REST API

Laravel Xen Orchestra v1.0.0 — Open-source PHP/Laravel client for the XO REST API

poddingue — Thu, 10 Sep 2026 12:28:06 GMT

Pretty cool, @samuelolavo, thanks for clarifying!

XO 6.7 REST API - full coverage for MCP agents, updated same day (267 tools, open source)

axeldunkel — Thu, 30 Jul 2026 18:39:34 GMT

@poddingue Borrow away - "smoke alarm" is a better name for it than anything we had, so we might borrow it right back. Since you mentioned reading the matrix - here is the classification you would be reading, straight from the file: grep access: dadl/xen-orchestra.dadl | sort | uniq -c 49 access: admin 21 access: dangerous 122 access: read 75 access: write 122 of the 267 tools are plain read - that is the entire surface a review-capped agent gets. The other 145 exist in the same file, but for that agent they might as well not. The whole security taxonomy is greppable plaintext - which is rather the point of a declarative format. And if anything in the matrix looks wrong or missing, this thread is exactly the right place - real-world corrections are how it improves.

vm.stats questions on response and parameters

Tue, 09 Jun 2026 16:44:27 GMT

REST - Reversed query?

DustyArmstrong — Tue, 05 May 2026 09:12:14 GMT

@florent OK cool, thank you for the info.

Feedback from Automation Project (vCPUs, VDI rename, boot order)

kagbasi-wgsdac — Fri, 27 Mar 2026 00:35:58 GMT

@olivierlambert & @mathieura thanks for the speedy response. Duly noted, very much appreciated.

REQUEST: Add PATCH /vms/{id} for updating VM properties (name_description, name_label)

14wkinnersley — Mon, 16 Mar 2026 02:25:05 GMT

@poddingue Confirmed working, thank you so much for the heads-up, this made my day! Got it wired into the n8n flow and it's running perfectly. One gotcha for anyone else landing here, name_description gets rejected with a 422 "excess property", it has to be nameDescription. Working body: { "nameDescription": "nginx, app-1, app-2 | 2026-06-01" }

IPMI/ IDRAC (XAPI)

kawreh — Fri, 13 Mar 2026 10:45:15 GMT

@gduperrey Worked swell, thanks

Unable to define count of CPUs during VM create

acebmxer — Wed, 11 Mar 2026 09:08:56 GMT

@MathieuRA Glad to see this finally fixed. I brought this up a while ago... https://xcp-ng.org/forum/post/102102

Automation of all CURD operations

john.c — Mon, 02 Mar 2026 11:38:15 GMT

@rama said: @olivierlambert thank you. but is it possible to keep tracking all the CURD operation like we have in terraform. but currently MCP have only Read tasks. Like if some new interns in my lab don't know about this and in this agentic framework if he/she need a VM's, delete or update it can be done very quick. it will save many hours. I hope this will be available in future or if you wish to do tell me how far it is. The plugin MCP Server is read only by design to keep using it safe, to have an MCP for reading and another for writing is best practice. If you desire to have a separate MCP server for the writing actions, feel free to suggest that in the feedback portal. You can even develop your own MCP server, which makes calls to the write side of the XO REST API. https://modelcontextprotocol.io/

API authentication token permissions

MathieuRA — Wed, 25 Feb 2026 08:57:58 GMT

Hi @halvor, FYI, ACL V2 / RBAC is now available in the REST API. You can create a privilege that only give you read privilege on your host. You can see the RBAC doc. A dedicated thread is available on the forum thread, please feel free to share your feedback. Thank you.

REST API: Attaching an existing .vhd to a stopped VM

Bytevenidos — Sat, 21 Feb 2026 21:27:47 GMT

@Danp alright, thanks. I'll give that a try.

filter for custom field

randyrue — Mon, 02 Feb 2026 22:41:46 GMT

@Pilow tags can work and the path to them is much more succinct. Thanks!

API Fetching a list of users with OTP activated

fcgo — Fri, 19 Dec 2025 09:32:59 GMT

@MathieuRA Thank you, perfect Br,

DATE filter on backup logs ?

olivierlambert — Tue, 09 Dec 2025 16:58:30 GMT

But giving your feedback on how you solved it might help many people in the future Thanks!

Access XOA Logs via API?

ThisGuy_420 — Fri, 05 Dec 2025 19:50:55 GMT

@MathieuRA The context for my question is I created an app to control my VMs and though my app said a VM started it really didn't. When I went into the logs I noticed an error, so my thought is to be able to check the logs would be helpful to find out if there is an error or not. Let me update my app because I'm thinking I can get around not having access to the logs. Thank you for the prompt response! Have a blessed day!

XOA and Home Assistant

francis-chiew — Sun, 09 Nov 2025 11:31:03 GMT

@Pilow that probably would have been a good idea hey! [image: example] That's the example tile from dashboard-card-example.yaml. But it's Home Assistant. You make it look however you want right? Having the entities available to use is most of the challenge.

Api actions like memory or disk

olivierlambert — Mon, 03 Nov 2025 18:34:36 GMT

Yes, they are created either: on demand for users when we need in XO 6 Now, XO 6 is becoming the main driver for new endpoint as the UI is providing more and more features.

Xen Orchestra Inventory Export Script

DustinB — Thu, 30 Oct 2025 06:49:07 GMT

@olivierlambert Fun fact -lah is short for lazy ass human AI is coming... [image: feb6ff1a-7269-4c37-84b8-8ed1d64c3d68-image.png]

How to revert VM to snapshot

MathieuRA — Sat, 04 Oct 2025 10:57:13 GMT

Hi @slavavrn, FYI, its now possible to revert a snapshot via the REST API. POST /vms/:id/actions/revert_snapshot And the body of the endpoint: { "snapshotId": "snapshotBefore": boolean (optional) }

Why changing objects in resource set wipe limits ???

lsouai-vates — Wed, 03 Sep 2025 13:10:04 GMT

@Kptainflintt you are welcome We are always delighted when we can quickly unblock a user! Have a good day and don't hesitate to come back if you have other issues in the future.

Trouble Creating VM via API

lsouai-vates — Fri, 08 Aug 2025 13:34:25 GMT

@bryonadams said in Trouble Creating VM via API: Is there a place I can submit a feature request to allow setting a description and other settings from the UI to get feature parity when creating a VM? Otherwise, there's not much point since I have to go in and touch the new VM anyway. Unless I'm going about this wrong to begin with? You can create a feature request on Xen Orchestra github repository (https://github.com/vatesfr/xen-orchestra/issues), and if you have subscribed to support via XOA you can send a request through Zammad.

Rest API Mount CDRom to VM

StephenAOINS — Wed, 09 Jul 2025 18:06:15 GMT

I was curious if there had been any updates to mounting ISOs via the API? Thanks.

Getting Error Creating VM Through REST

olivierlambert — Mon, 07 Jul 2025 18:17:10 GMT

Haha, glad it works now, that's what matters anyway

REST API create_vm returns task URL that doesn't exist?

MathieuRA — Wed, 02 Jul 2025 19:01:10 GMT

Hi @DevFlint, tasks are now correctly visible in the swagger documentation