@xen-orchestra/rest-api 0.31.1 → 0.33.0

package/open-api/spec/swagger.json

@@ -1479,6 +1479,775 @@
 				],
 				"type": "object"
 			},
+			"Partial_Record_VM_OPERATIONS.boolean-or-string-or-null__": {
+				"properties": {
+					"assert_operation_valid": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"awaiting_memory_live": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"call_plugin": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_dynamic_range": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_memory_limits": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_memory_live": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_NVRAM": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_shadow_memory": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_shadow_memory_live": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_static_range": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_VCPUs": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"changing_VCPUs_live": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"checkpoint": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"clean_reboot": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"clean_shutdown": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"clone": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"copy": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"create_template": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"create_vtpm": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"csvm": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"data_source_op": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"destroy": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"export": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"get_boot_record": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"hard_reboot": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"hard_shutdown": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"import": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"make_into_template": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"metadata_export": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"migrate_send": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"pause": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"pool_migrate": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"power_state_reset": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"provision": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"query_services": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"resume": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"resume_on": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"revert": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"reverting": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"send_sysrq": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"send_trigger": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"shutdown": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"snapshot": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"snapshot_with_quiesce": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"start": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"start_on": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"suspend": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"unpause": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					},
+					"update_allowed_operations": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "boolean"
+							}
+						],
+						"nullable": true
+					}
+				},
+				"type": "object",
+				"description": "Make all properties in T optional"
+			},
+			"Record_string.string-or-null_": {
+				"properties": {},
+				"additionalProperties": {
+					"type": "string",
+					"nullable": true
+				},
+				"type": "object",
+				"description": "Construct a type with a set of properties K of type T"
+			},
+			"UpdateVmRequestBody": {
+				"description": "Body of `PATCH /vms/{id}`.\n\nExtends {@link EditVmProps} with two REST-only properties that the xo-server\nresource-set mixin handles outside of `editVm`.",
+				"properties": {
+					"affinityHost": {
+						"type": "string",
+						"nullable": true
+					},
+					"autoPoweron": {
+						"type": "boolean"
+					},
+					"blockedOperations": {
+						"$ref": "#/components/schemas/Partial_Record_VM_OPERATIONS.boolean-or-string-or-null__"
+					},
+					"coresPerSocket": {
+						"anyOf": [
+							{
+								"type": "number",
+								"format": "double"
+							},
+							{
+								"type": "string"
+							}
+						],
+						"nullable": true
+					},
+					"cpuCap": {
+						"type": "number",
+						"format": "double",
+						"nullable": true
+					},
+					"cpuMask": {
+						"items": {
+							"type": "number",
+							"format": "double"
+						},
+						"type": "array"
+					},
+					"cpuWeight": {
+						"type": "number",
+						"format": "double",
+						"nullable": true
+					},
+					"cpus": {
+						"type": "number",
+						"format": "double"
+					},
+					"cpusStaticMax": {
+						"anyOf": [
+							{
+								"type": "number",
+								"format": "double"
+							},
+							{
+								"type": "string"
+							}
+						]
+					},
+					"creation": {
+						"properties": {
+							"user": {
+								"type": "string"
+							}
+						},
+						"type": "object",
+						"description": "Update VM creation metadata stored under `other_config.xo:*`. The object is\nmerged with the existing data."
+					},
+					"expNestedHvm": {
+						"type": "boolean"
+					},
+					"hasVendorDevice": {
+						"type": "boolean"
+					},
+					"highAvailability": {
+						"type": "string",
+						"enum": [
+							"best-effort",
+							"restart",
+							""
+						]
+					},
+					"hvmBootFirmware": {
+						"type": "string",
+						"nullable": true
+					},
+					"memory": {
+						"anyOf": [
+							{
+								"type": "number",
+								"format": "double"
+							},
+							{
+								"type": "string"
+							}
+						]
+					},
+					"memoryMax": {
+						"anyOf": [
+							{
+								"type": "number",
+								"format": "double"
+							},
+							{
+								"type": "string"
+							}
+						]
+					},
+					"memoryMin": {
+						"anyOf": [
+							{
+								"type": "number",
+								"format": "double"
+							},
+							{
+								"type": "string"
+							}
+						]
+					},
+					"memoryStaticMax": {
+						"anyOf": [
+							{
+								"type": "number",
+								"format": "double"
+							},
+							{
+								"type": "string"
+							}
+						]
+					},
+					"nameDescription": {
+						"type": "string"
+					},
+					"nameLabel": {
+						"type": "string"
+					},
+					"nestedVirt": {
+						"type": "boolean"
+					},
+					"nicType": {
+						"type": "string",
+						"nullable": true
+					},
+					"notes": {
+						"type": "string",
+						"nullable": true
+					},
+					"PV_args": {
+						"type": "string"
+					},
+					"secureBoot": {
+						"type": "boolean"
+					},
+					"startDelay": {
+						"type": "number",
+						"format": "double"
+					},
+					"suspendSr": {
+						"type": "string",
+						"nullable": true
+					},
+					"tags": {
+						"items": {
+							"type": "string"
+						},
+						"type": "array"
+					},
+					"uefiMode": {
+						"type": "string",
+						"enum": [
+							"setup",
+							"user"
+						]
+					},
+					"vga": {
+						"type": "string",
+						"enum": [
+							"std",
+							"cirrus"
+						]
+					},
+					"videoram": {
+						"type": "number",
+						"enum": [
+							1,
+							2,
+							4,
+							8,
+							16
+						]
+					},
+					"viridian": {
+						"type": "boolean"
+					},
+					"virtualizationMode": {
+						"type": "string",
+						"enum": [
+							"pv",
+							"hvm"
+						]
+					},
+					"xenStoreData": {
+						"$ref": "#/components/schemas/Record_string.string-or-null_"
+					},
+					"resourceSet": {
+						"type": "string",
+						"nullable": true,
+						"description": "Moves the VM in/out of a resource set."
+					},
+					"share": {
+						"type": "boolean",
+						"description": "When `true` and the VM is in a resource set, share the VM with all members\nof that resource set. `false` is a no-op."
+					}
+				},
+				"type": "object",
+				"additionalProperties": false
+			},
 			"StatValues": {
 				"items": {
 					"type": "number",
@@ -5948,7 +6717,6 @@
 							}
 						},
 						"required": [
-							"other_config",
 							"srId"
 						],
 						"type": "object"
@@ -7872,7 +8640,42 @@
 									"revert-snapshot",
 									"shutdown:clean",
 									"shutdown:hard",
-									"update:datasources"
+									"update:affinityHost",
+									"update:autoPoweron",
+									"update:blockedOperations",
+									"update:coresPerSocket",
+									"update:cpuCap",
+									"update:cpuMask",
+									"update:cpuWeight",
+									"update:cpus",
+									"update:cpusStaticMax",
+									"update:creation",
+									"update:datasources",
+									"update:expNestedHvm",
+									"update:hasVendorDevice",
+									"update:highAvailability",
+									"update:hvmBootFirmware",
+									"update:memory",
+									"update:memoryMax",
+									"update:memoryMin",
+									"update:memoryStaticMax",
+									"update:nameDescription",
+									"update:nameLabel",
+									"update:nestedVirt",
+									"update:nicType",
+									"update:notes",
+									"update:PV_args",
+									"update:resourceSet",
+									"update:secureBoot",
+									"update:share",
+									"update:startDelay",
+									"update:suspendSr",
+									"update:uefiMode",
+									"update:vga",
+									"update:videoram",
+									"update:viridian",
+									"update:virtualizationMode",
+									"update:xenStoreData"
 								]
 							},
 							"selector": {
@@ -11724,6 +12527,21 @@
 			"UnbrandedXoMessage": {
 				"$ref": "#/components/schemas/Unbrand_XoMessage_"
 			},
+			"McpStatus": {
+				"properties": {
+					"enabled": {
+						"type": "boolean",
+						"enum": [
+							true
+						],
+						"nullable": false
+					}
+				},
+				"required": [
+					"enabled"
+				],
+				"type": "object"
+			},
 			"Record_string.HOST_ALLOWED_OPERATIONS_": {
 				"properties": {},
 				"type": "object",
@@ -15567,7 +16385,42 @@
 									"revert-snapshot",
 									"shutdown:clean",
 									"shutdown:hard",
-									"update:datasources"
+									"update:affinityHost",
+									"update:autoPoweron",
+									"update:blockedOperations",
+									"update:coresPerSocket",
+									"update:cpuCap",
+									"update:cpuMask",
+									"update:cpuWeight",
+									"update:cpus",
+									"update:cpusStaticMax",
+									"update:creation",
+									"update:datasources",
+									"update:expNestedHvm",
+									"update:hasVendorDevice",
+									"update:highAvailability",
+									"update:hvmBootFirmware",
+									"update:memory",
+									"update:memoryMax",
+									"update:memoryMin",
+									"update:memoryStaticMax",
+									"update:nameDescription",
+									"update:nameLabel",
+									"update:nestedVirt",
+									"update:nicType",
+									"update:notes",
+									"update:PV_args",
+									"update:resourceSet",
+									"update:secureBoot",
+									"update:share",
+									"update:startDelay",
+									"update:suspendSr",
+									"update:uefiMode",
+									"update:vga",
+									"update:videoram",
+									"update:viridian",
+									"update:virtualizationMode",
+									"update:xenStoreData"
 								]
 							},
 							"selector": {
@@ -17218,7 +18071,42 @@
 									"revert-snapshot",
 									"shutdown:clean",
 									"shutdown:hard",
-									"update:datasources"
+									"update:affinityHost",
+									"update:autoPoweron",
+									"update:blockedOperations",
+									"update:coresPerSocket",
+									"update:cpuCap",
+									"update:cpuMask",
+									"update:cpuWeight",
+									"update:cpus",
+									"update:cpusStaticMax",
+									"update:creation",
+									"update:datasources",
+									"update:expNestedHvm",
+									"update:hasVendorDevice",
+									"update:highAvailability",
+									"update:hvmBootFirmware",
+									"update:memory",
+									"update:memoryMax",
+									"update:memoryMin",
+									"update:memoryStaticMax",
+									"update:nameDescription",
+									"update:nameLabel",
+									"update:nestedVirt",
+									"update:nicType",
+									"update:notes",
+									"update:PV_args",
+									"update:resourceSet",
+									"update:secureBoot",
+									"update:share",
+									"update:startDelay",
+									"update:suspendSr",
+									"update:uefiMode",
+									"update:vga",
+									"update:videoram",
+									"update:viridian",
+									"update:virtualizationMode",
+									"update:xenStoreData"
 								]
 							},
 							"selector": {
@@ -18380,7 +19268,42 @@
 									"revert-snapshot",
 									"shutdown:clean",
 									"shutdown:hard",
-									"update:datasources"
+									"update:affinityHost",
+									"update:autoPoweron",
+									"update:blockedOperations",
+									"update:coresPerSocket",
+									"update:cpuCap",
+									"update:cpuMask",
+									"update:cpuWeight",
+									"update:cpus",
+									"update:cpusStaticMax",
+									"update:creation",
+									"update:datasources",
+									"update:expNestedHvm",
+									"update:hasVendorDevice",
+									"update:highAvailability",
+									"update:hvmBootFirmware",
+									"update:memory",
+									"update:memoryMax",
+									"update:memoryMin",
+									"update:memoryStaticMax",
+									"update:nameDescription",
+									"update:nameLabel",
+									"update:nestedVirt",
+									"update:nicType",
+									"update:notes",
+									"update:PV_args",
+									"update:resourceSet",
+									"update:secureBoot",
+									"update:share",
+									"update:startDelay",
+									"update:suspendSr",
+									"update:uefiMode",
+									"update:vga",
+									"update:videoram",
+									"update:viridian",
+									"update:virtualizationMode",
+									"update:xenStoreData"
 								]
 							},
 							"selector": {
@@ -18441,7 +19364,7 @@
 	},
 	"info": {
 		"title": "@xen-orchestra/rest-api",
-		"version": "0.31.1",
+		"version": "0.33.0",
 		"description": "REST API to manage your XOA",
 		"license": {
 			"name": "AGPL-3.0-or-later"
@@ -18550,7 +19473,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/ping": {
@@ -18584,7 +19508,8 @@
 						"none": []
 					}
 				],
-				"parameters": []
+				"parameters": [],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/gui-routes": {
@@ -18618,7 +19543,8 @@
 						"none": []
 					}
 				],
-				"parameters": []
+				"parameters": [],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms": {
@@ -18722,7 +19648,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms/{id}.{format}": {
@@ -18795,7 +19722,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/vms/{id}": {
@@ -18942,7 +19870,69 @@
 						},
 						"example": "f07ab729-c0e8-721c-45ec-f11276377030"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
+			},
+			"patch": {
+				"operationId": "UpdateVm",
+				"responses": {
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"422": {
+						"description": "Invalid parameters"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Partial update of a VM. Only the fields present in the body are modified;\neverything else is left untouched.\n\nOperations are applied sequentially: if one fails, previously applied\nchanges are not rolled back.\n\nRequired privilege per field provided in the body:\n- resource: vm, action: update:<field> (e.g. update:nameLabel, update:cpus, ...)\n\nSpecial fields:\n- `xenStoreData` keys are automatically prefixed with `vm-data/` when missing",
+				"tags": [
+					"vms"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "f07ab729-c0e8-721c-45ec-f11276377030"
+					}
+				],
+				"requestBody": {
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"$ref": "#/components/schemas/UpdateVmRequestBody"
+							},
+							"example": {
+								"nameLabel": "web-prod-01",
+								"nameDescription": "Production web frontend — managed by n8n",
+								"notes": "Docker containers: nginx, app-1, app-2"
+							}
+						}
+					}
+				}
 			},
 			"delete": {
 				"operationId": "DeleteVm",
@@ -18985,7 +19975,8 @@
 						},
 						"example": "f07ab729-c0e8-721c-45ec-f11276377030"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/stats": {
@@ -20285,7 +21276,8 @@
 							"$ref": "#/components/schemas/XapiStatsGranularity"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/vms/{id}/stats/data_source/{data_source}": {
@@ -20339,7 +21331,8 @@
 						},
 						"example": "cpu0"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteDataSource",
@@ -20391,7 +21384,8 @@
 						},
 						"example": "cpu0"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/start": {
@@ -20479,7 +21473,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/clean_shutdown": {
@@ -20549,7 +21544,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/clean_reboot": {
@@ -20616,7 +21612,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/hard_shutdown": {
@@ -20686,7 +21683,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/hard_reboot": {
@@ -20756,7 +21754,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/pause": {
@@ -20826,7 +21825,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/suspend": {
@@ -20896,7 +21896,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/resume": {
@@ -20966,7 +21967,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/unpause": {
@@ -21036,7 +22038,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/revert_snapshot": {
@@ -21134,7 +22137,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/snapshot": {
@@ -21222,7 +22226,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/actions/clone": {
@@ -21336,7 +22341,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/alarms": {
@@ -21445,7 +22451,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms/{id}/vdis": {
@@ -21556,7 +22563,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms/{id}/backup-jobs": {
@@ -21675,7 +22683,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms/{id}/messages": {
@@ -21794,7 +22803,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms/{id}/tasks": {
@@ -21923,7 +22933,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms/{id}/tags/{tag}": {
@@ -21974,7 +22985,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteVmTag",
@@ -22023,7 +23035,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vms/{id}/dashboard": {
@@ -22155,7 +23168,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vms/{id}/actions/migrate": {
@@ -22284,7 +23298,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vm-templates": {
@@ -22388,7 +23403,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-templates/{id}.{format}": {
@@ -22461,7 +23477,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/vm-templates/{id}": {
@@ -22598,7 +23615,8 @@
 						},
 						"example": "b7569d99-30f8-178a-7d94-801de3e29b5b-f873abe0-b138-4995-8f6f-498b423d234d"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteVmTemplate",
@@ -22641,7 +23659,8 @@
 						},
 						"example": "6d50ba76-0f11-1ff1-4f6a-b502afc31b8e"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vm-templates/{id}/alarms": {
@@ -22750,7 +23769,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-templates/{id}/vdis": {
@@ -22861,7 +23881,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-templates/{id}/messages": {
@@ -22980,7 +24001,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-templates/{id}/tasks": {
@@ -23109,7 +24131,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-templates/{id}/tags/{tag}": {
@@ -23160,7 +24183,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteVmTemplateTag",
@@ -23209,7 +24233,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vm-snapshots": {
@@ -23313,7 +24338,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-snapshots/{id}.{format}": {
@@ -23386,7 +24412,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/vm-snapshots/{id}": {
@@ -23623,7 +24650,8 @@
 						},
 						"example": "d68fca2c-41e6-be87-d790-105c1642a090"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteVmSnapshot",
@@ -23666,7 +24694,8 @@
 						},
 						"example": "d68fca2c-41e6-be87-d790-105c1642a090"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vm-snapshots/{id}/alarms": {
@@ -23775,7 +24804,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-snapshots/{id}/vdis": {
@@ -23886,7 +24916,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-snapshots/{id}/messages": {
@@ -24005,7 +25036,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-snapshots/{id}/tasks": {
@@ -24134,7 +25166,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-snapshots/{id}/tags/{tag}": {
@@ -24185,7 +25218,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteVmSnapshotTag",
@@ -24234,7 +25268,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vm-controllers": {
@@ -24336,7 +25371,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-controllers/{id}": {
@@ -24450,7 +25486,8 @@
 						},
 						"example": "9b4775bd-9493-490a-9afa-f786a44caa4f"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-controllers/{id}/alarms": {
@@ -24559,7 +25596,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-controllers/{id}/vdis": {
@@ -24670,7 +25708,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-controllers/{id}/messages": {
@@ -24789,7 +25828,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-controllers/{id}/tasks": {
@@ -24918,7 +25958,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vm-controllers/{id}/tags/{tag}": {
@@ -24969,7 +26010,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteVmControllerTag",
@@ -25018,7 +26060,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vifs": {
@@ -25122,7 +26165,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "CreateVif",
@@ -25197,7 +26241,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vifs/{id}": {
@@ -25269,7 +26314,8 @@
 						},
 						"example": "f028c5d4-578a-332c-394e-087aaca32dd3"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DestroyVif",
@@ -25308,7 +26354,8 @@
 						},
 						"example": "6b6ca0f5-6611-0636-4b0a-1fb1c1e96414"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vifs/{id}/alarms": {
@@ -25417,7 +26464,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vifs/{id}/messages": {
@@ -25536,7 +26584,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vifs/{id}/tasks": {
@@ -25665,7 +26714,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vifs/{id}/actions/connect": {
@@ -25732,7 +26782,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vifs/{id}/actions/disconnect": {
@@ -25799,7 +26850,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vdis": {
@@ -25952,7 +27004,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "CreateVdi",
@@ -26019,7 +27072,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vdis/{id}": {
@@ -26095,7 +27149,8 @@
 						},
 						"example": "c77f9955-c1d2-4b39-aa1c-73cdb2dacb7e"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteVdi",
@@ -26135,7 +27190,8 @@
 						},
 						"example": "c77f9955-c1d2-4b39-aa1c-73cdb2dacb7e"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vdis/{id}/alarms": {
@@ -26244,7 +27300,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vdis/{id}/messages": {
@@ -26363,7 +27420,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vdis/{id}/tasks": {
@@ -26492,7 +27550,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vdis/{id}/actions/migrate": {
@@ -26585,7 +27644,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vdis/{id}/tags/{tag}": {
@@ -26636,7 +27696,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteVdiTag",
@@ -26685,7 +27746,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vdi-snapshots": {
@@ -26788,7 +27850,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vdi-snapshots/{id}.{format}": {
@@ -26846,7 +27909,8 @@
 							"$ref": "#/components/schemas/Exclude_SUPPORTED_VDI_FORMAT.qcow2_"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/vdi-snapshots/{id}": {
@@ -26922,7 +27986,8 @@
 						},
 						"example": "d2727772-735b-478f-b6f9-11e7db56dfd0"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteVdiSnapshot",
@@ -26958,7 +28023,8 @@
 						},
 						"example": "d2727772-735b-478f-b6f9-11e7db56dfd0"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vdi-snapshots/{id}/alarms": {
@@ -27067,7 +28133,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vdi-snapshots/{id}/messages": {
@@ -27186,7 +28253,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vdi-snapshots/{id}/tasks": {
@@ -27315,7 +28383,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vdi-snapshots/{id}/tags/{tag}": {
@@ -27362,7 +28431,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteVdiSnapshotTag",
@@ -27407,7 +28477,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vbds": {
@@ -27511,7 +28582,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "CreateVbd",
@@ -27598,7 +28670,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vbds/{id}": {
@@ -27667,7 +28740,8 @@
 						},
 						"example": "f07ab729-c0e8-721c-45ec-f11276377030"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteVbd",
@@ -27704,7 +28778,8 @@
 						},
 						"example": "f07ab729-c0e8-721c-45ec-f11276377030"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vbds/{id}/alarms": {
@@ -27813,7 +28888,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vbds/{id}/messages": {
@@ -27932,7 +29008,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vbds/{id}/tasks": {
@@ -28061,7 +29138,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/vbds/{id}/actions/connect": {
@@ -28128,7 +29206,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/vbds/{id}/actions/disconnect": {
@@ -28195,7 +29274,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/users": {
@@ -28298,7 +29378,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "CreateUser",
@@ -28384,7 +29465,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/users/{id}": {
@@ -28449,7 +29531,8 @@
 						},
 						"example": "722d17b9-699b-49d2-8193-be1ac573d3de"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"patch": {
 				"operationId": "UpdateUser",
@@ -28508,7 +29591,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteUser",
@@ -28548,7 +29632,8 @@
 						},
 						"example": "722d17b9-699b-49d2-8193-be1ac573d3de"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/users/{id}/groups": {
@@ -28670,7 +29755,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/users/{id}/authentication_tokens": {
@@ -28779,7 +29865,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "PostAuthenticationTokens",
@@ -28893,237 +29980,240 @@
 							}
 						}
 					}
-				}
-			}
-		},
-		"/users/{id}/tasks": {
-			"get": {
-				"operationId": "GetUserTasks",
-				"responses": {
-					"200": {
-						"description": "Ok",
-						"content": {
-							"application/json": {
-								"schema": {
-									"$ref": "#/components/schemas/SendObjects_Partial_Unbrand_XoTask___"
-								},
-								"examples": {
-									"Example 1": {
-										"value": [
-											"/rest/v0/tasks/0mdd1basu",
-											"/rest/v0/tasks/0mdd1t24g"
-										]
-									},
-									"Example 2": {
-										"value": [
-											{
-												"status": "failure",
-												"id": "0mdd1basu",
-												"properties": {
-													"method": "xoa.licenses.getSelf",
-													"params": {},
-													"name": "API call: xoa.licenses.getSelf",
-													"userId": "e531b8c9-3876-4ed9-8fd2-0476d5f825c9",
-													"type": "api.call"
-												},
-												"href": "/rest/v0/tasks/0mdd1basu"
-											},
-											{
-												"status": "failure",
-												"id": "0mdd1t24g",
-												"properties": {
-													"method": "xoa.licenses.getSelf",
-													"params": {},
-													"name": "API call: xoa.licenses.getSelf",
-													"userId": "e531b8c9-3876-4ed9-8fd2-0476d5f825c9",
-													"type": "api.call"
-												},
-												"href": "/rest/v0/tasks/0mdd1t24g"
-											}
-										]
-									}
-								}
-							}
-						}
-					},
-					"400": {
-						"description": "Bad request"
-					},
-					"401": {
-						"description": "Authentication required"
-					},
-					"404": {
-						"description": "Resource not found"
-					}
-				},
-				"description": "Returns all tasks that match the following privilege:\n- resource: task, action: read",
-				"tags": [
-					"tasks",
-					"users"
-				],
-				"security": [
-					{
-						"*": [
-							"acl"
-						]
-					}
-				],
-				"parameters": [
-					{
-						"in": "path",
-						"name": "id",
-						"required": true,
-						"schema": {
-							"type": "string"
-						},
-						"example": "722d17b9-699b-49d2-8193-be1ac573d3de"
-					},
-					{
-						"in": "query",
-						"name": "fields",
-						"required": false,
-						"schema": {
-							"type": "string"
-						},
-						"example": "id,status,properties"
-					},
-					{
-						"in": "query",
-						"name": "ndjson",
-						"required": false,
-						"schema": {
-							"type": "boolean"
-						}
-					},
-					{
-						"in": "query",
-						"name": "markdown",
-						"required": false,
-						"schema": {
-							"type": "boolean"
-						}
-					},
-					{
-						"in": "query",
-						"name": "filter",
-						"required": false,
-						"schema": {
-							"type": "string"
-						},
-						"example": "status:failure"
-					},
-					{
-						"in": "query",
-						"name": "limit",
-						"required": false,
-						"schema": {
-							"format": "double",
-							"type": "number"
-						},
-						"example": 42
-					}
-				]
-			}
-		},
-		"/users/authentication_tokens": {
-			"post": {
-				"operationId": "PostDeprecatedAuthenticationTokens",
-				"responses": {
-					"201": {
-						"description": "Resource created",
-						"content": {
-							"application/json": {
-								"schema": {
-									"properties": {
-										"token": {
-											"$ref": "#/components/schemas/Unbrand_XoAuthenticationToken_"
-										}
-									},
-									"required": [
-										"token"
-									],
-									"type": "object"
-								},
-								"examples": {
-									"Example 1": {
-										"value": {
-											"token": {
-												"client": {
-													"id": "my-fav-client"
-												},
-												"created_at": 1760346600297,
-												"description": "token for CLI usage",
-												"id": "fhIUz8AtMLndzMd3ksfoTpHb0tWyKHmT6-M3o_hUbRg",
-												"user_id": "722d17b9-699b-49d2-8193-be1ac573d3de",
-												"expiration": 1760350200297
-											}
-										}
-									}
-								}
-							}
-						}
-					},
-					"400": {
-						"description": "Bad request"
-					},
-					"401": {
-						"description": "Authentication required"
-					},
-					"500": {
-						"description": "Internal server error, XenServer/XCP-ng error"
-					}
 				},
-				"tags": [
-					"users"
-				],
-				"deprecated": true,
-				"security": [
-					{
-						"*": []
-					}
-				],
-				"parameters": [],
-				"requestBody": {
-					"required": true,
-					"content": {
-						"application/json": {
-							"schema": {
-								"properties": {
-									"expiresIn": {
-										"anyOf": [
-											{
-												"type": "string"
-											},
-											{
-												"type": "number",
-												"format": "double"
-											}
-										]
-									},
-									"description": {
-										"type": "string"
-									},
-									"client": {
-										"properties": {
-											"id": {
-												"type": "string"
-											}
-										},
-										"type": "object"
-									}
-								},
-								"type": "object"
-							},
-							"example": {
-								"client": {
-									"id": "my-fav-client"
-								},
-								"description": "token for CLI usage",
-								"expiresIn": "1 hour"
-							}
-						}
-					}
-				}
+				"x-mcp-exposure": "confirm"
+			}
+		},
+		"/users/{id}/tasks": {
+			"get": {
+				"operationId": "GetUserTasks",
+				"responses": {
+					"200": {
+						"description": "Ok",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/SendObjects_Partial_Unbrand_XoTask___"
+								},
+								"examples": {
+									"Example 1": {
+										"value": [
+											"/rest/v0/tasks/0mdd1basu",
+											"/rest/v0/tasks/0mdd1t24g"
+										]
+									},
+									"Example 2": {
+										"value": [
+											{
+												"status": "failure",
+												"id": "0mdd1basu",
+												"properties": {
+													"method": "xoa.licenses.getSelf",
+													"params": {},
+													"name": "API call: xoa.licenses.getSelf",
+													"userId": "e531b8c9-3876-4ed9-8fd2-0476d5f825c9",
+													"type": "api.call"
+												},
+												"href": "/rest/v0/tasks/0mdd1basu"
+											},
+											{
+												"status": "failure",
+												"id": "0mdd1t24g",
+												"properties": {
+													"method": "xoa.licenses.getSelf",
+													"params": {},
+													"name": "API call: xoa.licenses.getSelf",
+													"userId": "e531b8c9-3876-4ed9-8fd2-0476d5f825c9",
+													"type": "api.call"
+												},
+												"href": "/rest/v0/tasks/0mdd1t24g"
+											}
+										]
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"404": {
+						"description": "Resource not found"
+					}
+				},
+				"description": "Returns all tasks that match the following privilege:\n- resource: task, action: read",
+				"tags": [
+					"tasks",
+					"users"
+				],
+				"security": [
+					{
+						"*": [
+							"acl"
+						]
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "722d17b9-699b-49d2-8193-be1ac573d3de"
+					},
+					{
+						"in": "query",
+						"name": "fields",
+						"required": false,
+						"schema": {
+							"type": "string"
+						},
+						"example": "id,status,properties"
+					},
+					{
+						"in": "query",
+						"name": "ndjson",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					},
+					{
+						"in": "query",
+						"name": "markdown",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					},
+					{
+						"in": "query",
+						"name": "filter",
+						"required": false,
+						"schema": {
+							"type": "string"
+						},
+						"example": "status:failure"
+					},
+					{
+						"in": "query",
+						"name": "limit",
+						"required": false,
+						"schema": {
+							"format": "double",
+							"type": "number"
+						},
+						"example": 42
+					}
+				],
+				"x-mcp-exposure": "allow"
+			}
+		},
+		"/users/authentication_tokens": {
+			"post": {
+				"operationId": "PostDeprecatedAuthenticationTokens",
+				"responses": {
+					"201": {
+						"description": "Resource created",
+						"content": {
+							"application/json": {
+								"schema": {
+									"properties": {
+										"token": {
+											"$ref": "#/components/schemas/Unbrand_XoAuthenticationToken_"
+										}
+									},
+									"required": [
+										"token"
+									],
+									"type": "object"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"token": {
+												"client": {
+													"id": "my-fav-client"
+												},
+												"created_at": 1760346600297,
+												"description": "token for CLI usage",
+												"id": "fhIUz8AtMLndzMd3ksfoTpHb0tWyKHmT6-M3o_hUbRg",
+												"user_id": "722d17b9-699b-49d2-8193-be1ac573d3de",
+												"expiration": 1760350200297
+											}
+										}
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"tags": [
+					"users"
+				],
+				"deprecated": true,
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [],
+				"requestBody": {
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"properties": {
+									"expiresIn": {
+										"anyOf": [
+											{
+												"type": "string"
+											},
+											{
+												"type": "number",
+												"format": "double"
+											}
+										]
+									},
+									"description": {
+										"type": "string"
+									},
+									"client": {
+										"properties": {
+											"id": {
+												"type": "string"
+											}
+										},
+										"type": "object"
+									}
+								},
+								"type": "object"
+							},
+							"example": {
+								"client": {
+									"id": "my-fav-client"
+								},
+								"description": "token for CLI usage",
+								"expiresIn": "1 hour"
+							}
+						}
+					}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/users/{id}/acl-privileges": {
@@ -29176,7 +30266,7 @@
 				},
 				"description": "Returns all ACL privileges that match the following privilege:\n- resource: acl-privilege, action: read (if not self)",
 				"tags": [
-					"acls",
+					"rbacs",
 					"users"
 				],
 				"security": [
@@ -29232,7 +30322,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/tasks": {
@@ -29356,7 +30447,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteTasks",
@@ -29382,7 +30474,8 @@
 						]
 					}
 				],
-				"parameters": []
+				"parameters": [],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/tasks/{id}": {
@@ -29462,7 +30555,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteTask",
@@ -29502,7 +30596,8 @@
 						},
 						"example": "0mdd1basu"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/tasks/{id}/actions/abort": {
@@ -29569,7 +30664,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/srs": {
@@ -29685,7 +30781,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/srs/{id}": {
@@ -29791,7 +30888,8 @@
 						},
 						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteSr",
@@ -29831,7 +30929,8 @@
 						},
 						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/srs/{id}/alarms": {
@@ -29940,7 +31039,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/srs/{id}/messages": {
@@ -30059,7 +31159,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/srs/{id}/tasks": {
@@ -30188,7 +31289,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/srs/{id}/tags/{tag}": {
@@ -30239,7 +31341,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteSrTag",
@@ -30288,7 +31391,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/srs/{id}/actions/reclaim_space": {
@@ -30357,7 +31461,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/srs/{id}/actions/scan": {
@@ -30426,7 +31531,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/srs/{id}/actions/forget": {
@@ -30495,7 +31601,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/sms": {
@@ -30599,7 +31706,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/sms/{id}": {
@@ -30689,7 +31797,8 @@
 						},
 						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/servers": {
@@ -30791,7 +31900,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "AddServer",
@@ -30863,7 +31973,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/servers/{id}": {
@@ -30928,7 +32039,8 @@
 						},
 						"example": "f07ab729-c0e8-721c-45ec-f11276377030"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteServer",
@@ -30968,7 +32080,8 @@
 						},
 						"example": "f07ab729-c0e8-721c-45ec-f11276377030"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/servers/{id}/actions/connect": {
@@ -31038,7 +32151,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/servers/{id}/actions/disconnect": {
@@ -31108,7 +32222,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/servers/{id}/tasks": {
@@ -31237,7 +32352,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/schedules": {
@@ -31343,7 +32459,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/schedules/{id}": {
@@ -31405,7 +32522,8 @@
 						},
 						"example": "cf7249f8-d20b-494f-97f4-b1f32f94e780"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/schedules/{id}/actions/run": {
@@ -31475,7 +32593,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/restore-logs": {
@@ -31587,7 +32706,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/restore-logs/{id}": {
@@ -31670,7 +32790,8 @@
 						},
 						"example": "1758180544428"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/restore/logs": {
@@ -31781,7 +32902,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/restore/logs/{id}": {
@@ -31858,7 +32980,8 @@
 						},
 						"example": "1758180544428"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/proxies": {
@@ -31962,7 +33085,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/proxies/{id}": {
@@ -32022,7 +33146,8 @@
 						},
 						"example": "e625ea0c-a876-405a-b838-109d762efe88"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools": {
@@ -32126,7 +33251,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools/{id}": {
@@ -32230,7 +33356,8 @@
 						},
 						"example": "355ee47d-ff4c-4924-3db2-fd86ae629676"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools/{id}/actions/create_network": {
@@ -32325,7 +33452,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/actions/create_bonded_network": {
@@ -32419,7 +33547,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/actions/create_internal_network": {
@@ -32508,7 +33637,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/actions/emergency_shutdown": {
@@ -32575,7 +33705,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/actions/rolling_reboot": {
@@ -32642,7 +33773,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/actions/rolling_update": {
@@ -32709,7 +33841,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/actions/create_vm": {
@@ -32800,7 +33933,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/stats": {
@@ -34836,7 +35970,8 @@
 							"$ref": "#/components/schemas/XapiStatsGranularity"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/pools/{id}/dashboard": {
@@ -35103,7 +36238,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools/{id}/alarms": {
@@ -35212,7 +36348,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools/{id}/missing_patches": {
@@ -35308,7 +36445,8 @@
 						},
 						"example": "355ee47d-ff4c-4924-3db2-fd86ae629676"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools/{id}/messages": {
@@ -35427,7 +36565,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools/{id}/tags/{tag}": {
@@ -35478,7 +36617,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeletePoolTag",
@@ -35527,7 +36667,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/tasks": {
@@ -35655,7 +36796,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pools/{id}/actions/management_reconfigure": {
@@ -35746,7 +36888,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pifs": {
@@ -35852,7 +36995,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pifs/{id}": {
@@ -35936,7 +37080,8 @@
 						},
 						"example": "d9e42451-3794-089f-de81-4ee0e6137bee"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pifs/{id}/alarms": {
@@ -36045,7 +37190,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pifs/{id}/messages": {
@@ -36164,7 +37310,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pifs/{id}/tasks": {
@@ -36293,7 +37440,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pgpus": {
@@ -36397,7 +37545,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pgpus/{id}": {
@@ -36468,7 +37617,8 @@
 						},
 						"example": "838335fa-ee21-15e1-760a-a37a3a4ef1db"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pcis": {
@@ -36572,7 +37722,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pcis/{id}": {
@@ -36637,7 +37788,8 @@
 						},
 						"example": "9377b642-cc71-8749-1e71-308898b652da"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pbds": {
@@ -36747,7 +37899,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pbds/{id}": {
@@ -36817,7 +37970,8 @@
 						},
 						"example": "16b2a60f-7c4d-f45f-7c7a-963b06fc587d"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/pbds/{id}/actions/plug": {
@@ -36886,7 +38040,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pbds/{id}/actions/unplug": {
@@ -36955,7 +38110,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/networks": {
@@ -37059,7 +38215,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/networks/{id}": {
@@ -37144,7 +38301,8 @@
 						},
 						"example": "9fe12ca3-d75d-cfb0-492e-cfd2bc6c568f"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteNetwork",
@@ -37184,7 +38342,8 @@
 						},
 						"example": "9fe12ca3-d75d-cfb0-492e-cfd2bc6c568f"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/networks/{id}/alarms": {
@@ -37293,7 +38452,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/networks/{id}/messages": {
@@ -37412,7 +38572,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/networks/{id}/tasks": {
@@ -37541,7 +38702,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/networks/{id}/tags/{tag}": {
@@ -37592,7 +38754,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteNetworkTag",
@@ -37641,7 +38804,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/messages": {
@@ -37747,7 +38911,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/messages/{id}": {
@@ -37812,7 +38977,45 @@
 						},
 						"example": "f775eaeb-abe5-94e0-9682-14c37c3a1dfe"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
+			}
+		},
+		"/mcp/status": {
+			"get": {
+				"operationId": "GetMcpStatus",
+				"responses": {
+					"200": {
+						"description": "MCP is enabled",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/McpStatus"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"enabled": true
+										}
+									}
+								}
+							}
+						}
+					},
+					"503": {
+						"description": "MCP is disabled by administrator"
+					}
+				},
+				"description": "Returns whether MCP is currently enabled on this XO server.\n\nThe route is publicly reachable (no authentication required) so the\n`@xen-orchestra/mcp` binary can check the kill-switch at startup,\nbefore any credentials have been configured.",
+				"tags": [
+					"mcp"
+				],
+				"security": [
+					{
+						"none": []
+					}
+				],
+				"parameters": []
 			}
 		},
 		"/hosts": {
@@ -37916,7 +39119,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/hosts/{id}": {
@@ -38193,7 +39397,8 @@
 						},
 						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/hosts/{id}/stats": {
@@ -44414,7 +45619,8 @@
 							"$ref": "#/components/schemas/XapiStatsGranularity"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/hosts/{id}/audit.txt": {
@@ -44459,7 +45665,8 @@
 						},
 						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/hosts/{id}/logs.tgz": {
@@ -44504,7 +45711,8 @@
 						},
 						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		},
 		"/hosts/{id}/alarms": {
@@ -44613,7 +45821,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/hosts/{id}/smt": {
@@ -44680,7 +45889,8 @@
 						},
 						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/hosts/{id}/missing_patches": {
@@ -44776,7 +45986,8 @@
 						},
 						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/hosts/{id}/messages": {
@@ -44895,7 +46106,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/hosts/{id}/tasks": {
@@ -45024,7 +46236,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/hosts/{id}/tags/{tag}": {
@@ -45075,7 +46288,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteHostTag",
@@ -45124,7 +46338,8 @@
 						},
 						"example": "from-rest-api"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/hosts/{id}/actions/management_reconfigure": {
@@ -45218,7 +46433,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/hosts/{id}/actions/disable": {
@@ -45344,7 +46560,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/hosts/{id}/actions/enable": {
@@ -45414,7 +46631,8 @@
 							"type": "boolean"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/groups": {
@@ -45523,7 +46741,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "CreateGroup",
@@ -45599,7 +46818,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/groups/{id}": {
@@ -45659,7 +46879,8 @@
 						},
 						"example": "7d98fee4-3357-41a7-ac3f-9124212badb7"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"patch": {
 				"operationId": "UpdateGroup",
@@ -45715,7 +46936,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DeleteGroup",
@@ -45755,7 +46977,8 @@
 						},
 						"example": "7d98fee4-3357-41a7-ac3f-9124212badb7"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/groups/{id}/users/{userId}": {
@@ -45806,7 +47029,8 @@
 						},
 						"example": "722d17b9-699b-49d2-8193-be1ac573d3de"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"put": {
 				"operationId": "AddUserToGroup",
@@ -45855,7 +47079,8 @@
 						},
 						"example": "722d17b9-699b-49d2-8193-be1ac573d3de"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/groups/{id}/users": {
@@ -45971,7 +47196,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/groups/{id}/tasks": {
@@ -46100,7 +47326,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/events": {
@@ -46128,7 +47355,8 @@
 						]
 					}
 				],
-				"parameters": []
+				"parameters": [],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/events/{id}/subscriptions": {
@@ -46232,7 +47460,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/events/{id}/subscriptions/{subscriptionId}": {
@@ -46281,7 +47510,8 @@
 							"$ref": "#/components/schemas/XoListenerType"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/backup-repositories": {
@@ -46385,7 +47615,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup-repositories/{id}": {
@@ -46451,7 +47682,8 @@
 						},
 						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup-logs": {
@@ -46561,7 +47793,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup-logs/{id}": {
@@ -46688,7 +47921,8 @@
 						},
 						"example": "1753776067468"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup-jobs": {
@@ -46794,7 +48028,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup-jobs/{id}": {
@@ -46875,7 +48110,8 @@
 						},
 						"example": "d33f3dc1-92b4-469c-ad58-4c2a106a4721"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/jobs/vm": {
@@ -46982,7 +48218,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/jobs/vm/{id}": {
@@ -47060,7 +48297,8 @@
 						},
 						"example": "d33f3dc1-92b4-469c-ad58-4c2a106a4721"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/jobs/metadata": {
@@ -47165,7 +48403,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/jobs/metadata/{id}": {
@@ -47230,7 +48469,8 @@
 						},
 						"example": "b50f95fd-f6b7-4027-87b6-6a02c7dcd5f5"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/jobs/mirror": {
@@ -47335,7 +48575,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/jobs/mirror/{id}": {
@@ -47419,7 +48660,8 @@
 						},
 						"example": "e680c14c-ab52-45c8-bb0e-bd4ca12ea8f9"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/logs": {
@@ -47530,7 +48772,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup/logs/{id}": {
@@ -47651,7 +48894,8 @@
 						},
 						"example": "1753776067468"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup-archives": {
@@ -47790,7 +49034,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/backup-archives/{id}": {
@@ -47871,7 +49116,8 @@
 						},
 						"example": "231264c3-af43-4ec0-a3be-394c5b1fdbfc/xo-vm-backups/6ef7c09e-677b-1e6f-0546-7ab30413c61c/20250801T080832Z.json"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/alarms": {
@@ -47988,7 +49234,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/alarms/{id}": {
@@ -48059,7 +49306,8 @@
 						},
 						"example": "0c98c71c-2f9c-d5c2-b9b6-2c8371730eab"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/acl-roles": {
@@ -48108,7 +49356,7 @@
 				},
 				"description": "Returns all ACL roles that match the following privilege:\n- resource: acl-role, action: read",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48154,7 +49402,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "CreateAclV2Role",
@@ -48199,7 +49448,7 @@
 				},
 				"description": "Required privilege:\n- resource: acl-role, action: create",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48231,7 +49480,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/acl-roles/{id}": {
@@ -48272,7 +49522,7 @@
 				},
 				"description": "Required privilege:\n- resource: acl-role, action: read",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48289,7 +49539,8 @@
 						},
 						"example": "784bd959-08de-4b26-b575-92ded5aef872"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteAclV2Role",
@@ -48312,7 +49563,7 @@
 				},
 				"description": "Required privilege:\n- resource: acl-role, action: delete",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48329,7 +49580,8 @@
 						},
 						"example": "784bd959-08de-4b26-b575-92ded5aef872"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"patch": {
 				"operationId": "UpdateAclV2Role",
@@ -48355,7 +49607,7 @@
 				},
 				"description": "Required privileges:\n- resource: acl-role, action: update (grants all fields)\n- resource: acl-role, action: update:name (if name is passed)\n- resource: acl-role, action: update:description (if description is passed)",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48395,7 +49647,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/acl-roles/{id}/actions/copy": {
@@ -48437,7 +49690,7 @@
 				},
 				"description": "Copy a role with all its privileges. Possibility to modify the name and description of the copied role.\n\nRequired privileges:\n- resource: acl-role, action: create\n- resource: acl-privilege, action: create (if copied role has privileges)",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48483,7 +49736,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/acl-roles/{id}/privileges": {
@@ -48536,7 +49790,7 @@
 				},
 				"description": "Returns all ACL privileges that match the following privilege:\n- resource: acl-privilege, action: read",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48591,7 +49845,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			}
 		},
 		"/acl-roles/{id}/groups/{groupId}": {
@@ -48619,7 +49874,7 @@
 				},
 				"description": "Attach an ACL V2 role to a group.\n\nRequired privilege:\n- resource: acl-role, action: update:groups",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48645,7 +49900,8 @@
 						},
 						"example": "ee4965bf-d8af-4ca2-aa0e-5f29d0c5f9e2"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DetachAclV2Group",
@@ -48668,7 +49924,7 @@
 				},
 				"description": "Detach an ACL V2 role from a group.\n\nRequired privilege:\n- resource: acl-role, action: update:groups",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48694,7 +49950,8 @@
 						},
 						"example": "ee4965bf-d8af-4ca2-aa0e-5f29d0c5f9e2"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/acl-roles/{id}/users/{userId}": {
@@ -48722,7 +49979,7 @@
 				},
 				"description": "Attach an ACL V2 role to a user.\n\nRequired privilege:\n- resource: acl-role, action: update:users",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48748,7 +50005,8 @@
 						},
 						"example": "ee4965bf-d8af-4ca2-aa0e-5f29d0c5f9e2"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"delete": {
 				"operationId": "DetachAclV2User",
@@ -48771,7 +50029,7 @@
 				},
 				"description": "Detach an ACL V2 role from a user.\n\nRequired privilege:\n- resource: acl-role, action: update:users",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48797,7 +50055,8 @@
 						},
 						"example": "ee4965bf-d8af-4ca2-aa0e-5f29d0c5f9e2"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/acl-privileges": {
@@ -48847,7 +50106,7 @@
 				},
 				"description": "Returns all ACL privileges that match the following privilege:\n- resource: acl-privilege, action: read",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48893,7 +50152,8 @@
 						},
 						"example": 42
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"post": {
 				"operationId": "CreateAclV2Privilege",
@@ -48941,7 +50201,7 @@
 				},
 				"description": "Required privilege:\n- resource: acl-privilege, action: create",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -48965,7 +50225,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/acl-privileges/{id}": {
@@ -49008,7 +50269,7 @@
 				},
 				"description": "Required privilege:\n- resource: acl-privilege, action: read",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -49025,7 +50286,8 @@
 						},
 						"example": "c5d89d1a-df1e-4b72-98a0-c40adfdf49c1"
 					}
-				]
+				],
+				"x-mcp-exposure": "allow"
 			},
 			"delete": {
 				"operationId": "DeleteAclV2Privilege",
@@ -49048,7 +50310,7 @@
 				},
 				"description": "Required privilege:\n- resource: acl-privilege, action: delete",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -49065,7 +50327,8 @@
 						},
 						"example": "784bd959-08de-4b26-b575-92ded5aef872"
 					}
-				]
+				],
+				"x-mcp-exposure": "confirm"
 			},
 			"patch": {
 				"operationId": "UpdateAclV2Privilege",
@@ -49091,7 +50354,7 @@
 				},
 				"description": "Required privileges:\n- resource: acl-privilege, action: update (grants all fields)\n- resource: acl-privilege, action: update:action (if action is passed)\n- resource: acl-privilege, action: update:resource (if resource is passed)\n- resource: acl-privilege, action: update:effect (if effect is passed)\n- resource: acl-privilege, action: update:selector (if selector is passed)",
 				"tags": [
-					"acls"
+					"rbacs"
 				],
 				"security": [
 					{
@@ -49124,7 +50387,8 @@
 							}
 						}
 					}
-				}
+				},
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/pools/{id}/vms": {
@@ -49202,6 +50466,7 @@
 						"example": "c787b75c-3e0d-70fa-d0c3-cbfd382d7e33"
 					}
 				],
+				"x-mcp-exposure": "confirm",
 				"requestBody": {
 					"required": true,
 					"content": {
@@ -49305,6 +50570,7 @@
 						"example": true
 					}
 				],
+				"x-mcp-exposure": "confirm",
 				"requestBody": {
 					"required": true,
 					"content": {
@@ -49376,7 +50642,8 @@
 							"$ref": "#/components/schemas/Exclude_SUPPORTED_VDI_FORMAT.qcow2_"
 						}
 					}
-				]
+				],
+				"x-mcp-exposure": "deny"
 			},
 			"put": {
 				"operationId": "ImportVdiContent",
@@ -49431,6 +50698,7 @@
 						}
 					}
 				],
+				"x-mcp-exposure": "deny",
 				"requestBody": {
 					"required": true,
 					"content": {
@@ -49455,7 +50723,8 @@
 				},
 				"tags": [
 					"docs"
-				]
+				],
+				"x-mcp-exposure": "deny"
 			}
 		}
 	}