vpsnet-mcp 2.3.16 → 2.7.0

package/README.md

@@ -4,7 +4,7 @@
 
 ## Features
 
-- **280+ tools** covering VPSNet service management, managed applications, free and paid TLS certificates, Automatic SSL subscriptions, DNS, domains, billing, API keys, and account operations
+- **<!-- tool-count -->371<!-- /tool-count --> tools** (local package; the hosted connector offers a subset) covering VPSNet service management, networking (private networks, server firewall, port forwarding, public addresses, load balancers, VPN), managed applications, free and paid TLS certificates, Automatic SSL subscriptions, DNS, domains, billing, API keys, and account operations
 - Account & profile management
 - VPS lifecycle (start, stop, restart, reinstall OS)
 - Plan changes (free upgrades/downgrades; KVM/Firecracker disks cannot shrink)
@@ -20,7 +20,7 @@
 
 ## Remote OAuth connector
 
-The remote profile also includes scoped DNS, domain and certificate management, public SSH keys, server recovery and backup browsing. It uses the same customer APIs as the panel; permissions are enforced by the backend on every request.
+The remote profile also includes scoped DNS, domain and certificate management, public SSH keys, backup browsing and, while VPSnet offers it, server rescue. It uses the same customer APIs as the panel; permissions are enforced by the backend on every request.
 
 The remote connector uses `https://mcp.vpsnet.com/mcp` and customer consent through
 VPSnet. See [Remote AI connections](docs/REMOTE_MCP.md) for connection setup,
@@ -307,7 +307,7 @@ This MCP server manages your VPS infrastructure through the VPSnet.com API, incl
 
 Most AI coding environments (Claude Code, Cline, Cursor, Codex) have built-in terminal access, so the AI can SSH into your VPS immediately after deploying a key — no extra tools needed.
 
-For environments without native SSH access, pair this with [mcp-server-ssh](https://github.com/bacarrdy/mcp-server-ssh) for direct server connectivity via MCP tools.
+For environments without native SSH access, pair this with [mcp-server-ssh](https://github.com/bacarrdy/mcp-ssh-server) for direct server connectivity via MCP tools.
 
 **Combined config:**
 
@@ -628,8 +628,13 @@ Every request is sent with the `X-API-KEY` header (`VPSNET_API_KEY`).
 - **Granular scopes only narrow a key.** A key with an empty scope list keeps
   everything its access level allows; listing scopes (for example `dns:read`,
   `services:manage`) restricts it. `X:manage` includes `X:read`. Networking is the
-  exception: `networking:read` / `networking:manage` / `networking:order` are never
-  implied by `full` or `read` and must be granted explicitly.
+  exception: `networking:read` / `networking:manage` / `networking:order`,
+  `files:read` / `files:manage` (service file manager) and the App Cloud permissions
+  `projects:*` / `projectdb:*` are never implied by `full` or `read` and must be added
+  to the key explicitly. A key created
+  without a permission list (for example an older `full` key) reaches no network
+  function (private networks, the server firewall, port forwarding, public addresses,
+  load balancers, VPN) until `networking:read` or `networking:manage` is added to it.
 - **Paid operations are a separate gate.** A tool marked `Paid` or `Quote` in the
   tables below needs a `full`-access key, `paid_operations_enabled`, the named paid
   scope (`vps:order`, `vds:order`, `ds:order`, `fc:order`, `domains:order`,
@@ -639,9 +644,11 @@ Every request is sent with the `X-API-KEY` header (`VPSNET_API_KEY`).
   an uncertain attempt, never a new one). Orders run quote, then confirm with the
   returned `quoteToken`; disclose the exact EUR total to the user before confirming.
   Use `list_api_keys` to see your key's scopes, paid scopes, caps and rate limit.
-- **Rate limits.** Requests are rate-limited per key (`rate_limit` in
-  `list_api_keys`, requests per minute). On HTTP `429` back off and retry after
-  `retry_after` seconds instead of retrying immediately.
+- **Rate limits.** Each key has one request budget: 300 requests per 60 seconds by
+  default, and some DNS and domain operations have lower limits. On HTTP `429` wait
+  the `retry_after` seconds of the result (the API also sends `Retry-After`;
+  `X-RateLimit-Limit` / `-Remaining` show the budget) instead of retrying immediately. (The `rate_limit` value shown by
+  `list_api_keys` is stored with the key but is not what the limiter applies.)
 - API keys can never create, change or revoke API keys, and never receive admin
   access.
 
@@ -707,6 +714,8 @@ everything else.
 | `confirm_application_compose_adoption` | Confirm the exact source takeover after explicit approval | `applications:manage` | free |
 | `install_application` | Queue a confirmed, version-pinned managed installation | `applications:manage` | free |
 | `configure_application_access` | Queue a confirmed platform-hostname, private, public-IP, managed-HTTPS, or customer-managed external-HTTPS access change | `applications:manage` | free |
+| `get_application_server_routes` | Read customer-hostname server routes, fallback, revision, per-route state and DNS status | `applications:read` | free |
+| `configure_application_server_routes` | Replace the complete confirmed set of customer-hostname routes to local services (and optional fallback web server) with automatic certificates | `applications:manage` | free |
 | `configure_application_resource_thresholds` | Replace confirmed non-enforcing application resource thresholds and reached/recovered email preference | `applications:manage` | free |
 | `manage_application` | Compatibility tool for older clients; use the individual actions below | `applications:manage` | free |
 | `reconcile_application` | Reconcile an application with its declared configuration | `applications:manage` | free |
@@ -741,12 +750,14 @@ everything else.
 | `get_rdns` | Get current rDNS records | `services:read` | free |
 | `change_rdns` | Change reverse DNS (PTR) record | `services:manage` | free |
 | `clear_rdns` | Clear a PTR override and restore the automatic value | `services:manage` | free |
-| `flush_iptables` | Flush iptables rules (useful when locked out) | `services:manage` | free |
+| `flush_iptables` | Flush the iptables rules inside the server (useful when locked out by them); the server's public firewall is separate | `services:manage` | free |
 | `get_title` | Get the current service display title | `services:read` | free |
 | `change_title` | Change service display title | `services:manage` | free |
 | `toggle_ipv6` | Enable or disable IPv6 | `services:manage` | free |
 | `toggle_extra_settings` | Toggle ppp, fuse, tuntap, or nfs | `services:manage` | free |
 | `deploy_ssh_key` | Deploy an SSH key to a VPS; remote OAuth also requires `vm:exec` | `services:manage` | free |
+| `list_service_ssh_keys` | List which account SSH keys are on a Cloud VPS or Firecracker VPS; local package only | `services:read` | free |
+| `remove_service_ssh_key` | Remove one account SSH key from a server's root authorized_keys; local package only | `services:manage` | free |
 
 ### OS Reinstall
 | Tool | Description | Scope | Paid |
@@ -799,6 +810,28 @@ everything else.
 | `browse_restore_files` | Queue a backup directory listing job without restoring files | `services:read` | free |
 | `get_restore_file_browse` | Poll a queued backup directory listing (free, read-only) | `services:read` | free |
 
+### Service files
+Firecracker servers need the updated guest agent and Cloud VPS (KVM) the VDS file-manager switch; `files:read` / `files:manage` are explicit grants (an empty permission list does not include them).
+
+| Tool | Description | Scope | Paid |
+|------|-------------|-------|------|
+| `get_service_file_capabilities` | Check whether the file manager can serve a server now, with the verbatim unavailable reason, limits and transfer mode | `files:read` | free |
+| `list_service_files` | List one directory page inside a running server | `files:read` | free |
+| `stat_service_file` | Describe one entry, optionally with its SHA-256 | `files:read` | free |
+| `read_service_file` | View a text file (up to 1 MiB) or an image (up to 4 MiB), or read a 1 MiB window of any file | `files:read` | free |
+| `search_service_files` | Find entries by name (substring or glob) below a directory | `files:read` | free |
+| `get_service_file_download_url` | Mint a one-file download URL bound to the caller's address | `files:read` | free |
+| `download_service_file` | Download a server file to a local path on the MCP machine, size-checked, with its SHA-256 | `files:read` | free |
+| `get_service_file_operation` | Poll a file operation that answered 202 (slow guest, recursive delete, extraction) | `files:read` | free |
+| `create_service_directory` | Create a directory, optionally with missing parents | `files:manage` | free |
+| `move_service_file` | Rename or move one entry (confirmation required) | `files:manage` | free |
+| `delete_service_files` | **Destructive:** permanently delete files or directories (confirmation required) | `files:manage` | free |
+| `write_service_file` | Write a small file (up to 1 MiB) with compare-and-swap | `files:manage` | free |
+| `upload_service_file` | Upload a local file or base64 content in one call: chunked, resumable transfer, atomic commit and SHA-256 check | `files:manage` | free |
+| `list_service_file_uploads` | List the service's open uploads | `files:manage` | free |
+| `abort_service_file_upload` | Abort one open upload and remove its staging file | `files:manage` | free |
+| `extract_service_file_archive` | Firecracker: extract a zip/tar/tar.gz/.gz archive into a new directory | `files:manage` | free |
+
 ### SSH Keys
 | Tool | Description | Scope | Paid |
 |------|-------------|-------|------|
@@ -929,7 +962,7 @@ short-lived quote token.
 | `list_service_dns_options` | List owned zones and service addresses available for DNS attachment | `dns:read` | free |
 | `attach_service_dns_record` | Point an owned-zone name at one service address | `dns:write` | free |
 | `list_dns_zones` | List forward DNS zones owned by the account | `dns:read` | free |
-| `create_dns_zone` | Create a native or secondary zone awaiting ownership TXT verification | `dns:write` | free |
+| `create_dns_zone` | Create a zone; qualifying ownership may restore and publish it. Hosted: native only; local stdio: native or secondary | `dns:write` | free |
 | `get_dns_zone` | Get desired records with IDs and a recoverable ownership TXT value | `dns:read` | free |
 | `reapply_dns_zone` | Retry publication of a published DNS zone whose apply_state is failed. | `dns:write` | free |
 | `get_dns_zone_diagnostics` | Inspect delegation, SOA, DNSSEC, and record hygiene | `dns:read` | free |
@@ -966,7 +999,7 @@ short-lived quote token.
 ### Service Rescue
 | Tool | Description | Scope | Paid |
 |------|-------------|-------|------|
-| `get_service_rescue` | Get rescue capability and current durable rescue session | `services:read` | free |
+| `get_service_rescue` | Get rescue capability and current durable rescue session; rescue is offered only while VPSnet has it switched on | `services:read` | free |
 | `enter_service_rescue` | Restart an eligible service into an advertised rescue image | `services:rescue` | free |
 | `exit_service_rescue` | Restore the exact pre-rescue boot configuration and state | `services:rescue` | free |
 
@@ -1032,7 +1065,8 @@ resource. DNS changes are polled through the network's `settings.dns_change`.
 New private/public load balancers, VPNs and public addresses use an explicit
 quote → common checkout → order-status flow. Quote tools always send
 `prepare_after_payment=true`: no provisioning happens before payment.
-Show the quote's exact EUR `gross_amount`, obtain approval, and pass the same
+Choose `period_months` only from the live catalog's offered terms (omission is one month).
+Show the quoted term and exact EUR `gross_amount`, obtain approval, and pass the same
 `idempotencyKey`, `quote_id` and `quoteToken` to `order_network_product`.
 API keys additionally need full access, enabled paid operations,
 `networking:order`, and spend limits. Read `get_network_payment_methods` and
@@ -1060,12 +1094,69 @@ not an alternative to checkout.
 Device configuration pickup is a one-time **management** action, even though
 its HTTP method is GET. Generate the reveal key pair outside MCP, submit only
 the X25519 public key, save the returned sealed ciphertext, and decrypt it
-outside the conversation. Neither private keys nor plaintext WireGuard
-configuration are requested or decrypted by these tools. Never automatically
+outside the conversation. Neither private keys, plaintext WireGuard configuration nor IPsec PSKs are
+requested or decrypted by these tools. Router recipes retain a literal PSK
+placeholder; fill it only in the customer's external configuration workflow. Never automatically
 repeat a pickup after an uncertain response.
 
-The current backend has no customer network rename, existing-port fixed-IP
-edit, appliance retry, or native site-to-site API in this release. Fixed DHCP
+Devices support WireGuard or the operating system's built-in IKEv2 client when
+`capabilities.device_ikev2` is available. Connected locations support WireGuard
+or IPsec IKEv2; read `capabilities.site_ipsec` and `ipsec_profiles` before choosing
+site protocol, vendor or cipher mode. A listed tool does not prove an older
+gateway image supports that protocol. Read router recipes with
+`get_network_vpn_peer_recipe`; don't use a different vendor profile than the
+one used to create the peer unless the returned API guidance supports it.
+For IPsec, connected means an established SA and the handshake timestamp is a
+CHILD-SA rekey; WireGuard uses its recent-handshake status.
+
+Device `grant_scope=network` authorizes eligible current and future servers in
+the attached private network, still subject to network security policy. Obtain
+that broader authorization explicitly. Selected-server access uses
+`grant_scope=servers`; replacing grants without a scope also selects servers,
+so inspect and preserve the intended scope when editing an existing device.
+
+Site health webhooks use `list_network_vpn_site_health_webhooks` with
+`networking:read` and `create_network_vpn_site_health_webhook` or
+`delete_network_vpn_site_health_webhook` with `networking:manage`. The list
+shows only the public destination host. Creation needs a caller-generated
+X25519 public reveal key and returns the signing secret only in a sealed
+envelope for external decryption. The subscription and removal are immediate
+resources, with no operation ID or idempotency key. After an uncertain create,
+list the site's subscriptions before deciding whether to create another.
+
+NAT port forwarding publishes TCP or UDP ports of a private network's NAT public address on
+servers of that network. Read `get_network_port_forwards` first (rules, the router generation, per-rule
+exposure and eligible targets); `set_network_port_forwards` replaces the complete rule set at that
+generation, and an empty list withdraws every rule. A target is a Firecracker server of the network: one
+without a public IPv4 of its own, or the private interface of one that has its own public IPv4 (its replies
+go back through the network; the target's `reply_route` says whether that is in place). Cloud VPS servers
+are not targets. Security groups still decide what a server accepts.
+Poll the rules resource until `applied_generation` equals `generation`.
+
+The firewall of a server's own public interface (VPS and Cloud VPS, IPv4 and IPv6 incoming allow
+rules) is read with `get_service_public_firewall` and replaced as a whole with
+`set_service_public_firewall` at the read `generation`; `apply_service_public_firewall` sends the
+saved rules to the node again. Keep the management port (SSH, or RDP on Windows) open for the user's
+own address and ask the user for that address: `client_address` in the answer is only the address
+the API saw for the request. Over the hosted connector, network changes act only on servers selected for the connection (`service_not_selected` otherwise).
+
+`set_public_address_outgoing_source` makes an additional address attached to a VPS's public interface
+the source of the server's new outgoing IPv4 connections (or switches back to the server's own IP);
+`recheck_public_address_outgoing_source` asks a server again after an address left it.
+Reverse DNS of an additional address, a floating binding, a VPN's or a public load balancer's
+address uses `get_public_ip_rdns`, `set_public_ip_rdns` and `reset_public_ip_rdns` with a `target`
+field; a server's own primary address keeps `get_rdns` / `change_rdns`.
+`rebuild_network_load_balancer` rebuilds a public load balancer's proxies one at a time.
+
+An owned public address can also go directly onto the public interface of a server that has its own
+public IPv4 (`attach_public_address_to_server_interface`), only while `get_networking_capabilities`
+reports `public_address_server_public` as true; the tool reads that first and refuses without a change
+otherwise. Pick the server from `list_public_address_server_targets`, then follow the attachment on
+`get_network_public_address` (`target.kind=server_public`,
+`carrier.node_state`, `carrier.guest_state`, `carrier.instruction`). When the server agent is off the
+instruction is what the customer runs inside the server; `check_network_public_address_reach` asks again.
+
+This release exposes no customer network rename or existing-port fixed-IP edit. Fixed DHCP
 addresses are selected at attach; removing/recreating an attachment requires
 separate approval and is not represented as an in-place edit. Legacy unpaid
 LB/VPN create routes, legacy stock-before-payment purchases and enabling
@@ -1092,13 +1183,18 @@ feature gate.
 | `set_private_network_names` | Replace the complete internal DNS zone label and alias list | `networking:manage` | free |
 | `list_private_network_ports` | Read owned network ports, their fixed DHCP addresses, generations and attachment states | `networking:read` | free |
 | `list_service_private_ports` | Read private ports and order attachment recovery state for one owned service order number. | `networking:read` | free |
+| `get_service_public_firewall` | Read the firewall of a server's public interface (VPS or Cloud VPS): rules, generation and state | `networking:read` | free |
+| `set_service_public_firewall` | Switch the server's public firewall on or off and replace all its incoming rules  at the read generation | `networking:manage` | free |
+| `apply_service_public_firewall` | Send the saved firewall rules to the server's node again | `networking:manage` | free |
 | `list_network_attachment_candidates` | Read attachable services and each attachment_mode | `networking:read` | free |
 | `attach_private_network_port` | Attach an owned service; omit ipv4 for automatic allocation or pass a fixed usable address | `networking:manage` | free |
 | `detach_private_network_port` | Detach the owned server port | `networking:manage` | free |
 | `retry_private_network_port` | Retry the failed current port operation with the PORT generation and any required restart approval. | `networking:manage` | free |
-| `get_network_vpn_summary` | Read the network's VPN summary, including truthful absence | `networking:read` | free |
+| `get_network_vpn_summary` | Read the network's VPN summary, including truthful absence; connected locations are managed on the gateway | `networking:read` | free |
 | `get_network_routed_egress` | Read this network's NAT/internet access, public address and qualification state. | `networking:read` | free |
 | `set_network_routed_egress` | Request the currently supported NAT transition for an owned network; the backend may refuse mode changes | `networking:manage` | free |
+| `get_network_port_forwards` | Read the NAT port forwarding rules of an owned private network: applied rules (protocol, external_port on the network's NAT public address, the target server's private_port_id and its internal_port), the router generation to send to set_network_port_forwards (not the network generation), state (empty, pending, active, failed), per-rule exposure (open_to_internet is true when the server's security groups admit that port from every IPv4 address), targets with eligible and unavailable_reason_code, capability (available, limit, protocols), last_change (a refused change with its nat_port_forward_refused_* reason_code) and suspended (rules kept while the network has no NAT address; they are on no router). | `networking:read` | free |
+| `set_network_port_forwards` | Replace the COMPLETE NAT port forwarding rule set of an owned network (rules: [] withdraws all of them) at the router generation read from get_network_port_forwards. | `networking:manage` | free |
 | `get_security_group_capabilities` | Read security-group availability and whether the network default policy can be changed. | `networking:read` | free |
 | `list_network_security_groups` | List groups in the owned project | `networking:read` | free |
 | `create_network_security_group` | Create a named allow-rule set | `networking:manage` | free |
@@ -1122,18 +1218,27 @@ feature gate.
 | `remove_network_load_balancer_member` | Remove a member from rotation using the load balancer generation. | `networking:manage` | free |
 | `add_network_load_balancer_listener` | Add a listener and optional initial members using currently offered protocol capabilities | `networking:manage` | free |
 | `remove_network_load_balancer_listener` | Remove a listener and its members; deleting the last listener is refused. | `networking:manage` | free |
+| `rebuild_network_load_balancer` | Rebuild every proxy of a public load balancer, one at a time, keeping its address and listeners | `networking:manage` | free |
 | `list_network_vpn_gateways` | List owned VPN gateways, their device peers and safe status | `networking:read` | free |
-| `get_network_vpn_gateway` | Read one owned VPN gateway, current generation, device peers, grant candidates and attachment capability. | `networking:read` | free |
+| `get_network_vpn_gateway` | Read one owned VPN gateway, protocol-specific peer status, IPsec capabilities/profiles, device grant scopes and site options | `networking:read` | free |
 | `delete_network_vpn_gateway` | Request teardown of an owned VPN gateway; all devices lose connectivity | `networking:manage` | free |
 | `attach_network_vpn_gateway` | Attach or move an account VPN to an owned network only when standalone attachment is advertised | `networking:manage` | free |
 | `detach_network_vpn_gateway` | Detach an account VPN from its network when supported; it keeps its paid period and devices but recreates the gateway | `networking:manage` | free |
 | `set_vpn_server_access` | Choose accept or groups_only for the VPN's access to attached servers when this capability is available | `networking:manage` | free |
-| `create_network_vpn_peer` | Add a device with an externally generated one-time PUBLIC reveal key | `networking:manage` | free |
+| `create_network_vpn_peer` | Add a device, or a connected location (site-to-site office router), with an externally generated one-time PUBLIC reveal key | `networking:manage` | free |
 | `take_network_vpn_peer_config` | Consume the device's sealed configuration ONCE | `networking:manage` | free |
 | `revoke_network_vpn_peer` | Revoke one device using the VPN GATEWAY generation | `networking:manage` | free |
-| `set_network_vpn_peer_grants` | Replace the device's complete reachable-server list when standalone VPN is available | `networking:manage` | free |
+| `set_network_vpn_peer_grants` | Replace a device or site's complete individual-server or network-wide access choice | `networking:manage` | free |
 | `get_network_vpn_egress_options` | Read supported VPN Internet exits and qualification | `networking:read` | free |
 | `set_network_vpn_peer_egress` | Set a device's private-only, inherited NAT, or advertised chosen exit policy | `networking:manage` | free |
+| `get_network_vpn_peer_recipe` | Read public IPsec router instructions with a PSK placeholder; no secret retrieval | `networking:read` | free |
+| `get_network_vpn_peer_history` | Read a device's or connected location's traffic and handshake history (24 h raw, 7 d, 30 d, 13 months) | `networking:read` | free |
+| `set_network_vpn_site_options` | Switch hub-and-spoke between the locations connected to a VPN | `networking:manage` | free |
+| `set_network_vpn_site_alert` | Switch the office-down e-mail of one connected location | `networking:manage` | free |
+| `list_network_vpn_site_health_webhooks` | List a site's signed health subscriptions and last delivery outcomes; URLs show public hosts only | `networking:read` | free |
+| `create_network_vpn_site_health_webhook` | Create a signed site health subscription with an external X25519 reveal public key; returns sealed signing material | `networking:manage` | free |
+| `delete_network_vpn_site_health_webhook` | Remove a site's subscription and cancel pending deliveries | `networking:manage` | free |
+| `set_network_site_route_mode` | Choose DHCP routes or an internal router for a network's routes to connected locations | `networking:manage` | free |
 | `list_network_products` | Read current paid products, live tier names, prices and purchase capability; public proxy load balancer 3/5-node offerings must come from this catalog. | `networking:read` | free |
 | `list_network_product_periods` | Read owned product periods, renewal availability and lifecycle facts. | `networking:read` | free |
 | `quote_network_product` | Create the network product's exact paid quote for COMMON CHECKOUT | `networking:manage` | Quote: `networking:order` |
@@ -1152,6 +1257,14 @@ feature gate.
 | `quote_network_public_address` | Quote a new paid public address for common checkout; no charge | `networking:manage` | Quote: `networking:order` |
 | `attach_public_address_to_network` | Attach or move an already-paid address to an owned network's NAT | `networking:manage` | free |
 | `attach_public_address_to_server` | Attach or move an owned paid public address to an eligible zero-public-IP server's private port | `networking:manage` | free |
+| `list_public_address_server_targets` | Search and page the account's servers as targets for attach_public_address_to_server_interface. | `networking:read` | free |
+| `attach_public_address_to_server_interface` | Attach an owned paid public address directly to the public interface of a server that has its own public IPv4 (service_id from list_public_address_server_targets with eligible true). | `networking:manage` | free |
+| `check_network_public_address_reach` | Ask again whether an owned public address attached to a server's public interface is reachable from the internet, and ask the server's own step again (for example after the server agent was started). | `networking:manage` | free |
+| `set_public_address_outgoing_source` | Use an additional address on a VPS's public interface for the server's new outgoing IPv4 connections, or switch back | `networking:manage` | free |
+| `recheck_public_address_outgoing_source` | Ask a server again to put its outgoing source back on its own IP | `networking:manage` | free |
+| `get_public_ip_rdns` | Read the reverse DNS of an additional, floating, VPN or load-balancer address (`target`) | `networking:read` | free |
+| `set_public_ip_rdns` | Set the reverse DNS hostname of such an address at its revision | `networking:manage` | free |
+| `reset_public_ip_rdns` | Remove the custom reverse DNS of such an address | `networking:manage` | free |
 | `detach_network_public_address` | Detach an owned public address from its current target; it stays owned for the paid period | `networking:manage` | free |
 | `quote_public_address_renewal` | Quote the address's next month without charging; use the returned quote and this key for confirmation. | `networking:manage` | Quote: `networking:order` |
 | `renew_network_public_address` | Pay the approved address renewal from balance with its exact quote ID/token and original key. | `networking:manage` | Paid: `networking:order` |
@@ -1159,9 +1272,32 @@ feature gate.
 | `get_network_public_binding` | Read one existing owned public binding's generation, state and assigned address | `networking:read` | free |
 | `bind_network_public_ip` | Bind an already reserved floating public binding to an owned private port when supported | `networking:manage` | free |
 | `move_network_public_ip` | Move a prepared floating public binding to another owned private port; confirm interruption to the old target. | `networking:manage` | free |
-| `configure_network_public_forwarding` | Configure an existing reserved forwarding binding's TCP/UDP listeners | `networking:manage` | free |
 | `delete_network_public_binding` | Request deletion of an existing binding using its generation | `networking:manage` | free |
 
+### VPN gateways and sites (more)
+| Tool | Description | Scope | Paid |
+|------|-------------|-------|------|
+| `restart_network_vpn_gateway` | Restart the owned VPN VM in place. | `networking:manage` | free |
+| `rebuild_network_vpn_gateway` | Rebuild the owned VPN VM with its existing address and devices. | `networking:manage` | free |
+| `set_network_vpn_internet_exit` | Choose none, the VPN's own IPv4, or its attached network NAT as Internet exit. | `networking:manage` | free |
+| `take_network_vpn_site_line_config` | Consume the second IPsec line's sealed key exactly once with line=2. | `networking:manage` | free |
+| `rotate_network_vpn_ipsec_key` | Rotate an IPsec site's pre-shared key. | `networking:manage` | free |
+| `save_network_vpn_router_setup` | Save nonsecret backend-catalogue router version and local interface/zone fields for an IPsec site, optionally line 2. | `networking:manage` | free |
+| `set_network_vpn_site_bgp` | Enable or change BGP over an eligible IPsec site using the gateway generation. | `networking:manage` | free |
+| `add_network_vpn_site_line` | Add line 2 to an IPsec site using the gateway generation and an external X25519 public reveal key. | `networking:manage` | free |
+| `set_network_vpn_site_main_line` | Choose line 1 or 2 as the main IPsec line using the gateway generation; optional DPD applies to both. | `networking:manage` | free |
+| `remove_network_vpn_site_second_line` | Remove line 2 using the gateway generation. | `networking:manage` | free |
+| `start_network_vpn_tunnel_test` | Start a backend tunnel test for a site or supported WireGuard peer; optional line selects 1 or 2. | `networking:manage` | free |
+| `get_network_vpn_tunnel_test` | Read one owned tunnel test by its returned ID; while running, poll no faster than the backend's one-second guidance. | `networking:read` | free |
+| `set_network_vpn_site_reach` | Set this site's load-balancer/floating-IP reach choice, or null to follow its VPN default. | `networking:manage` | free |
+
+| `rename_network_vpn_gateway` | Rename an owned VPN's customer label. | `networking:manage` | free |
+| `update_network_vpn_gateway_image` | Apply the backend-qualified reviewed VPN image in place. | `networking:manage` | free |
+| `check_network_vpn_public_access` | Preview the complete VPN public-source lists without applying them. | `networking:read` | free |
+| `set_network_vpn_public_access` | Replace the complete WireGuard/IPsec public-source lists at the VPN gateway generation. | `networking:manage` | free |
+| `set_network_vpn_ipsec_tuning` | Replace an IPsec site's advanced tunnel choices using the gateway generation. | `networking:manage` | free |
+| `quote_network_vpn_traffic_pack` | Quote a traffic pack for this owned VPN using an offered tier from get_network_vpn_gateway traffic. | `networking:manage` | Quote: `networking:order` |
+
 <!-- tool-reference:end -->
 
 ## Worked examples
@@ -1239,12 +1375,19 @@ at the location given by `zone.verification.next_step`, then call
 
 ## Getting an API key
 
-1. Log in at [vpsnet.com](https://www.vpsnet.com)
-2. Go to **Account** > **API Keys**
-3. Click **Create API Key**
-4. Give it a name and copy the key
+1. Log in at [vpsnet.com](https://www.vpsnet.com) and open **Account** > **API Keys**:
+   <https://www.vpsnet.com/en/management/account/api-keys>
+2. Click **Create API Key**
+3. Give it a name, choose the access level and, for network tools, add `networking:read`
+   or `networking:manage` (they are never included by default)
+4. Copy the key
+
+The key is shown only once — store it securely. The full API description is
+<https://www.vpsnet.com/openapi-v1.yml>.
 
-The key is shown only once — store it securely.
+To use ChatGPT, Claude, Gemini or Grok without an API key, connect the hosted
+connector instead; connections are created and managed in **Account** > **AI connections**:
+<https://www.vpsnet.com/en/management/account/ai-connections>.
 
 ## Troubleshooting
 
@@ -1297,18 +1440,18 @@ Malformed or oversized URL identifiers are rejected before an API request.
 |---|---|---|
 | `aiScopedApiKeyCannotManageAccount` (403) | The key is an **AI-scoped key**. Those are issued only for VPSnet AI assistant inference and are deliberately refused on the entire account API. Granting scopes cannot change this — the restriction is on the key type. | Create a separate key with scope `full` (or `read` for GET-only use) and use that here. Keep the AI-scoped key for inference. |
 | `apiKeyRejected` (401) | The key failed authentication outright. The API returns one identical 401 for every cause, so it is one of: unknown, revoked, expired, malformed, or your source IP is not on the key's IP allowlist. | Check the key is active and copied whole, and that any IP allowlist includes the address this server calls from. |
-| `readOnlyApiKeyCannotWrite` (401) | A read-scoped key was used for a write; read keys are limited to GET. | Use a full-scope key, or stay on read-only tools. |
-| `apiKeyScopeMissing` (403) | The key authenticated but lacks the granular scope named in `requiredScope`. | Add that scope in Account > API Keys. |
+| `readOnlyApiKeyCannotWrite` (403) | A read-scoped key was used for a write; read keys are limited to GET. | Use a full-scope key, or stay on read-only tools. |
+| `apiKeyScopeMissing` (403) | The key authenticated but lacks the granular scope named in `requiredScope`. | Add that scope in Account > API Keys (https://www.vpsnet.com/en/management/account/api-keys). |
 | `apiKeyForbidden` (403) | The endpoint refuses API keys entirely. API keys never grant admin access. | Use the panel with a signed-in session. |
 
 - Verify the key is correct (starts with `vpsnet_` followed by 43 characters)
 - Keys are shown only once at creation — if lost, create a new one
-- Check that the key hasn't expired (Account > API Keys)
+- Check that the key hasn't expired (Account > API Keys: https://www.vpsnet.com/en/management/account/api-keys)
 
 ### `deploy_ssh_key` succeeded but SSH still fails
 
 - All VPSnet.com servers use `root` as the SSH username
-- Key deployment is async — wait 15-30 seconds after deploying before attempting SSH
+- Key deployment is asynchronous: follow the returned noty UUID with `wait_for_event` until it reports completed before attempting SSH
 
 ### `fetch is not defined` or unexpected errors
 

package/build/api.js

@@ -166,6 +166,50 @@ semantics) {
     // real cause instead of an unactionable "Unauthorized".
     return { status: res.status, data: authorizationContext() ? data : annotateAuthFailure(res.status, data) };
 }
+/**
+ * Send raw bytes (an upload chunk) to an account API route with the caller's
+ * credentials. Same base, path, credential, redirect and timeout rules as
+ * apiRequest; only the request body differs.
+ */
+export async function apiRawRequest(method, path, bytes, extraHeaders = {}) {
+    validateApiPath(path);
+    const url = `${resolveApiBase()}${path}`;
+    const headers = {
+        Accept: "application/json",
+        "Content-Type": "application/octet-stream",
+        ...extraHeaders,
+        ...apiAuthorization(resolveApiKey),
+    };
+    const timeoutMs = resolveApiTimeoutMs();
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), timeoutMs);
+    let res;
+    let text;
+    try {
+        res = await fetch(url, { method, headers, body: bytes, redirect: "error", signal: controller.signal });
+        text = await res.text();
+    }
+    catch (error) {
+        if (error instanceof Error && error.name === "AbortError") {
+            throw new Error(`VPSnet API request timed out after ${timeoutMs}ms: ${method} ${path}`);
+        }
+        throw error;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+    let data;
+    try {
+        data = text ? JSON.parse(text) : null;
+    }
+    catch {
+        return { status: res.status, data: res.ok ? { success: false, error: "The VPSnet API answered with a non-JSON body." }
+                : describeNonApiResponse(res.status, res.headers.get("content-type"), text, new URL(url).host, false) };
+    }
+    if (res.ok === false)
+        data = withHttpStatus(res.status, data, res.headers.get("retry-after"));
+    return { status: res.status, data: authorizationContext() ? data : annotateAuthFailure(res.status, data) };
+}
 /**
  * Structured tool error for a non-2xx answer whose body is not JSON.
  */

package/build/application-contract.js

@@ -1,3 +1,4 @@
+import { unboundedInteger } from './tool-schema.js';
 import { z } from "zod";
 export const applicationLogTailLinesSchema = z
     .number()
@@ -32,7 +33,7 @@ export const applicationActionSchema = z
     .describe("Supported lifecycle action. Update and rollback apply the exact backend-advertised immutable release. Selective data restore is a separate revision-bound operation.");
 export const applicationActionIdSchema = z
     .string()
-    .uuid()
+    .guid()
     .describe("Exact action UUID from the current installation latest_action.id");
 export const applicationExpectedVersionSchema = z
     .string()
@@ -82,7 +83,7 @@ const externalHttpsUrlSchema = z.string().max(500).refine((value) => {
  * app-additional-addresses-design-1005 section 2.3.
  */
 export const applicationAdditionalAddressSchema = z.object({
-    zone_id: z.number().int().min(1),
+    zone_id: unboundedInteger().min(1),
     name: z
         .string()
         .max(190)
@@ -97,7 +98,7 @@ export const applicationSingleAccessSchema = z.discriminatedUnion("mode", [
     z.object({ mode: z.literal("external_https"), url: externalHttpsUrlSchema }).strict(),
     z.object({
         mode: z.literal("managed_https"),
-        zone_id: z.number().int().positive(),
+        zone_id: unboundedInteger().positive(),
         subdomain: z
             .string()
             .max(190)
@@ -192,11 +193,11 @@ export function applicationResourceThresholdRequestBody(input) {
 }
 export const applicationDataRestorePointIdSchema = z
     .string()
-    .uuid()
+    .guid()
     .describe("Opaque eligible backup-point UUID returned by list_application_restore_points");
 export const applicationDataRestoreIdSchema = z
     .string()
-    .uuid()
+    .guid()
     .describe("Opaque selective restore UUID returned by restore_application_data");
 export const applicationDataRestoreQuoteTokenSchema = z
     .string()

package/build/auth-failure.js

@@ -17,7 +17,7 @@ function message(data) {
     const raw = record(data).message;
     return typeof raw === "string" ? raw : "";
 }
-const MANAGEMENT_KEY_FIX = "Create a management API key in the VPSnet panel under Account > API Keys "
+const MANAGEMENT_KEY_FIX = "Create a management API key in the VPSnet panel under Account > API Keys (https://www.vpsnet.com/en/management/account/api-keys) "
     + "(scope 'full', or 'read' if you only need GET reads) and set it as "
     + "VPSNET_API_KEY. A key is 'vpsnet_' followed by 43 characters.";
 /**
@@ -74,8 +74,8 @@ export function explainAuthFailure(status, data) {
                 ? `The API key authenticated successfully but is missing the '${required}' scope.`
                 : "The API key authenticated successfully but is missing a scope this endpoint requires.",
             fix: required
-                ? `Add the '${required}' scope to the key in Account > API Keys, or use a key that already has it.`
-                : "Grant the endpoint's scope to the key in Account > API Keys.",
+                ? `Add the '${required}' scope to the key in Account > API Keys (https://www.vpsnet.com/en/management/account/api-keys), or use a key that already has it.`
+                : "Grant the endpoint's scope to the key in Account > API Keys (https://www.vpsnet.com/en/management/account/api-keys).",
         };
     }
     if (payload.apiKeyForbidden === true) {
@@ -105,7 +105,7 @@ export function explainAuthFailure(status, data) {
                 + "not exist, was revoked, has expired, is malformed, or your source "
                 + "IP is not on the key's IP allowlist. Note this is NOT the "
                 + "AI-scoped-key case, which returns 403 with its own message.",
-            fix: "Check the key in Account > API Keys: confirm it is active, unexpired, "
+            fix: "Check the key in Account > API Keys (https://www.vpsnet.com/en/management/account/api-keys): confirm it is active, unexpired, "
                 + "copied whole, and that any IP allowlist on it includes the address "
                 + "this server calls from. " + MANAGEMENT_KEY_FIX,
         };
@@ -113,7 +113,7 @@ export function explainAuthFailure(status, data) {
     return {
         code: "apiKeyForbiddenUnclassified",
         reason: "The account API refused this request for the authenticated key.",
-        fix: "Check the key's scopes and access settings in Account > API Keys.",
+        fix: "Check the key's scopes and access settings in Account > API Keys (https://www.vpsnet.com/en/management/account/api-keys).",
     };
 }
 /**

package/build/custom-project-contract.js

@@ -1,11 +1,11 @@
 import { z } from "zod";
 export const customProjectIdSchema = z
     .string()
-    .uuid()
+    .guid()
     .describe("Customer-owned recipe project UUID returned by list_application_recipes");
 export const composeAdoptionIdSchema = z
     .string()
-    .uuid()
+    .guid()
     .describe("Opaque Compose adoption UUID returned by the prepare operation");
 export const composeProjectLabelSchema = z
     .string()
@@ -45,7 +45,7 @@ export const customProjectSecretNamesSchema = z
     .default([])
     .describe("Secret variable names only; definitions and exports never contain values");
 export const customProjectRegistryCredentialIdsSchema = z
-    .array(z.string().uuid())
+    .array(z.string().guid())
     .max(8)
     .refine((ids) => new Set(ids).size === ids.length, {
     message: "Registry credential IDs must be unique",

package/build/dns-zone-contract.js

@@ -0,0 +1,11 @@
+/** Describes both creation paths in DnsZonesController::store, including restoration. */
+export function createDnsZoneDescription(hosted = false) {
+    return [
+        hosted
+            ? "Create a native forward DNS zone in the connected VPSnet account. Secondary zones and their TSIG credentials must be configured in the VPSnet control panel; this hosted tool does not accept authentication secrets."
+            : "Create a native or secondary forward DNS zone in the authenticated VPSnet account. Secondary zones transfer records from public primary DNS servers and require TSIG.",
+        "Normally creates pending_verification. With qualifying current ownership proof, the API may instead restore a recently deleted zone and queue immediate publication. Publication can delete stale zone candidates for the same name, including their DNS records and DDNS tokens. Existing live zones are refused; this does not register a domain or change registrar nameservers.",
+        "Read the returned zone.status and apply_state: queued publication is not proof of live DNS service. When verification is needed, verificationRecord contains the public ownership TXT challenge (_vpsnet-dns.<zone>). Follow zone.verification.next_step and warnings for its location, then call verify_dns_zone. Keep nameservers already delegated to VPSnet. A previous-provider or parent-zone location may be required.",
+        "If the TXT value is missing, first read get_dns_zone.zone.verification.record.value; reissue_dns_zone_verification rotates it only when unrecoverable or requested by the customer. Requires dns:write.",
+    ].join(" ");
+}

package/build/file-restore-contract.js

@@ -22,7 +22,7 @@ export const fileBrowsePointIdSchema = z
     .describe("Backup point ID returned by list_restore_file_points");
 export const fileBrowseIdSchema = z
     .string()
-    .uuid()
+    .guid()
     .describe("Browse UUID returned by browse_restore_files");
 export const fileBrowseDirectoryEntryIdSchema = z
     .string()