[READ] List domains registered in the ArvanCloud CDN account. Official: GET /cdn/4.0/domains

[READ] Get information for one CDN domain. Official: GET /cdn/4.0/domains/{domain}

[WRITE] Register a domain for CDN/DNS service. Official: POST /cdn/4.0/domains/dns-service. domain_type full = NS delegation; partial = CNAME setup.

[WRITE] Set domain plan_level (1=basic, 2=growth, 3=professional per domain docs). Official: PUT /cdn/4.0/domains/{domain}/plan

[READ] Check whether domain NS keys indicate activation. Official: GET /cdn/4.0/domains/{domain}/ns-keys/check

[READ] List DNS records for a domain. Official: GET /cdn/4.0/domains/{domain}/dns-records

[READ] Get one DNS record by id. Official: GET /cdn/4.0/domains/{domain}/dns-records/{id}. Never invent record_id — obtain from list_dns_records.

[WRITE] Create a DNS record. Official: POST /cdn/4.0/domains/{domain}/dns-records. value shape depends on type (see docs/adding-records). Inspect current records before creating duplicates.

[WRITE] Update an existing DNS record. Official: PUT /cdn/4.0/domains/{domain}/dns-records/{id}. Requires exact record_id. Read current state first.

[DESTRUCTIVE] Permanently delete one DNS record. Official: DELETE /cdn/4.0/domains/{domain}/dns-records/{id}. Requires exact record_id — never infer or delete multiple.

[WRITE] Toggle cloud/proxy status for a DNS record. Official: PUT /cdn/4.0/domains/{domain}/dns-records/{id}/cloud

[READ] Get caching settings for a domain. Official: GET /cdn/4.0/domains/{domain}/caching

[WRITE] Patch caching settings. Official: PATCH /cdn/4.0/domains/{domain}/caching. Documented fields include cache_status (off|uri|query_string), cache_page_200, cache_page_any, cache_browser, cache_ignore_sc, cache_developer_mode, cache_consistent_uptime.

[DESTRUCTIVE] Purge CDN cache. Official: POST /cdn/4.0/domains/{domain}/caching/purge. purge=all clears entire domain cache (service impact). purge=individual requires exact purge_urls. Never broaden scope.

[READ] Get domain SSL settings. Official: GET /cdn/4.0/domains/{domain}/ssl

[WRITE] Patch SSL settings. Official: PATCH /cdn/4.0/domains/{domain}/ssl. Documented fields: ssl_status, https_redirect, replace_http, tls_version, hsts_status, hsts_max_age, hsts_subdomain, hsts_preload. HSTS changes can be hard to reverse until max-age expires.

[READ] List troubleshoot runs for a domain. Official CDN API: GET /domains/{domain}/troubleshoots

[READ] Get the latest troubleshoot for a domain. Official: GET /domains/{domain}/troubleshoots/latest

[WRITE] Start a new troubleshoot for a domain. Official: POST /domains/{domain}/troubleshoots. Body fields beyond empty POST are UNKNOWN / NOT DOCUMENTED in product samples — send empty object unless you have verified fields.

[READ] Get DNSSEC status. Official CDN API: GET /domains/{domain}/dns-records/dnssec (CDN Go SDK). Offline FA also documents update actions.

[WRITE] Update DNSSEC. Offline FA (cdn/dns-records/dnssec): PUT /domains/{domain}/dns-records/dnssec/actions body {"enable":true|false}.

[WRITE] Set custom NS keys. Offline FA (cdn/dns-records/change-default-ns): PUT /domains/{domain}/ns-keys body {"ns_keys":[...]}

[WRITE] Use optional NS keys (.net/.com style). Offline FA: POST /domains/{domain}/ns-keys/use-optional-keys

[READ] GET /domains/{domain}/acceleration (CDN Go SDK). Offline FA documents PATCH bodies for CSS/JS optimization.

[WRITE] Offline FA (cdn/acceleration): PATCH /domains/{domain}/acceleration e.g. {"status":"on","extensions":["css"]}

[WRITE] Offline FA (cdn/acceleration): PATCH /domains/{domain}/image-resize e.g. {"status":"on"}

[WRITE] Offline FA (cdn/security/ddos): PATCH /domains/{domain}/ddos with protection_mode (cookie|javascript|recaptcha|captcha). Note: CDN Go SDK lists /ddos/settings — this tool follows FA product docs path /ddos.

[WRITE] Offline FA / EN WAF docs: PATCH /domains/{domain}/waf with mode off|detect|protect. Note: CDN Go SDK lists /waf/settings — this tool follows product docs path /waf.

[WRITE] Offline FA (https-settings + advanced-settings): PATCH /domains/{domain}/load-balancers/settings. Documented fields include protocol (http|https|auto), method, keepalive, max_fails, fail_timeout, next_upstream_tcp.

[READ] GET /domains/{domain}/firewall/settings (CDN Go SDK; FA firewall API table).

[WRITE] PATCH /domains/{domain}/firewall/settings. Offline FA known-bots sample includes skip_global_firewall. Pass only documented fields.

[READ] GET /domains/{domain}/firewall/rules (CDN Go SDK FirewallRulesIndex).

[READ] GET /domains/{domain}/firewall/rules/{id}

[WRITE] POST /domains/{domain}/firewall/rules. Official FA samples: name, note, is_enabled, action (allow|deny|challenge|bypass), action_details, filter_expr.

[WRITE] PATCH /domains/{domain}/firewall/rules/{id}. Requires exact rule_id. Use documented fields from create samples.

[DESTRUCTIVE] DELETE /domains/{domain}/firewall/rules/{id}. Requires exact rule_id — never delete multiple.

[WRITE] POST /domains/{domain}/firewall/actions/reprioritize (CDN Go SDK). Pass the priority payload exactly as required by the API (product pages list the operation; body schema details may come from API portal).

[READ] GET /domains/{domain}/rate-limit/settings (CDN Go SDK; EN/FA rate-limit API table).

[WRITE] PATCH /domains/{domain}/rate-limit/settings

[READ] GET /domains/{domain}/rate-limit/rules

[READ] GET /domains/{domain}/rate-limit/rules/{id}

[WRITE] POST /domains/{domain}/rate-limit/rules. Official samples include url_pattern, rate, time_duration, is_enabled, description, exclude_sources, burst, block_duration, allowed_methods, action, action_details.

[WRITE] PATCH /domains/{domain}/rate-limit/rules/{id}

[DESTRUCTIVE] DELETE /domains/{domain}/rate-limit/rules/{id}

[WRITE] POST /domains/{domain}/rate-limit/actions/reprioritize (CDN Go SDK / EN rate-limit API table).

[READ] OpenAPI + ar-prometheus-exporter: GET /domains/{domain}/reports/traffics?period=

[READ] OpenAPI + ar-prometheus-exporter: GET /domains/{domain}/reports/visitors?period=

[READ] OpenAPI + ar-prometheus-exporter: GET /domains/{domain}/reports/traffics/map?period=

[READ] OpenAPI + ar-prometheus-exporter: GET /domains/{domain}/reports/response-time?period=

[READ] OpenAPI + ar-prometheus-exporter: GET /domains/{domain}/reports/status?period=

[READ] OpenAPI + ar-prometheus-exporter: GET /domains/{domain}/reports/high-request-ips?period= (Professional+ plans)

[READ] List instances in a data center region. Official: GET /ecc/v1/regions/{region}/servers. Example region from docs: ir-thr-c2.

[READ] List images/OS available in a region. Official: GET /ecc/v1/regions/{region}/images.

[READ] OpenAPI IaaS 1.0: GET /regions/{region}/servers/{id} (ecc/v1).

[READ] OpenAPI iaas/3.0.0: GET https://ecc.{region}.arvanapis.ir/v3/flavors

[READ] OpenAPI IaaS 1.0: GET /regions/{region}/networks (ecc/v1).

[WRITE] Offline FA API Usage + OpenAPI IaaS 1.0: POST /ecc/v1/regions/{region}/servers with name, network_id, flavor_id, image_id, security_groups[{name}], ssh_key, key_name, count. Obtain IDs from list tools — never invent UUIDs.

[WRITE] OpenAPI IaaS 1.0: POST /regions/{region}/servers/{id}/power-on

[WRITE] OpenAPI IaaS 1.0: POST /regions/{region}/servers/{id}/power-off

[WRITE] OpenAPI IaaS 1.0: POST /regions/{region}/servers/{id}/reboot

[READ] OpenAPI iaas/3.0.0: GET https://ecc.{region}.arvanapis.ir/v3/servers

[READ] OpenAPI IaaS 1.0: GET /regions/{region}/databases/flavors (ecc/v1).

[WRITE] OpenAPI IaaS 1.0 CreateDatabaseRequest: POST /regions/{region}/databases with datastoreType + flavorRef from list_database_flavors — do not invent values.

[READ] Official FA/EN API Usage: GET https://napi.arvancloud.ir/vod/2.0/channels

[READ] Offline FA API Usage: GET /vod/2.0/channels/{channel-id}/videos

[READ] OpenAPI Arvan VOD 2.0: GET /channels/{channel}

[READ] OpenAPI: GET /videos/{video}

[READ] OpenAPI: GET /tags

[READ] OpenAPI: GET /domain

[WRITE] Official FA/EN API Usage + OpenAPI: POST /vod/2.0/channels with documented fields (title, description, secure_link_*, ads_enabled, present_type, campaign_id).

[READ] OpenAPI Arvan LIVE 2.0: GET /streams (base napi.../live/2.0).

[READ] OpenAPI: GET /streams/{stream}

[READ] OpenAPI: GET /domain

[READ] OpenAPI: GET /watermarks

[READ] OpenAPI VADS 2.0: GET /channels (host napi.arvancloud.ir/vads/2.0).

[READ] OpenAPI: GET /channels/{channel}

[READ] OpenAPI: GET /channels/{channel}/campaigns

[READ] OpenAPI: GET /campaigns/{campaign}

[READ] OpenAPI: GET /domain

[READ] OpenAPI Edge Computing: GET /edge-computes (optional query: application, q, page, per_page).

[READ] OpenAPI: GET /edge-computes/{edgeComputeId}

[READ] OpenAPI: GET /edge-computes/{edgeComputeId}/routes

[WRITE] OpenAPI Route schema: POST /edge-computes/{edgeComputeId}/routes — required domain, url, status (active|inactive).

[WRITE] OpenAPI: PUT /edge-computes/{edgeComputeId}/routes/{route_id}

[DESTRUCTIVE] OpenAPI: DELETE /edge-computes/{edgeComputeId}/routes/{route_id}

[READ] OpenAPI: GET /plans

[READ] OpenAPI: GET /templates

[READ] OpenAPI: GET /namespace

[READ] OpenAPI: GET /edge-computes/{edgeComputeId}/deployments

[READ] OpenAPI: GET /edge-computes/{edgeComputeId}/env-variables

[WRITE] OpenAPI EnvVariable: POST /edge-computes/{edgeComputeId}/env-variables — key, value, type (string|json), is_secret.

[WRITE] OpenAPI: POST /edge-computes/deploy — required name, bundled_code; optional namespace, tag.

[READ] OpenAPI Arvan CaaS 1.25: GET /api/v1/namespaces/{namespace}/pods on zone base.

[READ] OpenAPI: GET /api/v1/namespaces/{namespace}/pods/{name}

[READ] OpenAPI: GET /api/v1/namespaces/{namespace}/pods/{name}/log

[READ] OpenAPI: GET /apis/apps/v1/namespaces/{namespace}/deployments

[READ] OpenAPI: GET /apis/apps/v1/namespaces/{namespace}/deployments/{name}

[READ] OpenAPI: GET /api/v1/namespaces/{namespace}/services

[READ] OpenAPI: GET /api/v1/namespaces/{namespace}/configmaps

[READ] OpenAPI ai-ml-backend: GET /providers

[READ] OpenAPI: GET /models

[READ] OpenAPI: GET /models/{model_id}

[READ] OpenAPI: GET /endpoints

[READ] OpenAPI: GET /endpoints/{endpoint_id}

[READ] OpenAPI: GET /ai/v1/datasets → buckets path under /ai/v1 base as datasets

[READ] OpenAPI: GET /knowledge-bases

[READ] OpenAPI: GET /ai/v1/buckets/{region} (called as buckets/{region} on /ai/v1).

[WRITE] Ingest logs via POST /logging/v1/entries/write (Fluent Bit ArvanCloud CloudLogs plugin). Body: { logs: [{ logType, timestamp?, severity?, resource?, payload }] }. Auth: Apikey header. Not a full CloudLogs management API.

[READ] S3 ListBuckets via official AWS-compatible SDK pattern (FA developer-tools/sdk/object-storage/list-bucket).

[WRITE] S3 CreateBucket. Official API Usage curl + SDK create-bucket docs. ACL may be private|public-read per SDK sample.

[READ] S3 HeadBucket (FA SDK head-bucket).

[DESTRUCTIVE] S3 DeleteBucket (FA SDK delete-bucket). Bucket must be empty per product docs.

[READ] S3 ListObjectsV2. Official API Usage listObjects sample + SDK object-list.

[READ] S3 HeadObject (FA SDK head-object).

[READ] S3 GetObject for text-ish content. Caps at max_bytes (default 256KiB) to avoid dumping large binaries into the agent context. Official API Usage getObject.

[WRITE] S3 PutObject with string body (FA SDK upload-object). For binary uploads use other clients; this tool is text-oriented for agent safety.

[DESTRUCTIVE] S3 DeleteObject (FA SDK delete-object). Requires exact bucket+key.

[READ] OpenAPI storage/1.0.0 + FA metrics: GET https://storage.arvanapis.ir/v1/buckets/{bucketName}/metrics

[READ] OpenAPI Object Storage API 1.0.0: GET /v1/buckets (storage.arvanapis.ir) — optional status=all|shared|owned, page, perPage. Uses Machine User key (not S3 HMAC).

[READ] OpenAPI: GET /v1/reports/storage on storage.arvanapis.ir

[OPENAPI] Call any path from CDN OpenAPI 4.181.3 on napi.../cdn/4.0. Prefer named CDN tools when available. Allowlist: 238 ops from cdn-4.0.yml (ArvanCloud CDN Services 4.181.3). Rejects unknown paths — does not invent APIs.

[OPENAPI] Call storage.arvanapis.ir management API (OpenAPI storage/1.0.0). Paths are /v1/...; base already includes /v1 so /v1 is stripped. Allowlist: 58 ops from storage-1.0.0.yaml (Object Storage API 1.0.0). Rejects unknown paths — does not invent APIs.

[OPENAPI] Call napi.../ecc/v1 paths from iaas-1.0.json (servers, networks, float-ips, databases, …). Use concrete paths e.g. /regions/ir-thr-c2/servers. Allowlist: 136 ops from iaas-1.0.json (Arvancloud IaaS API 1.0.0). Rejects unknown paths — does not invent APIs.

[OPENAPI] Call ecc.{region}.arvanapis.ir/v3 paths from iaas-3.0.0.yaml (servers, volumes, firewalls, networks, …). Allowlist: 45 ops from iaas-3.0.0.yaml (Arvancloud IaaS API Documentation v3.0.1). Rejects unknown paths — does not invent APIs.

[OPENAPI] Full Arvan VOD 2.0 surface (channels, videos, files, reports, …). Allowlist: 54 ops from vod-2.0.json (Arvan VOD 2.0). Rejects unknown paths — does not invent APIs.

[OPENAPI] Full Arvan LIVE 2.0 surface (streams, watermarks, reports, metrics). Allowlist: 36 ops from live-2.0.json (Arvan LIVE 2.0). Rejects unknown paths — does not invent APIs.

[OPENAPI] Full VADS 2.0 surface (channels, campaigns, ads, transactions). Allowlist: 29 ops from vads-2.0.json (ArvanCloud Video Advertising Service 2.0). Rejects unknown paths — does not invent APIs.

[OPENAPI] Full Edge Computing 1.8.1 surface on edge-computing/v1. Allowlist: 25 ops from ec-1.0.yaml (Edge Computing 1.8.1). Rejects unknown paths — does not invent APIs.

[OPENAPI] Full Arvan CaaS 1.25 (Kubernetes-style) on caas/v2/zones/{zone}. Pass concrete path e.g. /api/v1/namespaces/my-ns/pods. Allowlist: 299 ops from paas-1.25.json (Arvan CaaS 1.25). Rejects unknown paths — does not invent APIs.

[OPENAPI] Full ai-ml-backend 1.0 on /ai/v1. Paths may be /endpoints or /ai/v1/datasets — /ai/v1 prefix is stripped when present. Allowlist: 43 ops from aiaas-1.0.json (ai-ml-backend 1.0). Rejects unknown paths — does not invent APIs.