# providerAccounts (/docs/reference/api/provider-accounts) > Provider accounts connect a tenant to an external provider registered with `vps({ providers })`, such as a cloud or a dedicated-server host. Each account's `config` is validated by its provider's manifest and holds secret references, never secret values. Provider pools create instances through an account, and `bootstrap` turns one of its machines into a bcd host. See [Providers](/docs/guides/vps/providers). Provider accounts connect a tenant to an external provider registered with `vps({ providers })`, such as a cloud or a dedicated-server host. Each account's `config` is validated by its provider's manifest and holds secret references, never secret values. Provider pools create instances through an account, and `bootstrap` turns one of its machines into a bcd host. See [Providers](/docs/guides/vps/providers). All 7 methods are served by this release. | Method | Kind | Authorization | Phase | Status | | ------------------------- | -------- | --------------------------------------------------------------------------------------------- | ----- | ---------- | | [`create`](#create) | mutation | `compute:providers:manage` @ `compute-fleet` or `compute:providers:manage` @ `compute-tenant` | v0.3 | registered | | [`list`](#list) | read | `compute:providers:read` @ `compute-tenant` + items | v0.3 | registered | | [`get`](#get) | read | `compute:providers:read` @ `compute-provider-account` | v0.3 | registered | | [`offers`](#offers) | read | `compute:providers:read` @ `compute-provider-account` | v0.3 | registered | | [`update`](#update) | mutation | `compute:providers:manage` @ `compute-provider-account` | v0.3 | registered | | [`delete`](#delete) | mutation | `compute:providers:manage` @ `compute-provider-account` | v0.3 | registered | | [`bootstrap`](#bootstrap) | mutation | `compute:providers:manage` @ `compute-provider-account` | v0.3 | registered | ## create [#create] `POST /api/compute/providerAccounts/create` Stores a provider account for the tenant after validating its `config` with the provider's manifest; returns the account. * **Idempotency.** `idempotencyKey` is optional. With a key, the account id derives from the tenant, the caller and the key, and a repeat returns the stored account without a second IAM decision; a different `provider` or `name` under the same key is `CONFLICT`. A name the tenant already uses for another account is also `CONFLICT`. * **IAM.** Decided as `compute:providers:manage` on the tenant. * **Errors.** `INVALID_INPUT` for an unknown provider (`details.known` lists the registered ones), a config the manifest rejects (`details.issues`), or a field ending in `token`, `secret`, `password` or `key` whose value is not a `secret://`, `vault://` or `env://` reference. * **Kind:** mutation * **Authorization:** `compute:providers:manage` @ `compute-fleet` or `compute:providers:manage` @ `compute-tenant` * **Module:** `vps` * **Phase:** v0.3 (registered) **Input** | Field | Type | Required | Constraints | | ---------------- | ------ | -------- | -------------------------------------------------------------- | | `tenantId` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `provider` | string | yes | at most 64 characters; matches `^[a-z][a-z0-9-]{0,63}$` | | `name` | string | yes | at most 63 characters; matches `^[a-z0-9][a-z0-9._-]{0,62}$` | | `config` | any | | default `{}` | | `idempotencyKey` | string | | at most 128 characters; matches `^[A-Za-z0-9._~:/+=-]{1,128}$` | ## list [#list] `POST /api/compute/providerAccounts/list` Returns the tenant's provider accounts, sorted by name. Each `config` holds only secret references. * **Kind:** read * **Authorization:** `compute:providers:read` @ `compute-tenant` + items * **Module:** `vps` * **Phase:** v0.3 (registered) **Input** | Field | Type | Required | Constraints | | ---------- | ------ | -------- | ---------------------------------------------------------- | | `tenantId` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | ## get [#get] `POST /api/compute/providerAccounts/get` Returns one provider account of the tenant. An account of another tenant, or none, is `NOT_FOUND`. * **Kind:** read * **Authorization:** `compute:providers:read` @ `compute-provider-account` * **Module:** `vps` * **Phase:** v0.3 (registered) **Input** | Field | Type | Required | Constraints | | ----------- | ------ | -------- | ------------------------------------------------------------------ | | `tenantId` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `accountId` | string | yes | at most 58 characters; matches `^pacct_[0-9a-hjkmnp-tv-z]{26,52}$` | ## offers [#offers] `POST /api/compute/providerAccounts/offers` Asks the provider, through the account, for the machine types it offers; returns them as `items`. The optional `query` filters by `kind` (`metal` or `vps`), `region`, `gpuModel`, `minGpus`, `minVcpu` and `minMemoryGiB`. The call reaches the provider live. A missing account is `NOT_FOUND`. * **Kind:** read * **Authorization:** `compute:providers:read` @ `compute-provider-account` * **Module:** `vps` * **Phase:** v0.3 (registered) **Input** | Field | Type | Required | Constraints | | -------------------- | --------------------- | -------- | ------------------------------------------------------------------ | | `tenantId` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `accountId` | string | yes | at most 58 characters; matches `^pacct_[0-9a-hjkmnp-tv-z]{26,52}$` | | `query` | object | | | | `query.kind` | one of `metal`, `vps` | | | | `query.region` | string | | at most 63 characters; matches `^[a-z0-9][a-z0-9._-]{0,62}$` | | `query.gpuModel` | string | | at most 32 characters; matches `^[A-Za-z0-9-]{1,32}$` | | `query.minGpus` | integer | | 0-64 | | `query.minVcpu` | integer | | 0-1024 | | `query.minMemoryGiB` | integer | | 0-16384 | ## update [#update] `POST /api/compute/providerAccounts/update` Replaces the account's `config`, validated as in `create`, and increments its version; returns the account. The provider and the name cannot change. The next provider call builds a new client from the new config. A missing account is `NOT_FOUND`; an invalid config is `INVALID_INPUT`. * **Kind:** mutation * **Authorization:** `compute:providers:manage` @ `compute-provider-account` * **Module:** `vps` * **Phase:** v0.3 (registered) **Input** | Field | Type | Required | Constraints | | ----------- | ------ | -------- | ------------------------------------------------------------------ | | `tenantId` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `accountId` | string | yes | at most 58 characters; matches `^pacct_[0-9a-hjkmnp-tv-z]{26,52}$` | | `config` | any | | | ## delete [#delete] `POST /api/compute/providerAccounts/delete` Deletes a provider account that no pool and no instance uses; returns `deleted: true`. Archived pools and deleted instances do not count: deleted instances keep their history but drop the reference. A pool that is not archived, or an instance that is not deleted, on the account makes the call `INVALID_STATE`. A missing account is `NOT_FOUND`. * **Kind:** mutation * **Authorization:** `compute:providers:manage` @ `compute-provider-account` * **Module:** `vps` * **Phase:** v0.3 (registered) **Input** | Field | Type | Required | Constraints | | ----------- | ------ | -------- | ------------------------------------------------------------------ | | `tenantId` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `accountId` | string | yes | at most 58 characters; matches `^pacct_[0-9a-hjkmnp-tv-z]{26,52}$` | ## bootstrap [#bootstrap] `POST /api/compute/providerAccounts/bootstrap` Records a request to turn one of the account's machines into a bcd host of a `vps-host` or `metal-host` pool; returns the bootstrap, which the `vps.bootstraps` reconciler then drives to `joined` or `failed`. * **Input.** Name exactly one of `machineId` (a machine the account already has; starts in `identifying`) or `offerId` (a machine to claim or order; starts in `claiming`). The pool must be owned by the tenant, not archived, and run the `bcd` agent. * **Idempotency.** `idempotencyKey` is required. A repeat returns the bootstrap's current status; a different request under the same key is `CONFLICT`. * **Errors.** `INVALID_CONFIG` when `vps()` has no `bootstrap` options or the host has no PKI. `UNSUPPORTED` when the provider cannot identify and bootstrap machines. `NOT_FOUND` for a missing account or a pool the tenant does not own, `INVALID_STATE` for an archived pool, `INVALID_INPUT` for a pool of another class or agent. * **Events.** `provider.bootstrap.started`; the reconciler later publishes `provider.bootstrap.installed`, `provider.bootstrap.joined` or `provider.bootstrap.failed`. The join token it mints is single-use, bound to the machine, and never returned or stored. * **Kind:** mutation * **Authorization:** `compute:providers:manage` @ `compute-provider-account` * **Module:** `vps` * **Phase:** v0.3 (registered) **Input** | Field | Type | Required | Constraints | | ---------------- | ------ | -------- | ------------------------------------------------------------------ | | `tenantId` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `accountId` | string | yes | at most 58 characters; matches `^pacct_[0-9a-hjkmnp-tv-z]{26,52}$` | | `poolId` | string | yes | at most 57 characters; matches `^pool_[0-9a-hjkmnp-tv-z]{26,52}$` | | `machineId` | string | | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `offerId` | string | | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` | | `idempotencyKey` | string | yes | at most 128 characters; matches `^[A-Za-z0-9._:-]{1,128}$` |