VPC API - CoreWeave Docs

With an access token, you can interact with the VPC API using curl or any other HTTP client. The API lets you create, list, update, and delete VPCs.

The API server is https://api.coreweave.com.
Replace {API_ACCESS_TOKEN} in the following examples with your CoreWeave API access token.
For information about required permissions, see IAM Access Policies.

Endpoints

Operation	Method	Endpoint	Description
List VPCs	`GET`	`/v1beta1/networking/vpcs`	List all VPCs.
Create VPC	`POST`	`/v1beta1/networking/vpcs`	Create a VPC.
Get VPC	`GET`	`/v1beta1/networking/vpcs/{id}`	Get VPC information by ID.
Delete VPC	`DELETE`	`/v1beta1/networking/vpcs/{id}`	Delete a VPC by ID.
Update VPC	`PATCH`	`/v1beta1/networking/vpcs/{id}`	Update a VPC by ID.

gRPC schema and SDKs (Buf)

The VPC API is also exposed as a gRPC service defined in Protobuf. Use the same API host, https://api.coreweave.com, with Bearer token authentication (Authorization: Bearer {API_ACCESS_TOKEN}).

Service: VPCService (package coreweave.networking.v1beta1).
Public BSR module: buf.build/coreweave/networking (module name buf.build/coreweave/networking).
TypeScript SDK namespace: @buf/coreweave_networking.bufbuild_es.

The gRPC methods align with the HTTP resource lifecycle (for example, ListVPCs corresponds to listing VPCs).

OpenAPI specification

The complete OpenAPI 3.0 specification for the VPC API is embedded below. Expand the code block by clicking “See all” at the bottom, or use the download and copy buttons in the title bar.

VPC OpenAPI

openapi: 3.0.3
info:
  title: CoreWeave VPC API
  version: 0.0.1
  description: The VPC API lets you create, list, update, and delete CoreWeave Virtual Private Clouds
    (VPCs).
servers:
- url: https://api.coreweave.com
  description: CoreWeave production API.
paths:
  /v1beta1/networking/vpcs:
    get:
      operationId: VPCService_ListVPCs
      summary: List VPCs
      description: Returns every VPC across every Availability Zone that the caller can read.
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListVPCsResponse'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
      tags:
      - VPCService
    post:
      operationId: VPCService_CreateVPC
      summary: Create VPC
      description: Creates a new VPC in the specified Availability Zone.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateVPCRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateVPCResponse'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
      tags:
      - VPCService
  /v1beta1/networking/vpcs/{id}:
    get:
      operationId: VPCService_GetVPC
      summary: Get VPC
      description: Retrieves a single VPC by ID.
      parameters:
      - name: id
        in: path
        description: The unique identifier for the VPC.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetVPCResponse'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
      tags:
      - VPCService
    delete:
      operationId: VPCService_DeleteVPC
      summary: Delete VPC
      description: Deletes a VPC by ID. Returns the deleted VPC object on success.
      parameters:
      - name: id
        in: path
        description: The unique identifier for the VPC.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeleteVPCResponse'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
      tags:
      - VPCService
    patch:
      operationId: VPCService_UpdateVPC
      summary: Update VPC
      description: Updates a VPC by ID. Use `updateMask` to target specific fields.
      parameters:
      - name: id
        in: path
        description: The unique identifier for the VPC.
        required: true
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateVPCRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UpdateVPCResponse'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
      tags:
      - VPCService
components:
  schemas:
    CreateVPCRequest:
      type: object
      properties:
        name:
          description: The name of the VPC. Must not be longer than 30 characters.
          type: string
        zone:
          description: The [Availability Zone](https://docs.coreweave.com/platform/regions/about-regions-and-azs#complete-region-list)
            in which the VPC is located.
          type: string
        vpcPrefixes:
          description: An array of additional prefixes associated with the VPC. Must be given in CIDR
            notation. For example, CKS clusters use these prefixes for Pod and service CIDR ranges.
          type: array
          items:
            $ref: '#/components/schemas/Prefix'
        hostPrefix:
          description: 'A single IPv4 CIDR range used to allocate host addresses when

            booting compute into a VPC. Must meet the Availability Zone''s

            minimum mask size (typically `/18` or larger). If unspecified,

            a Zone-specific default is applied by the server. Immutable

            once set.


            <Note>

            **Deprecated:** use `hostPrefixes` instead. Supports only one

            IPv4 prefix. Mutually exclusive with `hostPrefixes`; if neither

            field is set, per-Zone defaults apply.

            </Note>'
          type: string
          deprecated: true
        hostPrefixes:
          description: The Host Prefixes of the VPC. If configured, each IPv4 prefix must meet the Availability
            Zone's minimum mask size (typically `/18` or larger, for example `/17` or `/16`), and each
            IPv6 prefix must be `/51` or larger (for example, `/50` or `/49`). If not explicitly configured,
            a Zone-specific default is applied by the server. This field is mutually exclusive with `hostPrefix`
            and is immutable once set.
          type: array
          items:
            $ref: '#/components/schemas/HostPrefix'
        ingress:
          description: The ingress configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/Ingress'
        egress:
          description: The egress configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/Egress'
        dhcp:
          description: The DHCP configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/DHCP'
      required:
      - name
      - zone
    CreateVPCResponse:
      type: object
      properties:
        vpc:
          description: The VPC.
          allOf:
          - $ref: '#/components/schemas/VPC'
          readOnly: true
    DHCP:
      description: DHCP configuration for the VPC.
      type: object
      properties:
        dns:
          description: The DNS configuration for DHCP within the VPC.
          allOf:
          - $ref: '#/components/schemas/DHCP_DNS'
    DHCP_DNS:
      description: Settings affecting DNS for DHCP within the VPC
      type: object
      properties:
        servers:
          description: An array of user-provided DNS servers.
          type: array
          items:
            type: string
    DeleteVPCResponse:
      type: object
      properties:
        vpc:
          description: The VPC.
          allOf:
          - $ref: '#/components/schemas/VPC'
          readOnly: true
    Egress:
      type: object
      properties:
        disablePublicAccess:
          description: Disables egress from the Internet at the VPC level when set to `true`. Defaults
            to `false`, so egress from the Internet is enabled unless you change this field.
          type: boolean
    GetVPCResponse:
      type: object
      properties:
        vpc:
          description: The VPC.
          allOf:
          - $ref: '#/components/schemas/VPC'
          readOnly: true
    GoogleProtobufAny:
      description: Contains an arbitrary serialized message along with a @type that describes the type
        of the serialized message.
      type: object
      properties:
        '@type':
          description: The type of the serialized message.
          type: string
      additionalProperties: true
    HostPrefix:
      description: A Host Prefix describes an IP range from which host-specific prefixes are allocated
        for Nodes in a VPC. Host prefixes of any type cannot be changed after the VPC is created. The
        `type` field's values are `PRIMARY`, `ROUTED`, and `ATTACHED`. See the Create VPC operation for
        the full taxonomy.
      type: object
      properties:
        name:
          description: The user-specified name of the Host Prefix.
          type: string
        type:
          description: The host prefix's type, which controls network connectivity from the prefix to
            the host. Must be uppercase. Values are `PRIMARY`, `ROUTED`, and `ATTACHED`; omit the field
            rather than sending the zero value `UNSPECIFIED`. See the Create VPC operation for the full
            taxonomy.
          type: string
          format: enum
          enum:
          - UNSPECIFIED
          - PRIMARY
          - ROUTED
          - ATTACHED
        prefixes:
          description: The VPC-wide aggregates from which host-specific prefixes are allocated. May be
            IPv4 or IPv6.
          type: array
          items:
            type: string
        ipam:
          description: The IP address management (IPAM) configuration for a secondary host prefix. Must
            not be set for a `PRIMARY` prefix.
          allOf:
          - $ref: '#/components/schemas/IPAddressManagementPolicy'
      required:
      - name
      - type
      - prefixes
    IPAddressManagementPolicy:
      description: IP address management (IPAM) configuration for a secondary host prefix. The `gatewayAddressPolicy`
        field's values are `EUI64`, `FIRST_IP`, and `LAST_IP`. See the Create VPC operation for the full
        taxonomy.
      type: object
      properties:
        prefixLength:
          description: The desired length for each Node's allocation from the VPC-wide aggregate prefix.
          type: integer
          format: int32
        gatewayAddressPolicy:
          description: Describes which IP address from the prefix is allocated to the network gateway.
            Optional, and only valid when the parent Host Prefix's `type` is `ATTACHED`. Must be uppercase.
            Values are `EUI64`, `FIRST_IP`, and `LAST_IP`; omit the field rather than sending the zero
            value `UNSPECIFIED`. See the Create VPC operation for the full taxonomy.
          type: string
          format: enum
          enum:
          - UNSPECIFIED
          - EUI64
          - FIRST_IP
          - LAST_IP
      required:
      - prefixLength
    Ingress:
      type: object
      properties:
        disablePublicServices:
          description: Disables ingress from the Internet at the VPC level when set to `true`. Defaults
            to `false`, so ingress from the Internet is enabled unless you change this field.
          type: boolean
    ListVPCsResponse:
      type: object
      properties:
        items:
          description: The list of VPCs.
          type: array
          items:
            $ref: '#/components/schemas/VPC'
          readOnly: true
    Prefix:
      description: 'An IP prefix associated with a VPC. The `status` field reflects the lifecycle: `STATUS_PENDING_ALLOCATION`
        → `STATUS_AVAILABLE` → `STATUS_ALLOCATED`.'
      type: object
      properties:
        name:
          description: The user-specified name of the VPC Prefix. Must not be longer than 30 characters.
          type: string
        value:
          description: The value of the prefix in IPv4 or IPv6 CIDR notation.
          type: string
        createdAt:
          description: The time the prefix was created.
          type: string
          format: date-time
          readOnly: true
        updatedAt:
          description: The time the prefix was last updated.
          type: string
          format: date-time
          readOnly: true
        status:
          description: The current status of the prefix. The lifecycle is `STATUS_PENDING_ALLOCATION`
            → `STATUS_AVAILABLE` → `STATUS_ALLOCATED`. `STATUS_UNSPECIFIED` means the status has not been
            set.
          type: string
          format: enum
          enum:
          - STATUS_UNSPECIFIED
          - STATUS_AVAILABLE
          - STATUS_PENDING_ALLOCATION
          - STATUS_ALLOCATED
          readOnly: true
      required:
      - name
      - value
    Status:
      description: Standard error response. `code` is a [`google.rpc.Code`](https://cloud.google.com/apis/design/errors#error_codes);
        `message` is human-readable English; `details` carries machine-readable error details when present.
      type: object
      properties:
        code:
          description: The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code].
          type: integer
          format: int32
        message:
          description: A developer-facing error message, which should be in English. Any user-facing error
            message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details]
            field, or localized by the client.
          type: string
        details:
          description: A list of messages that carry the error details.  There is a common set of message
            types for APIs to use.
          type: array
          items:
            $ref: '#/components/schemas/GoogleProtobufAny'
    UpdateVPCRequest:
      type: object
      properties:
        updateMask:
          description: A field mask specifying which fields to update. Valid paths are `vpcPrefixes`,
            `ingress.disablePublicServices`, `egress.disablePublicAccess`, and `dhcp.dns.servers`. Any
            other path (including top-level paths like `ingress` or `dhcp`) is silently ignored. When
            omitted, all fields in the request body are updated. See [Google AIP-157](https://google.aip.dev/157).
          type: string
          format: field-mask
        id:
          description: The unique identifier for the VPC.
          type: string
        vpcPrefixes:
          description: An array of additional prefixes associated with the VPC. Must be given in CIDR
            notation.
          type: array
          items:
            $ref: '#/components/schemas/Prefix'
        ingress:
          description: The ingress configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/Ingress'
        egress:
          description: The egress configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/Egress'
        dhcp:
          description: The DHCP configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/DHCP'
      required:
      - id
    UpdateVPCResponse:
      type: object
      properties:
        vpc:
          description: The VPC.
          allOf:
          - $ref: '#/components/schemas/VPC'
          readOnly: true
    VPC:
      description: 'A CoreWeave Virtual Private Cloud. The `status` field reflects the lifecycle: `STATUS_CREATING`
        → `STATUS_READY`, with `STATUS_UPDATING` during in-place edits and `STATUS_DELETING` during teardown.'
      type: object
      properties:
        id:
          description: The unique identifier for the VPC.
          type: string
          readOnly: true
        name:
          description: The name of the VPC. Must not be longer than 30 characters.
          type: string
        status:
          description: The current status of the VPC. The lifecycle is `STATUS_CREATING` → `STATUS_READY`,
            with `STATUS_UPDATING` during in-place edits and `STATUS_DELETING` during teardown. `STATUS_UNSPECIFIED`
            means the status has not been set.
          type: string
          format: enum
          enum:
          - STATUS_UNSPECIFIED
          - STATUS_CREATING
          - STATUS_UPDATING
          - STATUS_READY
          - STATUS_DELETING
          readOnly: true
        zone:
          description: The [Availability Zone](https://docs.coreweave.com/platform/regions/about-regions-and-azs#complete-region-list)
            in which the VPC is located.
          type: string
        vpcPrefixes:
          description: An array of the VPC prefixes. Must be given in CIDR notation.
          type: array
          items:
            $ref: '#/components/schemas/Prefix'
        createdAt:
          description: The time the VPC was created.
          type: string
          format: date-time
          readOnly: true
        updatedAt:
          description: The time the VPC was last updated.
          type: string
          format: date-time
          readOnly: true
        hostPrefix:
          description: 'A single IPv4 CIDR range from which host addresses are allocated

            for compute in this VPC. Must meet the Availability Zone''s

            minimum mask size (typically `/18` or larger). Immutable once

            set.


            <Note>

            **Deprecated:** use `hostPrefixes` instead. Present only on VPCs

            created with this legacy field; mutually exclusive with

            `hostPrefixes`.

            </Note>'
          type: string
          deprecated: true
        hostPrefixes:
          description: The Host Prefixes of the VPC. If configured, each IPv4 prefix must meet the Availability
            Zone's minimum mask size (typically `/18` or larger), and each IPv6 prefix must be `/51` or
            larger. Immutable once set.
          type: array
          items:
            $ref: '#/components/schemas/HostPrefix'
        ingress:
          description: The ingress configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/Ingress'
        egress:
          description: The egress configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/Egress'
        dhcp:
          description: The DHCP configuration of the VPC.
          allOf:
          - $ref: '#/components/schemas/DHCP'
      required:
      - name
      - zone
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: CoreWeave API access token sent as a bearer token.
      x-default: Bearer {API_ACCESS_TOKEN}
tags:
- name: VPCService
  description: Endpoints for creating, listing, updating, and deleting CoreWeave VPCs.
  x-group: VPCService
security:
- bearerAuth: []

​Endpoints

​gRPC schema and SDKs (Buf)

​OpenAPI specification

Endpoints

gRPC schema and SDKs (Buf)

OpenAPI specification