For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Batch create multiple Instances for Tenant with NVLink domain-aware machine allocation.
This endpoint creates multiple instances in a single atomic transaction. All instances share the same configuration (interfaces, OS, SSH keys, etc.) but are assigned different machines.
When `topologyOptimized` is true (default), all instances must be allocated on machines within the same NVLink domain. If insufficient machines are available in a single NVLink domain, the request will fail.
When `topologyOptimized` is false, instances can be spread across different NVLink domains.
Instance names are automatically generated using the `namePrefix` with a random 6-character suffix (e.g., "worker" becomes "worker-abc123", "worker-def456").
Org must have a Tenant entity. User must have authorization role with `TENANT_ADMIN` suffix.
Authentication
AuthorizationBearer
```
export JWT_BEARER_TOKEN="<jwt-bearer-token>"
# Example org name: "acme-inc
export ORG_NAME=<org-name>
# Use the JWT bearer token in your API request auth header:
curl -v -X GET -H "Content-Type: application/json" -H "Authorization: Bearer $JWT_BEARER_TOKEN" https://nico-rest-api.nico.svc.cluster.local/v2/org/$ORG_NAME/nico/user/current
```
Path parameters
orgstringRequired
Name of the Org
Request
This endpoint expects an object.
namePrefixstringRequired2-240 characters
Prefix for instance names. Instances will be named with this prefix followed by a random 6-character suffix (e.g., “worker” becomes “worker-abc123”)
countintegerRequired2-18
Number of instances to create in this batch. Minimum 2, maximum 18 (limited by topology domain size)
tenantIdstringRequiredformat: "uuid"
ID of the Tenant creating the Instances
instanceTypeIdstringRequiredformat: "uuid"
ID of the Instance Type to use for all Instances in the batch
vpcIdstringRequiredformat: "uuid"
ID of the VPC the Instances should belong to
descriptionstring or nullOptional<=1024 characters
Description applied to all instances in the batch, optional
secondaryVpcIdslist of stringsOptional
IDs of additional VPCs the Instances should attach to through non-primary interfaces. This field may only be specified when every entry in interfaces uses vpcPrefixId. IDs must be unique, must be valid UUIDs, and must not include the primary vpcId.
userDatastring or nullOptional
User data applied to all instances. Can only be specified if allowOverride is set to true in Operating System
operatingSystemIdstring or nullOptionalformat: "uuid"
Must be specified if iPXE Script field is empty
networkSecurityGroupIdstring or nullOptionalformat: "uuid"
ID of a Network Security Group to attach to all instances
ipxeScriptstring or nullOptional
Override iPXE script specified in OS, must be specified if Operating System is not specified
alwaysBootWithCustomIpxebooleanOptional
When set to true, the iPXE script specified by OS or overridden here will always be run when rebooting the Instances. OS must be of iPXE type.
phoneHomeEnabledbooleanOptional
When set to true, the Instances will be enabled with the Phone Home service.
labelsmap from strings to stringsOptional
Key-value objects to be applied to all instances (shared across all instances)
interfaceslist of objectsOptional
Interface configuration shared across all instances. At least one interface must be specified unless autoNetwork is true. Either Subnet or VPC Prefix interfaces allowed, only one of the Subnets or VPC Prefixes can be attached over Physical interface. Interface ipAddress is not supported for batch instance creation requests. Mutually exclusive with autoNetwork: when autoNetwork is true this list MUST be empty.
autoNetworkbooleanOptional
When true, asks NICo to auto-resolve each Instance’s network interfaces from the host’s underlay (HostInband) network segments. Intended for instances on zero-DPU hosts (or hosts with their DPU in NIC mode). When true: (1) the target VPC’s networkVirtualizationType MUST be FLAT, (2) interfaces MUST be empty or omitted, and (3) secondaryVpcIds MUST be empty or omitted.
infinibandInterfaceslist of objectsOptional
InfiniBand interface configuration shared across all instances
dpuExtensionServiceDeploymentslist of objectsOptional
DPU Extension Services to deploy to all instances in the batch
nvLinkInterfaceslist of objectsOptional
NVLink interface configuration shared across all instances. A subset of GPUs may be specified. Each item references one GPU index (deviceInstance) and one NVLink Logical Partition. Different interfaces may reference different NVLink Logical Partitions.
sshKeyGroupIdslist of stringsOptional
SSH Key Group IDs that will provide Serial over LAN access to all instances
topologyOptimizedbooleanOptionalDefaults to true
When true (default), all instances must be allocated on machines within the same NVLink domain. When false, instances can be spread across different NVLink domains.
Response
Created
idstringRead-onlyformat: "uuid"
Unique identifier for the Instance
namestring2-256 characters
Name for the Instance
descriptionstring or null
Description for the Instance
tenantIdstringformat: "uuid"
ID of the Tenant the Instance belongs to
infrastructureProviderIdstringformat: "uuid"
ID of the Infrastructure Provider that owns the Site where the Instance is located
siteIdstringformat: "uuid"
ID of the Site where the Instance is located
instanceTypeIdstring or nullformat: "uuid"
ID of the Instance Type
vpcIdstringformat: "uuid"
ID of the VPC
secondaryVpcIdslist of strings
IDs of VPCs attached to the Instance through non-primary interfaces
machineIdstring or null
ID of the Machine
operatingSystemIdstring or nullformat: "uuid"
ID of the Operating System
networkSecurityGroupIdstring or null
ID of the attached Network Security Group, if any
networkSecurityGroupPropagationDetailsobject
Propagation details for the attached Network Security Group
networkSecurityGroupInheritedboolean
Indicates if the Network Security Group is inherited from VPC
controllerInstanceIdstring or nullformat: "uuid"
ID of the Instance in Site Controller
ipxeScriptstring or null
Attribute which is inherited from Operating System
alwaysBootWithCustomIpxeboolean
Indicates whether the Instance should always execute custom iPXE script when rebooting
phoneHomeEnabledboolean
Indicates whether the Phone Home service should be enabled or disabled for the Instance
userDatastring or null
UserData is inherited from Operating System or specified by user if allowed
labelsmap from strings to strings
User-specified Instance labels
isUpdatePendingboolean
Indicates whether an update is available for the Instance. Updates can be applied on reboot
serialConsoleUrlstring or null
Serial Console URL for the Instance. Format: ssh://<id>@siteSerialConsoleHostname
autoNetworkboolean
True when this Instance uses NICo auto-resolved networking from the host’s underlay (HostInband) network segments. When true, the caller’s request interfaces list was empty, this interfaces field remains empty on readback, and the resolved per-interface details surface under status.network.interfaces.
interfaceslist of objects
Interfaces are list of the subnet associated with the Instance
infinibandInterfaceslist of objects
InfiniBandInterfaces are list of the InfiniBandInterface associated with the Instance
nvLinkInterfaceslist of objects
NVLinkInterfaces are list of the NVLinkInterface associated with the Instance
dpuExtensionServiceDeploymentslist of objects
DPU Extension Services deployed on DPUs of this Instance
sshKeyGroupIdslist of strings
IDs of SSH Key Groups associated with this Instance
sshKeyGroupslist of objects
IDs of SSH Key Groups associated with this Instance
tpmEkCertificatestring or null
base64 encoded TPM EK Certificate associated with this Instance
statusenum
Status of the Instance
statusHistorylist of objects
Chronological status history for the Instance
deprecationslist of objects
Deprecation notices for fields returned by this resource
createddatetimeRead-only
Date/time when the Instance was created
updateddatetimeRead-only
Date/time when the Instance was last updated
Errors
400
Bad Request Error
403
Forbidden Error
Batch create multiple Instances for Tenant with NVLink domain-aware machine allocation.
This endpoint creates multiple instances in a single atomic transaction. All instances share the same configuration (interfaces, OS, SSH keys, etc.) but are assigned different machines.
When topologyOptimized is true (default), all instances must be allocated on machines within the same NVLink domain. If insufficient machines are available in a single NVLink domain, the request will fail.
When topologyOptimized is false, instances can be spread across different NVLink domains.
Instance names are automatically generated using the namePrefix with a random 6-character suffix (e.g., “worker” becomes “worker-abc123”, “worker-def456”).
Org must have a Tenant entity. User must have authorization role with TENANT_ADMIN suffix.
export JWT_BEARER_TOKEN="<jwt-bearer-token>"
# Example org name: "acme-inc
export ORG_NAME=<org-name>
# Use the JWT bearer token in your API request auth header: