BLAZINGFAST — DEDICATED SERVERS
Reviewed: 5 October 2026. Setup: 00-index.txt.
Production release: SDK/CLI 0.1.17; contract 2026-10-07.1. Check GET /v1/version and GET /v1/capabilities before using optional workflow features. Strict response validation is enforced.

PURPOSE
Physical servers with selectable region, hardware, compatible OS, billing period
and product-specific connectivity/IP options. Public product names describe the
offer; internal stock mappings are not customer configuration inputs.

PUBLIC API
GET /v1/products?region=pt&type=dedicated and each configuration_url: hardware,
stock, required inputs, billing choices, connectivity/IP add-ons and limits.
GET /v1/dedicated/catalog: sellable configurations, region, OS and billing options.
POST /v1/dedicated/deployments: create an unpaid order using configurationCode,
regionCode, numeric osProfileId, hostname, optional owned sshKeyId, billing and
public addons [{"key":"DISCOVERED_KEY","qty":1}]. Pricing/limits are checked
by the same checkout engine as generic orders; never supply a hardware or price.
You may instead quote and submit the same generic cart with userConfig.dedicated.
Requires Idempotency-Key. Pay the returned invoice as a separate operation.
GET /v1/dedicated/deployments/{orderId}: order/payment/provisioning status.
GET /v1/dedicated/{serviceId}: lifecycle, hardware, OS, IPs and power.
GET /v1/services?status=suspended&type=dedicated: filtered service list.
Service lists/details include recorded hostname and type, never passwords.
GET .../console: login-protected browser console link, not a VNC bearer ticket.
POST .../power: action start, stop, restart or exit_rescue; returns a task.
GET .../tasks and .../tasks/{taskId}: progress and action history.
GET .../reinstall-options and .../rescue-options: compatible numeric profiles.
POST .../reinstall: profileId, confirmation ERASE, optional hostname/sshKeyId.
POST .../rescue: profileId, confirmation RESCUE.
POST .../password-reset; GET .../password-reset-credential after completion.
GET .../credentials: sensitive, separately permissioned installed credentials.
GET .../traffic and .../power-stats: available network/electrical measurements.
Permissions: dedicated.read / dedicated.write / dedicated.credentials.read.

CLI
bf products --region pt --type dedicated
bf dedicated images --region pt --configuration CONFIGURATION_CODE
bf dedicated catalog
bf dedicated status SERVICE_UUID
bf service list dedicated --status suspended
bf dedicated console SERVICE_UUID
bf dedicated tasks SERVICE_UUID
bf dedicated stats SERVICE_UUID traffic
bf dedicated reinstall-options SERVICE_UUID
Order template (replace every placeholder/profile 123 from the catalog):
bf dedicated deploy --configuration CONFIGURATION_CODE --region REGION_CODE --os-profile 123 --hostname myserver --ssh-key-id SSH_KEY_UUID --idempotency-key dedicated-order-001
After explicitly authorizing a restart:
bf dedicated power SERVICE_UUID restart --idempotency-key dedicated-restart-001
bf dedicated task SERVICE_UUID TASK_UUID
Use --confirm-erase for reinstall and --confirm-rescue for rescue. Credentials
and --wait output must only be displayed in a private, unrecorded terminal.

MCP
Hosted: get_dedicated_status, get_dedicated_task, list_dedicated_tasks,
get_dedicated_reinstall_options, get_dedicated_rescue_options,
request_dedicated_start/stop/restart/exit_rescue/reinstall/rescue,
get_dedicated_traffic and get_dedicated_power_stats.
list_services(status="suspended", type="dedicated") filters services;
get_dedicated_console returns a login-protected browser URL.
Hosted quote_order and create_new_order support managed dedicated selections and
owned SSH-key IDs with bandwidth/IP add-ons. No separate hosted deployment,
password-reset or credential-reveal tool is required or exposed.
Local: bf_dedicated_catalog/status/deployment/tasks/task/stats/options.
Opt-in writes include bf_dedicated_deploy, bf_dedicated_power,
bf_dedicated_reinstall/rescue/password_reset. Credential tools need a separate
local opt-in; leave it disabled for ordinary AI use.

LIMITS AND SAFETY
Payment and any required administrator approval precede installation.
Unpaid orders may reserve inventory until the product's expiration TTL.
Active billing, running power and installation progress are distinct states.
Reinstall erases disks; rescue/reset interrupts connections. Track tasks instead
of submitting another installation after a timeout. Do not infer task completion
from acceptance. Product add-on/network entitlements are not proof of applied
network limits. Dedicated statistics do not provide guest CPU/RAM/disk usage.
Console access requires an active, owned service and a browser login. It does
not reveal management URLs or provide a native VNC/CLI tunnel.

Workflow metadata: discover purchase.draft_order / purchase.atomic_deploy, then
follow requirements_url/options_url for canonical deployment inputs and sources.
Quotes are optional and not price-locked. Approve quote.recommended_max_total and
send max_total; deployment_price_limit_exceeded refuses a higher final total.
Follow returned links.operation/service/invoice/order when present. Canonical
write receipts are opt-in with x-bf-response-format: operation and capability
support; default v1 fields remain compatible. After losing a tracked write
response, GET /v1/operations?idempotency_key=ORIGINAL_KEY without repeating it.
Missing or expired receipts never authorize a replacement key. Poll status/done,
then read the successful result's resource IDs. MCP approval is separate from
execution. DNSSEC retains its own polling contract. See the integration guide.