> ## Documentation Index
> Fetch the complete documentation index at: https://vastai-80aa3a82-auto-openapi-update-8483c1e9.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Authorize Cloud Service

> Links a cloud storage provider (Google Drive, S3, Backblaze B2, Dropbox, or gated Hugging Face Storage Buckets) to the authenticated user's account using OAuth or credentials.



## OpenAPI

````yaml /api-reference/openapi.yaml post /api/v0/users/cloud/
openapi: 3.1.0
info:
  title: Vast.ai API
  description: >-
    Vast.ai REST API for managing GPU cloud instances, machine operations, and
    AI/ML workflows.


    ## AI Agent Quick-Start


    Install the CLI skill for your agent (Claude Code, Cursor, Windsurf, etc.):
      npx skills add vast-ai/vast-cli

    CLI reference:
    https://raw.githubusercontent.com/vast-ai/vast-cli/master/vastai/SKILL.md

    SDK reference:
    https://raw.githubusercontent.com/vast-ai/vast-cli/master/vastai_sdk/SKILL.md


    ## Auth

    All endpoints require `Authorization: Bearer $VAST_API_KEY`.

    Get your key at: https://cloud.vast.ai/manage-keys/


    ## Key Quirks

    - `gpu_ram` in CLI = GB; in REST API = MB (CLI auto-converts)

    - SSH keys must be registered BEFORE creating an instance (VM: no recovery;
    Docker: can add post-create)

    - `onstart` field is limited to 4048 characters -- gzip+base64 for longer
    scripts

    - `POST /api/v0/asks/{id}/` (create instance) returns `new_contract` as the
    instance ID, not `id`

    - Poll trap: if `actual_status` becomes `exited`, `unknown`, or `offline` it
    will never reach `running` -- destroy and retry
  version: 1.0.0
  contact:
    name: Vast.ai Support
    url: https://discord.gg/vast
servers:
  - url: https://console.vast.ai
    description: Production server
security:
  - BearerAuth: []
paths:
  /api/v0/users/cloud/:
    post:
      tags:
        - Accounts
      summary: Authorize Cloud Service
      description: >-
        Links a cloud storage provider (Google Drive, S3, Backblaze B2, Dropbox,
        or gated Hugging Face Storage Buckets) to the authenticated user's
        account using OAuth or credentials.
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                code:
                  type: string
                  description: >-
                    OAuth authorization code (required for Google Drive and
                    Dropbox providers).
                provider:
                  type: string
                  description: Cloud storage provider to connect.
                  example: s3
                  enum:
                    - drive
                    - s3
                    - b2
                    - dropbox
                    - hf
                user_given_name:
                  type: string
                  description: >-
                    User-supplied name for this connection (required for all
                    providers except Dropbox, which uses the name from the OAuth
                    flow).
                secret_access_key:
                  type: string
                  description: Secret Access Key (required for S3 and HF).
                access_key:
                  type: string
                  description: >-
                    Access Key ID (required for S3 and HF; HF keys must begin
                    with HFAK).
                namespace:
                  type: string
                  description: >-
                    Hugging Face user or organization namespace as one safe URL
                    path segment (required for HF).
                application_key:
                  type: string
                  description: Backblaze Application Key secret (required for B2 provider).
                key_id:
                  type: string
                  description: Backblaze Application Key ID (required for B2 provider).
                state:
                  type: string
                  description: >-
                    OAuth state parameter returned from Dropbox redirect
                    (required for Dropbox provider).
      responses:
        '200':
          description: 'Success (Dropbox): {"success": true, "msg": "Dropbox Authenticated"}'
          content:
            application/json:
              schema:
                type: object
                properties:
                  success:
                    type: boolean
                    description: Always true
                  msg:
                    type: string
                    description: Confirmation message (e.g. "Dropbox Authenticated")
        '400':
          description: >-
            Bad request: missing or invalid provider fields, disabled Hugging
            Face cloud sync, invalid HFAK credentials or namespace, or invalid
            OAuth state
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - BearerAuth: []
components:
  schemas:
    Error:
      type: object
      properties:
        error:
          type: string
        msg:
          type: string
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: API key must be provided in the Authorization header

````