@xen-orchestra/rest-api 0.33.0 → 0.35.0

package/open-api/spec/swagger.json

@@ -2527,6 +2527,7 @@
 									"VM-snapshot",
 									"SR",
 									"VM",
+									"VM-template",
 									"message",
 									"vgpu",
 									"gpuGroup",
@@ -2540,7 +2541,6 @@
 									"VDI-unmanaged",
 									"vgpuType",
 									"VM-controller",
-									"VM-template",
 									"SM",
 									"unknown"
 								]
@@ -2926,8 +2926,8 @@
 						"type": "string",
 						"enum": [
 							"",
-							"native",
-							"zstd"
+							"zstd",
+							"native"
 						]
 					},
 					"proxy": {
@@ -3174,6 +3174,7 @@
 									"VM-snapshot",
 									"SR",
 									"VM",
+									"VM-template",
 									"message",
 									"vgpu",
 									"gpuGroup",
@@ -3187,7 +3188,6 @@
 									"VDI-unmanaged",
 									"vgpuType",
 									"VM-controller",
-									"VM-template",
 									"SM",
 									"backup",
 									"backup-archive",
@@ -3325,6 +3325,7 @@
 									"VM-snapshot",
 									"SR",
 									"VM",
+									"VM-template",
 									"message",
 									"vgpu",
 									"gpuGroup",
@@ -3338,7 +3339,6 @@
 									"VDI-unmanaged",
 									"vgpuType",
 									"VM-controller",
-									"VM-template",
 									"SM",
 									"user",
 									"proxy",
@@ -6458,6 +6458,51 @@
 			"UnbrandedXoVif": {
 				"$ref": "#/components/schemas/Unbrand_XoVif_"
 			},
+			"Pick_EditVifProps.Exclude_keyofEditVifProps.ipv4Allowed-or-ipv6Allowed__": {
+				"properties": {
+					"lockingMode": {
+						"$ref": "#/components/schemas/VIF_LOCKING_MODE"
+					},
+					"rateLimit": {
+						"type": "number",
+						"format": "double",
+						"nullable": true
+					},
+					"txChecksumming": {
+						"type": "boolean"
+					}
+				},
+				"type": "object",
+				"description": "From T, pick a set of properties whose keys are in the union K"
+			},
+			"Omit_EditVifProps.ipv4Allowed-or-ipv6Allowed_": {
+				"$ref": "#/components/schemas/Pick_EditVifProps.Exclude_keyofEditVifProps.ipv4Allowed-or-ipv6Allowed__",
+				"description": "Construct a type with the properties of T except for those in type K."
+			},
+			"UpdateVifRequestBody": {
+				"allOf": [
+					{
+						"$ref": "#/components/schemas/Omit_EditVifProps.ipv4Allowed-or-ipv6Allowed_"
+					},
+					{
+						"properties": {
+							"allowedIpv6Addresses": {
+								"items": {
+									"type": "string"
+								},
+								"type": "array"
+							},
+							"allowedIpv4Addresses": {
+								"items": {
+									"type": "string"
+								},
+								"type": "array"
+							}
+						},
+						"type": "object"
+					}
+				]
+			},
 			"Pick_CreateVifParams_91_0_93_.Exclude_keyofCreateVifParams_91_0_93_.network-or-VM-or-other_config-or-qos_algorithm_params__": {
 				"properties": {
 					"device": {
@@ -7569,8 +7614,17 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"forget",
+									"update",
 									"*",
-									"read"
+									"create",
+									"read",
+									"update:name",
+									"benchmark",
+									"update:enabled",
+									"update:options",
+									"update:proxy",
+									"update:url"
 								]
 							},
 							"selector": {
@@ -7677,14 +7731,26 @@
 								"type": "string",
 								"enum": [
 									"export",
+									"shutdown",
+									"start",
+									"forget",
 									"update",
 									"*",
 									"read",
 									"allow-vm",
+									"detach",
 									"disable",
 									"enable",
 									"evacuate",
 									"export:logs",
+									"join-pool",
+									"migrate-receive",
+									"reboot",
+									"reboot:clean",
+									"reboot:smart",
+									"restart-toolstack",
+									"shutdown:clean",
+									"shutdown:emergency",
 									"update:tags"
 								]
 							},
@@ -7757,7 +7823,8 @@
 									"create",
 									"delete",
 									"read",
-									"update:tags"
+									"update:tags",
+									"update:other_config"
 								]
 							},
 							"selector": {
@@ -7791,7 +7858,9 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"read",
+									"plug",
+									"unplug"
 								]
 							},
 							"selector": {
@@ -7933,6 +8002,7 @@
 									"create",
 									"read",
 									"update:tags",
+									"add-host",
 									"create:network",
 									"create:vm",
 									"emergency-shutdown",
@@ -8146,13 +8216,17 @@
 								"type": "string",
 								"enum": [
 									"import",
+									"forget",
 									"update",
 									"*",
 									"delete",
 									"read",
+									"migrate-receive",
 									"update:tags",
 									"import:vdi",
-									"import:vm"
+									"import:vm",
+									"reclaim-space",
+									"scan"
 								]
 							},
 							"selector": {
@@ -8263,7 +8337,11 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"create",
+									"delete",
+									"read",
+									"connect",
+									"disconnect"
 								]
 							},
 							"selector": {
@@ -8296,8 +8374,12 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"export",
+									"update",
 									"*",
-									"read"
+									"delete",
+									"read",
+									"update:tags"
 								]
 							},
 							"selector": {
@@ -8372,7 +8454,8 @@
 									"read",
 									"update:tags",
 									"export-content",
-									"import-content"
+									"import-content",
+									"migrate-send"
 								]
 							},
 							"selector": {
@@ -8473,9 +8556,19 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"update",
 									"*",
 									"create",
-									"read"
+									"delete",
+									"read",
+									"update:other_config",
+									"connect",
+									"disconnect",
+									"update:allowedIpv4Addresses",
+									"update:allowedIpv6Addresses",
+									"update:lockingMode",
+									"update:rateLimit",
+									"update:txChecksumming"
 								]
 							},
 							"selector": {
@@ -8621,6 +8714,7 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"clone",
 									"export",
 									"pause",
 									"resume",
@@ -8633,12 +8727,13 @@
 									"*",
 									"delete",
 									"read",
-									"update:tags",
 									"reboot",
 									"reboot:clean",
+									"shutdown:clean",
+									"update:tags",
+									"migrate-send",
 									"reboot:hard",
 									"revert-snapshot",
-									"shutdown:clean",
 									"shutdown:hard",
 									"update:affinityHost",
 									"update:autoPoweron",
@@ -8834,6 +8929,7 @@
 									"VM-snapshot",
 									"SR",
 									"VM",
+									"VM-template",
 									"message",
 									"vgpu",
 									"gpuGroup",
@@ -8847,7 +8943,6 @@
 									"VDI-unmanaged",
 									"vgpuType",
 									"VM-controller",
-									"VM-template",
 									"SM",
 									"user",
 									"proxy",
@@ -9965,6 +10060,9 @@
 					"HA_enabled": {
 						"type": "boolean"
 					},
+					"haRebootVmOnInternalShutdown": {
+						"type": "boolean"
+					},
 					"haSrs": {
 						"items": {
 							"type": "string"
@@ -10100,6 +10198,9 @@
 					"HA_enabled": {
 						"type": "boolean"
 					},
+					"haRebootVmOnInternalShutdown": {
+						"type": "boolean"
+					},
 					"haSrs": {
 						"items": {
 							"type": "string"
@@ -10159,6 +10260,7 @@
 					"cpus",
 					"current_operations",
 					"HA_enabled",
+					"haRebootVmOnInternalShutdown",
 					"haSrs",
 					"id",
 					"master",
@@ -13356,6 +13458,7 @@
 					"VM-snapshot",
 					"SR",
 					"VM",
+					"VM-template",
 					"message",
 					"vgpu",
 					"gpuGroup",
@@ -13369,7 +13472,6 @@
 					"VDI-unmanaged",
 					"vgpuType",
 					"VM-controller",
-					"VM-template",
 					"SM",
 					"alarm",
 					"task"
@@ -13467,6 +13569,27 @@
 					}
 				]
 			},
+			"Unbrand_Parameters_XoApp-at-createRemote__91_0_93__": {
+				"properties": {
+					"name": {
+						"type": "string"
+					},
+					"options": {
+						"type": "string"
+					},
+					"proxy": {
+						"type": "string"
+					},
+					"url": {
+						"type": "string"
+					}
+				},
+				"required": [
+					"name",
+					"url"
+				],
+				"type": "object"
+			},
 			"Unbrand_XoBackupRepository_": {
 				"properties": {
 					"benchmarks": {
@@ -13524,6 +13647,120 @@
 				],
 				"type": "object"
 			},
+			"Unbrand_Parameters_XoApp-at-updateRemote__91_1_93__": {
+				"properties": {
+					"enabled": {
+						"type": "boolean"
+					},
+					"name": {
+						"type": "string"
+					},
+					"options": {
+						"type": "string",
+						"nullable": true
+					},
+					"proxy": {
+						"type": "string",
+						"nullable": true
+					},
+					"url": {
+						"type": "string"
+					}
+				},
+				"type": "object"
+			},
+			"ReturnType_XoApp-at-pingRemote_": {
+				"properties": {
+					"success": {
+						"type": "boolean",
+						"enum": [
+							true
+						],
+						"nullable": false
+					}
+				},
+				"required": [
+					"success"
+				],
+				"type": "object",
+				"description": "Obtain the return type of a function type"
+			},
+			"Awaited_ReturnType_XoApp-at-testRemote__": {
+				"anyOf": [
+					{
+						"properties": {
+							"writeRate": {
+								"type": "number",
+								"format": "double"
+							},
+							"readRate": {
+								"type": "number",
+								"format": "double"
+							},
+							"success": {
+								"type": "boolean",
+								"enum": [
+									true
+								],
+								"nullable": false
+							}
+						},
+						"required": [
+							"writeRate",
+							"readRate",
+							"success"
+						],
+						"type": "object"
+					},
+					{
+						"properties": {
+							"error": {},
+							"file": {
+								"type": "string"
+							},
+							"step": {
+								"type": "string"
+							},
+							"success": {
+								"type": "boolean",
+								"enum": [
+									false
+								],
+								"nullable": false
+							}
+						},
+						"required": [
+							"error",
+							"file",
+							"step",
+							"success"
+						],
+						"type": "object"
+					}
+				],
+				"description": "Recursively unwraps the \"awaited type\" of a type. Non-promise \"thenables\" should resolve to `never`. This emulates the behavior of `await`."
+			},
+			"BenchmarkRepositoryResult": {
+				"$ref": "#/components/schemas/Awaited_ReturnType_XoApp-at-testRemote__"
+			},
+			"CreateActionReturnType_BenchmarkRepositoryResult_": {
+				"anyOf": [
+					{
+						"properties": {
+							"taskId": {
+								"type": "string"
+							}
+						},
+						"required": [
+							"taskId"
+						],
+						"type": "object"
+					},
+					{
+						"$ref": "#/components/schemas/BenchmarkRepositoryResult"
+					}
+				]
+			},
 			"Partial_Unbrand_XoBackupLog__": {
 				"properties": {
 					"id": {
@@ -13774,8 +14011,8 @@
 								"type": "string",
 								"enum": [
 									"",
-									"native",
-									"zstd"
+									"zstd",
+									"native"
 								]
 							},
 							"proxy": {
@@ -13954,8 +14191,8 @@
 						"type": "string",
 						"enum": [
 							"",
-							"native",
-							"zstd"
+							"zstd",
+							"native"
 						]
 					},
 					"proxy": {
@@ -14603,6 +14840,7 @@
 									"VM-snapshot",
 									"SR",
 									"VM",
+									"VM-template",
 									"message",
 									"vgpu",
 									"gpuGroup",
@@ -14616,7 +14854,6 @@
 									"VDI-unmanaged",
 									"vgpuType",
 									"VM-controller",
-									"VM-template",
 									"SM",
 									"unknown"
 								]
@@ -14737,6 +14974,7 @@
 									"VM-snapshot",
 									"SR",
 									"VM",
+									"VM-template",
 									"message",
 									"vgpu",
 									"gpuGroup",
@@ -14750,7 +14988,6 @@
 									"VDI-unmanaged",
 									"vgpuType",
 									"VM-controller",
-									"VM-template",
 									"SM",
 									"unknown"
 								]
@@ -15198,8 +15435,17 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"forget",
+									"update",
 									"*",
-									"read"
+									"create",
+									"read",
+									"update:name",
+									"benchmark",
+									"update:enabled",
+									"update:options",
+									"update:proxy",
+									"update:url"
 								]
 							},
 							"selector": {
@@ -15318,14 +15564,26 @@
 								"type": "string",
 								"enum": [
 									"export",
+									"shutdown",
+									"start",
+									"forget",
 									"update",
 									"*",
 									"read",
 									"allow-vm",
+									"detach",
 									"disable",
 									"enable",
 									"evacuate",
 									"export:logs",
+									"join-pool",
+									"migrate-receive",
+									"reboot",
+									"reboot:clean",
+									"reboot:smart",
+									"restart-toolstack",
+									"shutdown:clean",
+									"shutdown:emergency",
 									"update:tags"
 								]
 							},
@@ -15406,7 +15664,8 @@
 									"create",
 									"delete",
 									"read",
-									"update:tags"
+									"update:tags",
+									"update:other_config"
 								]
 							},
 							"selector": {
@@ -15444,7 +15703,9 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"read",
+									"plug",
+									"unplug"
 								]
 							},
 							"selector": {
@@ -15602,6 +15863,7 @@
 									"create",
 									"read",
 									"update:tags",
+									"add-host",
 									"create:network",
 									"create:vm",
 									"emergency-shutdown",
@@ -15839,13 +16101,17 @@
 								"type": "string",
 								"enum": [
 									"import",
+									"forget",
 									"update",
 									"*",
 									"delete",
 									"read",
+									"migrate-receive",
 									"update:tags",
 									"import:vdi",
-									"import:vm"
+									"import:vm",
+									"reclaim-space",
+									"scan"
 								]
 							},
 							"selector": {
@@ -15968,7 +16234,11 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"create",
+									"delete",
+									"read",
+									"connect",
+									"disconnect"
 								]
 							},
 							"selector": {
@@ -16005,8 +16275,12 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"export",
+									"update",
 									"*",
-									"read"
+									"delete",
+									"read",
+									"update:tags"
 								]
 							},
 							"selector": {
@@ -16089,7 +16363,8 @@
 									"read",
 									"update:tags",
 									"export-content",
-									"import-content"
+									"import-content",
+									"migrate-send"
 								]
 							},
 							"selector": {
@@ -16202,9 +16477,19 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"update",
 									"*",
 									"create",
-									"read"
+									"delete",
+									"read",
+									"update:other_config",
+									"connect",
+									"disconnect",
+									"update:allowedIpv4Addresses",
+									"update:allowedIpv6Addresses",
+									"update:lockingMode",
+									"update:rateLimit",
+									"update:txChecksumming"
 								]
 							},
 							"selector": {
@@ -16366,6 +16651,7 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"clone",
 									"export",
 									"pause",
 									"resume",
@@ -16378,12 +16664,13 @@
 									"*",
 									"delete",
 									"read",
-									"update:tags",
 									"reboot",
 									"reboot:clean",
+									"shutdown:clean",
+									"update:tags",
+									"migrate-send",
 									"reboot:hard",
 									"revert-snapshot",
-									"shutdown:clean",
 									"shutdown:hard",
 									"update:affinityHost",
 									"update:autoPoweron",
@@ -16768,8 +17055,17 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"forget",
+									"update",
 									"*",
-									"read"
+									"create",
+									"read",
+									"update:name",
+									"benchmark",
+									"update:enabled",
+									"update:options",
+									"update:proxy",
+									"update:url"
 								]
 							},
 							"selector": {
@@ -16900,14 +17196,26 @@
 								"type": "string",
 								"enum": [
 									"export",
+									"shutdown",
+									"start",
+									"forget",
 									"update",
 									"*",
 									"read",
 									"allow-vm",
+									"detach",
 									"disable",
 									"enable",
 									"evacuate",
 									"export:logs",
+									"join-pool",
+									"migrate-receive",
+									"reboot",
+									"reboot:clean",
+									"reboot:smart",
+									"restart-toolstack",
+									"shutdown:clean",
+									"shutdown:emergency",
 									"update:tags"
 								]
 							},
@@ -16996,7 +17304,8 @@
 									"create",
 									"delete",
 									"read",
-									"update:tags"
+									"update:tags",
+									"update:other_config"
 								]
 							},
 							"selector": {
@@ -17038,7 +17347,9 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"read",
+									"plug",
+									"unplug"
 								]
 							},
 							"selector": {
@@ -17212,6 +17523,7 @@
 									"create",
 									"read",
 									"update:tags",
+									"add-host",
 									"create:network",
 									"create:vm",
 									"emergency-shutdown",
@@ -17473,13 +17785,17 @@
 								"type": "string",
 								"enum": [
 									"import",
+									"forget",
 									"update",
 									"*",
 									"delete",
 									"read",
+									"migrate-receive",
 									"update:tags",
 									"import:vdi",
-									"import:vm"
+									"import:vm",
+									"reclaim-space",
+									"scan"
 								]
 							},
 							"selector": {
@@ -17614,7 +17930,11 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"create",
+									"delete",
+									"read",
+									"connect",
+									"disconnect"
 								]
 							},
 							"selector": {
@@ -17655,8 +17975,12 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"export",
+									"update",
 									"*",
-									"read"
+									"delete",
+									"read",
+									"update:tags"
 								]
 							},
 							"selector": {
@@ -17747,7 +18071,8 @@
 									"read",
 									"update:tags",
 									"export-content",
-									"import-content"
+									"import-content",
+									"migrate-send"
 								]
 							},
 							"selector": {
@@ -17872,9 +18197,19 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"update",
 									"*",
 									"create",
-									"read"
+									"delete",
+									"read",
+									"update:other_config",
+									"connect",
+									"disconnect",
+									"update:allowedIpv4Addresses",
+									"update:allowedIpv6Addresses",
+									"update:lockingMode",
+									"update:rateLimit",
+									"update:txChecksumming"
 								]
 							},
 							"selector": {
@@ -18052,6 +18387,7 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"clone",
 									"export",
 									"pause",
 									"resume",
@@ -18064,12 +18400,13 @@
 									"*",
 									"delete",
 									"read",
-									"update:tags",
 									"reboot",
 									"reboot:clean",
+									"shutdown:clean",
+									"update:tags",
+									"migrate-send",
 									"reboot:hard",
 									"revert-snapshot",
-									"shutdown:clean",
 									"shutdown:hard",
 									"update:affinityHost",
 									"update:autoPoweron",
@@ -18371,8 +18708,17 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"forget",
+									"update",
 									"*",
-									"read"
+									"create",
+									"read",
+									"update:name",
+									"benchmark",
+									"update:enabled",
+									"update:options",
+									"update:proxy",
+									"update:url"
 								]
 							},
 							"selector": {
@@ -18461,14 +18807,26 @@
 								"type": "string",
 								"enum": [
 									"export",
+									"shutdown",
+									"start",
+									"forget",
 									"update",
 									"*",
 									"read",
 									"allow-vm",
+									"detach",
 									"disable",
 									"enable",
 									"evacuate",
 									"export:logs",
+									"join-pool",
+									"migrate-receive",
+									"reboot",
+									"reboot:clean",
+									"reboot:smart",
+									"restart-toolstack",
+									"shutdown:clean",
+									"shutdown:emergency",
 									"update:tags"
 								]
 							},
@@ -18529,7 +18887,8 @@
 									"create",
 									"delete",
 									"read",
-									"update:tags"
+									"update:tags",
+									"update:other_config"
 								]
 							},
 							"selector": {
@@ -18557,7 +18916,9 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"read",
+									"plug",
+									"unplug"
 								]
 							},
 							"selector": {
@@ -18675,6 +19036,7 @@
 									"create",
 									"read",
 									"update:tags",
+									"add-host",
 									"create:network",
 									"create:vm",
 									"emergency-shutdown",
@@ -18852,13 +19214,17 @@
 								"type": "string",
 								"enum": [
 									"import",
+									"forget",
 									"update",
 									"*",
 									"delete",
 									"read",
+									"migrate-receive",
 									"update:tags",
 									"import:vdi",
-									"import:vm"
+									"import:vm",
+									"reclaim-space",
+									"scan"
 								]
 							},
 							"selector": {
@@ -18951,7 +19317,11 @@
 								"type": "string",
 								"enum": [
 									"*",
-									"read"
+									"create",
+									"delete",
+									"read",
+									"connect",
+									"disconnect"
 								]
 							},
 							"selector": {
@@ -18978,8 +19348,12 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"export",
+									"update",
 									"*",
-									"read"
+									"delete",
+									"read",
+									"update:tags"
 								]
 							},
 							"selector": {
@@ -19042,7 +19416,8 @@
 									"read",
 									"update:tags",
 									"export-content",
-									"import-content"
+									"import-content",
+									"migrate-send"
 								]
 							},
 							"selector": {
@@ -19125,9 +19500,19 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"update",
 									"*",
 									"create",
-									"read"
+									"delete",
+									"read",
+									"update:other_config",
+									"connect",
+									"disconnect",
+									"update:allowedIpv4Addresses",
+									"update:allowedIpv6Addresses",
+									"update:lockingMode",
+									"update:rateLimit",
+									"update:txChecksumming"
 								]
 							},
 							"selector": {
@@ -19249,6 +19634,7 @@
 							"action": {
 								"type": "string",
 								"enum": [
+									"clone",
 									"export",
 									"pause",
 									"resume",
@@ -19261,12 +19647,13 @@
 									"*",
 									"delete",
 									"read",
-									"update:tags",
 									"reboot",
 									"reboot:clean",
+									"shutdown:clean",
+									"update:tags",
+									"migrate-send",
 									"reboot:hard",
 									"revert-snapshot",
-									"shutdown:clean",
 									"shutdown:hard",
 									"update:affinityHost",
 									"update:autoPoweron",
@@ -19364,7 +19751,7 @@
 	},
 	"info": {
 		"title": "@xen-orchestra/rest-api",
-		"version": "0.33.0",
+		"version": "0.35.0",
 		"description": "REST API to manage your XOA",
 		"license": {
 			"name": "AGPL-3.0-or-later"
@@ -19709,8 +20096,8 @@
 						"schema": {
 							"type": "string",
 							"enum": [
-								"xva",
-								"ova"
+								"ova",
+								"xva"
 							]
 						}
 					},
@@ -19718,9 +20105,7 @@
 						"in": "query",
 						"name": "compress",
 						"required": false,
-						"schema": {
-							"type": "boolean"
-						}
+						"schema": {}
 					}
 				],
 				"x-mcp-exposure": "deny"
@@ -22260,6 +22645,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -22270,7 +22658,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "\n- For fast clone on the same SR, omit `srId` and set `fast` to `true`.\n- For full copy on the same SR, omit `srId` and set `fast` to `false`.\n- To copy the VM to a different SR (always a full copy), provide `srId`. Supports cross-pool copy. Optionally use `compress: \"gzip\"` or `compress: \"zstd\"` to compress the export stream during cross-pool copy.",
+				"description": "Required privilege:\n- resource: vm, action: clone\n\n- For fast clone on the same SR, omit `srId` and set `fast` to `true`.\n- For full copy on the same SR, omit `srId` and set `fast` to `false`.\n- To copy the VM to a different SR (always a full copy), provide `srId`. Supports cross-pool copy. Optionally use `compress: \"gzip\"` or `compress: \"zstd\"` to compress the export stream during cross-pool copy.",
 				"tags": [
 					"vms"
 				],
@@ -23202,6 +23590,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -23212,7 +23603,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "VIF mapping is not allowed for intra-pool migration\n\nNetworks and SRs must belong to the same pool as the destination host",
+				"description": "Required privileges:\n- resource: vm, action: migrate-send\n- resource: host, action: migrate-receive (on the destination host)\n\nVIF mapping is not allowed for intra-pool migration\n\nNetworks and SRs must belong to the same pool as the destination host",
 				"tags": [
 					"vms"
 				],
@@ -23473,9 +23864,7 @@
 						"in": "query",
 						"name": "compress",
 						"required": false,
-						"schema": {
-							"type": "boolean"
-						}
+						"schema": {}
 					}
 				],
 				"x-mcp-exposure": "deny"
@@ -24408,9 +24797,7 @@
 						"in": "query",
 						"name": "compress",
 						"required": false,
-						"schema": {
-							"type": "boolean"
-						}
+						"schema": {}
 					}
 				],
 				"x-mcp-exposure": "deny"
@@ -26202,6 +26589,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -26212,6 +26602,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
+				"description": "Required privilege:\n- resource: vif, action: create",
 				"tags": [
 					"vifs"
 				],
@@ -26317,6 +26708,70 @@
 				],
 				"x-mcp-exposure": "allow"
 			},
+			"patch": {
+				"operationId": "UpdateVif",
+				"responses": {
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"422": {
+						"description": "Invalid parameters"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Partial update of a VIF: only the fields present in the body are modified.\nSetting the allowed IPs to a non-empty list switches the locking mode to `locked`.\n`rateLimit` is expressed in kB/s (kilobytes per second).\n\nRequired privilege per field provided in the body:\n- resource: vif, action: update:<field>",
+				"tags": [
+					"vifs"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "f028c5d4-578a-332c-394e-087aaca32dd3"
+					}
+				],
+				"requestBody": {
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"$ref": "#/components/schemas/UpdateVifRequestBody"
+							},
+							"example": {
+								"lockingMode": "locked",
+								"allowedIpv4Addresses": [
+									"192.168.0.42"
+								],
+								"rateLimit": 1000
+							}
+						}
+					}
+				},
+				"x-mcp-exposure": "confirm"
+			},
 			"delete": {
 				"operationId": "DestroyVif",
 				"responses": {
@@ -26329,6 +26784,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -26336,6 +26794,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
+				"description": "Required privilege:\n- resource: vif, action: delete",
 				"tags": [
 					"vifs"
 				],
@@ -26748,6 +27207,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -26755,7 +27217,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "Hotplug the VIF, dynamically attaching it to the running VM\nRequires PV drivers to be installed on the VM",
+				"description": "Hotplug the VIF, dynamically attaching it to the running VM\nRequires PV drivers to be installed on the VM\n\nRequired privilege:\n- resource: vif, action: connect",
 				"tags": [
 					"vifs"
 				],
@@ -26816,6 +27278,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -26823,7 +27288,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "Hot-unplug the VIF, dynamically detaching it from the running VM\nRequires PV drivers to be installed on the VM",
+				"description": "Hot-unplug the VIF, dynamically detaching it from the running VM\nRequires PV drivers to be installed on the VM\n\nRequired privilege:\n- resource: vif, action: disconnect",
 				"tags": [
 					"vifs"
 				],
@@ -27041,6 +27506,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -27048,7 +27516,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "Create an empty VDI.",
+				"description": "Create an empty VDI.\n\nRequired privileges:\n- resource: sr, action: import:vdi (on the target SR)\n- resource: vdi, action: create",
 				"tags": [
 					"vdis"
 				],
@@ -27589,6 +28057,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -27596,7 +28067,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "Migrate a VDI to another SR.\n\nNote: After migration, the VDI will have a new ID. The new ID is returned in the response.",
+				"description": "Migrate a VDI to another SR.\n\nRequired privileges:\n- resource: vdi, action: migrate-send\n- resource: sr, action: migrate-receive (on the target SR)\n\nNote: After migration, the VDI will have a new ID. The new ID is returned in the response.",
 				"tags": [
 					"vdis"
 				],
@@ -27875,6 +28346,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -27882,7 +28356,7 @@
 						"description": "Invalid format"
 					}
 				},
-				"description": "\nExport VDI-snapshot content",
+				"description": "Required privilege:\n- resource: vdi-snapshot, action: export\n\nExport VDI-snapshot content",
 				"tags": [
 					"vdis"
 				],
@@ -27964,10 +28438,14 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					}
 				},
+				"description": "Required privilege:\n- resource: vdi-snapshot, action: read",
 				"tags": [
 					"vdis"
 				],
@@ -28001,10 +28479,14 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					}
 				},
+				"description": "Required privilege:\n- resource: vdi-snapshot, action: delete",
 				"tags": [
 					"vdis"
 				],
@@ -28400,10 +28882,14 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					}
 				},
+				"description": "Required privilege:\n- resource: vdi-snapshot, action: update:tags",
 				"tags": [
 					"vdis"
 				],
@@ -28446,10 +28932,14 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					}
 				},
+				"description": "Required privilege:\n- resource: vdi-snapshot, action: update:tags",
 				"tags": [
 					"vdis"
 				],
@@ -28619,6 +29109,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -28626,7 +29119,7 @@
 						"description": "Invalid parameters"
 					}
 				},
-				"description": "Create a VBD to attach a VDI to a VM",
+				"description": "Required privilege:\n- resource: vbd, action: create\n\nCreate a VBD to attach a VDI to a VM",
 				"tags": [
 					"vbds"
 				],
@@ -28755,11 +29248,14 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					}
 				},
-				"description": "Delete a VBD\n\nRemoves the virtual block device, detaching the VDI from the VM.\nThe VDI itself is NOT deleted.",
+				"description": "Required privilege:\n- resource: vbd, action: delete\n\nDelete a VBD\n\nRemoves the virtual block device, detaching the VDI from the VM.\nThe VDI itself is NOT deleted.",
 				"tags": [
 					"vbds"
 				],
@@ -29172,6 +29668,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -29179,7 +29678,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "Hotplug the VBD, dynamically attaching it to the running VM",
+				"description": "Required privilege:\n- resource: vbd, action: connect\n\nHotplug the VBD, dynamically attaching it to the running VM",
 				"tags": [
 					"vbds"
 				],
@@ -29240,6 +29739,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -29247,7 +29749,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
-				"description": "Hot-unplug the VBD, dynamically detaching it from the running VM",
+				"description": "Required privilege:\n- resource: vbd, action: disconnect\n\nHot-unplug the VBD, dynamically detaching it from the running VM",
 				"tags": [
 					"vbds"
 				],
@@ -31425,6 +31927,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -31435,6 +31940,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
+				"description": "Required privilege:\n- resource: sr, action: reclaim-space",
 				"tags": [
 					"srs"
 				],
@@ -31495,6 +32001,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -31505,6 +32014,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
+				"description": "Required privilege:\n- resource: sr, action: scan",
 				"tags": [
 					"srs"
 				],
@@ -31565,6 +32075,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -31575,6 +32088,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
+				"description": "Required privilege:\n- resource: sr, action: forget",
 				"tags": [
 					"srs"
 				],
@@ -36892,6 +37406,104 @@
 				"x-mcp-exposure": "confirm"
 			}
 		},
+		"/pools/{id}/actions/add_host": {
+			"post": {
+				"operationId": "AddHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"422": {
+						"description": "Invalid parameters"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privileges:\n- resource: pool, action: add-host\n- resource: host, action: join-pool\n\nAdd a host to the pool.",
+				"tags": [
+					"pools"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "355ee47d-ff4c-4924-3db2-fd86ae629676"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"requestBody": {
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"properties": {
+									"force": {
+										"type": "boolean"
+									},
+									"host": {
+										"type": "string"
+									}
+								},
+								"required": [
+									"host"
+								],
+								"type": "object"
+							},
+							"example": {
+								"host": "c787b75c-3e0d-70fa-d0c3-cbfd382d7e33",
+								"force": "false"
+							}
+						}
+					}
+				}
+			}
+		},
 		"/pifs": {
 			"get": {
 				"operationId": "GetPifs",
@@ -38004,6 +38616,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -38014,6 +38629,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
+				"description": "Required privilege:\n- resource: pbd, action: plug",
 				"tags": [
 					"pbds"
 				],
@@ -38074,6 +38690,9 @@
 					"401": {
 						"description": "Authentication required"
 					},
+					"403": {
+						"description": "Forbidden"
+					},
 					"404": {
 						"description": "Resource not found"
 					},
@@ -38084,6 +38703,7 @@
 						"description": "Internal server error, XenServer/XCP-ng error"
 					}
 				},
+				"description": "Required privilege:\n- resource: pbd, action: unplug",
 				"tags": [
 					"pbds"
 				],
@@ -46635,6 +47255,680 @@
 				"x-mcp-exposure": "confirm"
 			}
 		},
+		"/hosts/{id}/actions/start": {
+			"post": {
+				"operationId": "StartHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: start\n\nStart a host.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"x-mcp-exposure": "confirm"
+			}
+		},
+		"/hosts/{id}/actions/clean_shutdown": {
+			"post": {
+				"operationId": "CleanShutdownHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: shutdown:clean\n\nShutdown a host.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"requestBody": {
+					"required": false,
+					"content": {
+						"application/json": {
+							"schema": {
+								"properties": {
+									"bypassEvacuate": {
+										"type": "boolean",
+										"description": "Shut down without evacuating running VMs first. Defaults to false."
+									},
+									"bypassBackupCheck": {
+										"type": "boolean",
+										"description": "Skip the backup safety check before shutting down. Defaults to false."
+									}
+								},
+								"type": "object"
+							},
+							"example": {
+								"bypassBackupCheck": false,
+								"bypassEvacuate": false
+							}
+						}
+					}
+				},
+				"x-mcp-exposure": "deny"
+			}
+		},
+		"/hosts/{id}/actions/clean_reboot": {
+			"post": {
+				"operationId": "CleanRebootHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: reboot:clean\n\nReboot a host by evacuating its VMs to other hosts first.\n\nChecks for active backup jobs and version compatibility before rebooting.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"requestBody": {
+					"required": false,
+					"content": {
+						"application/json": {
+							"schema": {
+								"properties": {
+									"bypassVersionCheck": {
+										"type": "boolean",
+										"description": "Skip the version/upgrade compatibility check before rebooting. Defaults to false."
+									},
+									"bypassBackupCheck": {
+										"type": "boolean",
+										"description": "Skip the backup safety check before rebooting. Defaults to false."
+									},
+									"force": {
+										"type": "boolean",
+										"description": "Force the reboot, ignoring evacuation errors. Defaults to false."
+									}
+								},
+								"type": "object"
+							},
+							"example": {
+								"force": false,
+								"bypassBackupCheck": false,
+								"bypassVersionCheck": false
+							}
+						}
+					}
+				},
+				"x-mcp-exposure": "deny"
+			}
+		},
+		"/hosts/{id}/actions/smart_reboot": {
+			"post": {
+				"operationId": "SmartRebootHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Feature unauthorized"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: reboot:smart\n\nReboot a host by suspending its VMs in place.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"requestBody": {
+					"required": false,
+					"content": {
+						"application/json": {
+							"schema": {
+								"properties": {
+									"bypassCurrentVmCheck": {
+										"type": "boolean",
+										"description": "Skip the check that blocks smart reboot when XOA is running on this host. Defaults to false."
+									},
+									"bypassBlockedSuspend": {
+										"type": "boolean",
+										"description": "Allow suspending VMs even if suspend is blocked. Defaults to false."
+									},
+									"bypassVersionCheck": {
+										"type": "boolean",
+										"description": "Skip the version/upgrade compatibility check before rebooting. Defaults to false."
+									},
+									"bypassBackupCheck": {
+										"type": "boolean",
+										"description": "Skip the backup safety check before rebooting. Defaults to false."
+									}
+								},
+								"type": "object"
+							},
+							"example": {
+								"bypassBackupCheck": false,
+								"bypassVersionCheck": false,
+								"bypassBlockedSuspend": false,
+								"bypassCurrentVmCheck": false
+							}
+						}
+					}
+				},
+				"x-mcp-exposure": "deny"
+			}
+		},
+		"/hosts/{id}/actions/restart_toolstack": {
+			"post": {
+				"operationId": "RestartHostToolstack",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: restart-toolstack\n\nRestart a host's toolstack.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"requestBody": {
+					"required": false,
+					"content": {
+						"application/json": {
+							"schema": {
+								"properties": {
+									"bypassBackupCheck": {
+										"type": "boolean",
+										"description": "Skip the backup safety check before restarting the toolstack. Defaults to false."
+									}
+								},
+								"type": "object"
+							}
+						}
+					}
+				},
+				"x-mcp-exposure": "confirm"
+			}
+		},
+		"/hosts/{id}/actions/emergency_shutdown": {
+			"post": {
+				"operationId": "EmergencyShutdownHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: shutdown:emergency\n\nShut down a host by disabling it, suspending its VMs in place, and powering off without migrating them.\n\nUnlike `clean_shutdown`, VMs are not evacuated to other hosts, they are suspended\non the same host (errors are ignored) before the host shuts down.\nNo backup check is performed.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"x-mcp-exposure": "deny"
+			}
+		},
+		"/hosts/{id}/actions/detach": {
+			"post": {
+				"operationId": "DetachHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: detach\n\nDetaches a host from its pool.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"x-mcp-exposure": "deny"
+			}
+		},
+		"/hosts/{id}/actions/forget": {
+			"post": {
+				"operationId": "ForgetHost",
+				"responses": {
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"409": {
+						"description": "Incorrect state"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Required privilege:\n- resource: host, action: forget\n\nForgets a host, host must not be running.",
+				"tags": [
+					"hosts"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "b61a5c92-700e-4966-a13b-00633f03eea8"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"x-mcp-exposure": "deny"
+			}
+		},
 		"/groups": {
 			"get": {
 				"operationId": "GetGroups",
@@ -47617,6 +48911,74 @@
 					}
 				],
 				"x-mcp-exposure": "allow"
+			},
+			"post": {
+				"operationId": "CreateBackupRepository",
+				"responses": {
+					"201": {
+						"description": "Resource created",
+						"content": {
+							"application/json": {
+								"schema": {
+									"properties": {
+										"id": {
+											"type": "string"
+										}
+									},
+									"required": [
+										"id"
+									],
+									"type": "object"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"id": "677e50c5-8d8a-4c89-b1ac-e2f4593d0ebb"
+										}
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"422": {
+						"description": "Invalid parameters"
+					}
+				},
+				"description": "Required privilege:\n- resource: backup-repository, action: create",
+				"tags": [
+					"backup-repositories"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [],
+				"requestBody": {
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"$ref": "#/components/schemas/Unbrand_Parameters_XoApp-at-createRemote__91_0_93__"
+							},
+							"example": {
+								"name": "NFS Remote",
+								"options": "vers=4",
+								"proxy": "722d17b9-699b-59d2-8193-be1ac573d3de",
+								"url": "nfs://192.168.100.225:/media/nfs"
+							}
+						}
+					}
+				}
 			}
 		},
 		"/backup-repositories/{id}": {
@@ -47684,6 +49046,269 @@
 					}
 				],
 				"x-mcp-exposure": "allow"
+			},
+			"patch": {
+				"operationId": "UpdateBackupRepository",
+				"responses": {
+					"204": {
+						"description": "No content"
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"422": {
+						"description": "Invalid parameters"
+					}
+				},
+				"description": "Required privileges:\n- resource: backup-repository, action: update (grants all fields)\n- resource: backup-repository, action: update:enabled (if enabled is passed)\n- resource: backup-repository, action: update:name (if name is passed)\n- resource: backup-repository, action: update:options (if options is passed)\n- resource: backup-repository, action: update:proxy (if proxy is passed)\n- resource: backup-repository, action: update:url (if url is passed)",
+				"tags": [
+					"backup-repositories"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
+					}
+				],
+				"requestBody": {
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"$ref": "#/components/schemas/Unbrand_Parameters_XoApp-at-updateRemote__91_1_93__"
+							},
+							"example": {
+								"enabled": true,
+								"name": "NFS Remote",
+								"options": "vers=4",
+								"proxy": "722d17b9-699b-59d2-8193-be1ac573d3de",
+								"url": "nfs://192.168.100.225:/media/nfs"
+							}
+						}
+					}
+				}
+			}
+		},
+		"/backup-repositories/{id}/actions/forget": {
+			"post": {
+				"operationId": "ForgetBackupRepository",
+				"responses": {
+					"204": {
+						"description": "No content",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_void_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					}
+				},
+				"description": "Forgets a backup repository configuration.\n\nA backup repository cannot be forgotten if it is referenced by any backup job (enabled or disabled).\n\nRequired privilege:\n- resource: backup-repository, action: forget",
+				"tags": [
+					"backup-repositories"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"x-mcp-exposure": "confirm"
+			}
+		},
+		"/backup-repositories/{id}/health": {
+			"get": {
+				"operationId": "GetBackupRepositoryHealth",
+				"responses": {
+					"200": {
+						"description": "OK",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/ReturnType_XoApp-at-pingRemote_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"success": true
+										}
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "Bad request"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					}
+				},
+				"description": "Pings the backup-repository to check its health\n\nRequired privilege:\n- resource: backup-repository, action: read",
+				"tags": [
+					"backup-repositories"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
+					}
+				],
+				"x-mcp-exposure": "allow"
+			}
+		},
+		"/backup-repositories/{id}/actions/benchmark": {
+			"post": {
+				"operationId": "BenchmarkBackupRepository",
+				"responses": {
+					"200": {
+						"description": "Ok"
+					},
+					"202": {
+						"description": "Action executed asynchronously",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/CreateActionReturnType_BenchmarkRepositoryResult_"
+								},
+								"examples": {
+									"Example 1": {
+										"value": {
+											"taskId": "0m7kl0j9l"
+										}
+									},
+									"Example 2": {
+										"value": {
+											"success": true,
+											"readRate": 7999965,
+											"writeRate": 7767798
+										}
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "Benchmark failed"
+					},
+					"401": {
+						"description": "Authentication required"
+					},
+					"403": {
+						"description": "Forbidden"
+					},
+					"404": {
+						"description": "Resource not found"
+					},
+					"500": {
+						"description": "Internal server error, XenServer/XCP-ng error"
+					},
+					"502": {
+						"description": "Backup repository unreachable"
+					}
+				},
+				"description": "Runs a benchmark for write and read speed on the Backup-repository.\nSaves the benchmark result on the BR and returns the results, speeds are in bytes/sec.\n502 if the BR cannot be reached, 400 if there was a problem during the benchmark with the error.\n\nRequired privilege:\n- resource: backup-repository, action: benchmark",
+				"tags": [
+					"backup-repositories"
+				],
+				"security": [
+					{
+						"*": []
+					}
+				],
+				"parameters": [
+					{
+						"in": "path",
+						"name": "id",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"example": "c4284e12-37c9-7967-b9e8-83ef229c3e03"
+					},
+					{
+						"in": "query",
+						"name": "sync",
+						"required": false,
+						"schema": {
+							"type": "boolean"
+						}
+					}
+				],
+				"x-mcp-exposure": "confirm"
 			}
 		},
 		"/backup-logs": {