic invoice, balance, autopay and eligible service billing actions are exposed.
There is no customer /v1 cPanel website/mail/file/PHP administration API.
Permissions: billing.services.read and the relevant billing permissions.

CLI
bf service list
bf service show SERVICE_UUID
bf billing invoices
These inspect the hosting subscription, not website files or cPanel accounts.

MCP
Hosted: list_services, get_service, list_invoices, get_service_billing_options.
Local: bf_service_list, bf_service_show, bf_billing_invoices.
Neither server provides cPanel website or mailbox administration tools.

USE THE DASHBOARD
Open Manage -> Web hosting, then the offered cPanel access. Manage website files,
databases, domains, mailboxes and supported PHP configuration in cPanel.
DNS and domain registration are separate resources; Website Protection does not
configure the website application. Preserve backups before PHP or file changes.
Never send cPanel passwords or private keys to an AI conversation.

Workflow metadata: discover purchase.draft_order / purchase.atomic_deploy, then
follow requirements_url/options_url for canonical deployment inputs and sources.
Quotes are optional and not price-locked. Approve quote.recommended_max_total and
send max_total; deployment_price_limit_exceeded refuses a higher final total.
Follow returned links.operation/service/invoice/order when present. Canonical
write receipts are opt-in with x-bf-response-format: operation and capability
support; default v1 fields remain compatible. After losing a tracked write
response, GET /v1/operations?idempotency_key=ORIGINAL_KEY without repeating it.
Missing or expired receipts never authorize a replacement key. Poll status/done,
then read the successful result's resource IDs. MCP approval is separate from
execution. DNSSEC retains its own polling contract. See the integration guide.