# Origin Cloud > Virtual machines, block storage and private networks in European data centers, with prices you can read before you register. Virtual machines, block storage and private networks in European data centers, with prices you can read before you register. These documents describe the template. Public documentation contains no account or organization data. Authenticated tools apply the same organization permissions as the app. ## Public pages - [Origin Cloud docs](https://origin.its-live.dev/docs): The seven Origin Cloud guides, from Platform to Pricing. - [Overview](https://origin.its-live.dev/index.md): Services, published rates and how to register, from the home page. - [Privacy policy](https://origin.its-live.dev/privacy.md): The template's privacy text and replacement notice. - [Terms of service](https://origin.its-live.dev/terms.md): The template's terms and replacement notice. - [Full documentation](https://origin.its-live.dev/llms-full.txt): Public pages, demo content and the agent connection guide. ## Origin Cloud docs The documentation is available in English only. UI language does not translate these documents. - [Create an image](https://origin.its-live.dev/docs/compute/images/create.md): Turn an instance's root disk into your own image - clear its machine-id, snapshot and protect the volume, create the image - and update or delete it later. - [Image families](https://origin.its-live.dev/docs/compute/images/image-families.md): How an image family resolves to its current platform-provided image, what its metadata tells you about upstream support, and what happens when one is withdrawn. - [Images](https://origin.its-live.dev/docs/compute/images.md): An image is what an instance boots from. Learn the difference between platform-provided and your own images, and what each image field means. - [What is Origin Cloud Compute?](https://origin.its-live.dev/docs/compute.md): Compute runs virtual machines on Origin Cloud. Learn how instances, images, instance types and key pairs fit together and how to reach them. - [Attach and detach volumes](https://origin.its-live.dev/docs/compute/instance-storage/attach-detach.md): Attach an available volume to a running or stopped instance, choose its guest device name, and detach it again to use elsewhere. - [Instance storage](https://origin.its-live.dev/docs/compute/instance-storage.md): How an instance's durable root disk is created and sized at launch, and how extra volumes attach to a running or stopped instance. - [Change an instance's type](https://origin.its-live.dev/docs/compute/instances/change-type.md): Change a stopped instance to a different instance type so it starts again with more or fewer vCPUs and memory, keeping its identity and volumes. - [Guest environment](https://origin.its-live.dev/docs/compute/instances/guest-environment.md): What the platform sets up inside an instance at first boot - the login user and SSH key, time synchronization - and why each image needs its own machine-id. - [Instance health checks](https://origin.its-live.dev/docs/compute/instances/health-checks.md): What each instance health check observes, how results combine into availability, and how the category tells you whether a problem is yours to fix. - [When the machine under an instance fails](https://origin.its-live.dev/docs/compute/instances/host-failure.md): What happens to an instance when its physical machine fails or is taken out of service, what survives, and why restarting it is your decision. - [Instances](https://origin.its-live.dev/docs/compute/instances.md): An instance is a virtual machine on Origin Cloud. Find its lifecycle, types, health checks, failure behavior and the tasks to launch and manage one. - [Instance types](https://origin.its-live.dev/docs/compute/instances/instance-types.md): How instance types set an instance's vCPU and memory, how type names are built, and how to read the live catalog and its available flag. - [Launch an instance](https://origin.its-live.dev/docs/compute/instances/launch.md): Launch a virtual machine with the CLI or the API - choose an image, instance type, key pair, network and root disk - and log in over SSH. - [Instance lifecycle](https://origin.its-live.dev/docs/compute/instances/lifecycle.md): The eight statuses an instance moves through from launch to termination, what changes each one, what you're billed for, and what FAILED means. - [Stop and start an instance](https://origin.its-live.dev/docs/compute/instances/stop-start.md): Stop an instance to release its vCPU and memory while keeping its disks and addresses, and start it again later, possibly on another machine. - [Terminate an instance](https://origin.its-live.dev/docs/compute/instances/terminate.md): Terminate an instance permanently, and learn which of its volumes, network interfaces and addresses are deleted and which stay with you. - [Create a key pair](https://origin.its-live.dev/docs/compute/key-pairs/create.md): Import the public half of an SSH key you already have, or have the platform generate a key pair and save its private key from the one response that carries it. - [Key pairs](https://origin.its-live.dev/docs/compute/key-pairs.md): A key pair is the SSH key you log in to instances with. Learn how the platform uses it at launch and what happens when you delete one. - [origin compute commands](https://origin.its-live.dev/docs/compute/reference/cli.md): Every origin compute command with its flags: instances, instance types, images, image families, key pairs and volume attachments. - [Compute reference](https://origin.its-live.dev/docs/compute/reference.md): Complete reference material for Compute - every origin compute command and its options, and every reason an instance can report in statusReason. - [Status reasons](https://origin.its-live.dev/docs/compute/reference/status-reasons.md): Every text an instance can report in statusReason when it is FAILED or was stopped by the platform, with what each means and what to do next. - [Troubleshoot Compute](https://origin.its-live.dev/docs/compute/troubleshooting.md): Fix common Compute problems - failed instances, refused launches and starts, impaired or unknown health, unsynchronized clocks, SSH failures and broken pod networking. - [Access model](https://origin.its-live.dev/docs/iam/access-model.md): How principals, roles, role assignments and permissions work together, how org-wide and project scopes differ, and how a request is authorized. - [Assign and revoke roles](https://origin.its-live.dev/docs/iam/assign-roles.md): Grant a built-in role to a user or service account org-wide or for one project, and revoke it again at exactly the scope it was granted. - [Audit log](https://origin.its-live.dev/docs/iam/audit-log.md): Which access changes the audit log records, the fields of each entry, who can read it, and how to page through it with the GraphQL API. - [Check access](https://origin.its-live.dev/docs/iam/check-access.md): Look up who you are and which roles you hold, list the platform's permissions, and check whether a principal has a permission on a resource. - [What is Origin Cloud IAM?](https://origin.its-live.dev/docs/iam.md): IAM controls who can do what in your Origin Cloud organization. Learn how principals, roles, role assignments and permissions fit together. - [Manage organization members](https://origin.its-live.dev/docs/iam/manage-members.md): Invite people to your organization by email, list members and pending invites, remove a member's access, and cancel an invite before it applies. - [origin iam commands](https://origin.its-live.dev/docs/iam/reference/cli.md): Every origin iam command with its flags: members, invites, service accounts, role assignments and permission checks. - [IAM reference](https://origin.its-live.dev/docs/iam/reference.md): Where to find every origin iam command and built-in role, and a one-line summary of each IAM query and mutation in the GraphQL API. - [Built-in roles](https://origin.its-live.dev/docs/iam/roles.md): Every built-in IAM role with its ID, URN, what it's for and the exact permissions it grants, including the billing roles that Owner doesn't include. - [Use service accounts](https://origin.its-live.dev/docs/iam/service-accounts.md): Create a service account for CI and scripts, exchange its client ID and secret for an access token, grant it roles, and revoke it. - [Origin Cloud Docs](https://origin.its-live.dev/docs.md): User documentation for Origin Cloud, for anyone calling the GraphQL API or the origin CLI. - [DNS](https://origin.its-live.dev/docs/network/dns.md): Every instance gets an internal hostname that its VPC resolves, and DNS policies decide where other queries go. Learn how names are resolved in a VPC. - [Manage DNS policies](https://origin.its-live.dev/docs/network/dns/manage-policies.md): Create DNS policies, change their upstream servers and relaying, attach a policy to a VPC, change a project's default policy, and delete a policy. - [What is Origin Cloud Network?](https://origin.its-live.dev/docs/network.md): Network gives your instances private VPCs, subnets and network interfaces, controlled internet access, traffic filtering and DNS. Learn how the parts fit. - [Floating IPs](https://origin.its-live.dev/docs/network/internet-access/floating-ips.md): A Floating IP is a public IPv4 address you hold and associate with a network interface. Learn how to use it, when it's released, and how it behaves inside its VPC. - [Internet access](https://origin.its-live.dev/docs/network/internet-access.md): How traffic gets between your instances and the internet - Internet Gateways, route tables, NAT gateways and Floating IPs, and the two paths they form. - [Attach and detach an Internet Gateway](https://origin.its-live.dev/docs/network/internet-access/internet-gateways.md): Attach an Internet Gateway to connect a whole VPC to the internet, check it, and detach it again to make the VPC private. - [Give a private subnet internet access with a NAT gateway](https://origin.its-live.dev/docs/network/internet-access/nat-gateways.md): Create a NAT gateway so instances without a Floating IP can reach the internet over IPv4, route a private subnet through it, and delete it again. - [Route tables](https://origin.its-live.dev/docs/network/internet-access/route-tables.md): How route tables decide where a subnet's internet traffic goes, how the main table differs from tables you create, and how to change routes and associations. - [origin network commands](https://origin.its-live.dev/docs/network/reference/cli.md): Every origin network command with its flags: VPCs, subnets, gateways, route tables, Floating IPs, ACLs, security groups and DNS policies. - [Network reference](https://origin.its-live.dev/docs/network/reference.md): Where to find every origin network CLI command and every GraphQL query and mutation in the network namespace of the API. - [Traffic control](https://origin.its-live.dev/docs/network/traffic-control.md): Security groups filter each instance's traffic and network ACLs filter traffic crossing a subnet's boundary. Learn where each one applies. - [Network ACLs](https://origin.its-live.dev/docs/network/traffic-control/network-acls.md): Network ACLs are stateless, ordered rule lists for a subnet. Learn how rules are evaluated, which traffic they apply to, and how to create and assign one. - [Rule sets are replaced as a whole](https://origin.its-live.dev/docs/network/traffic-control/replace-rule-sets.md): ACL rules, security group rules and DNS upstream servers are replaced as a whole. Learn how each command makes you state the full new state, including an empty one. - [Security groups](https://origin.its-live.dev/docs/network/traffic-control/security-groups.md): Security groups are stateful firewalls on each network interface. Learn how rules and group references work, what the default group allows, and how to change rules. - [Troubleshoot Network](https://origin.its-live.dev/docs/network/troubleshooting.md): Fixes for common Network problems - no internet access, IPv6 errors, refused VPC, subnet and NAT gateway requests, and connections that hang. - [VPC and subnet addressing](https://origin.its-live.dev/docs/network/vpcs/addressing.md): How a VPC's IPv4 and IPv6 ranges are chosen, how large its subnets are, which addresses are reserved, and what happens when address space runs out. - [Create a VPC and subnets](https://origin.its-live.dev/docs/network/vpcs/create.md): Create a VPC with the CLI, add subnets to it, and choose whether instances launched into each subnet get a public IPv4 address automatically. - [Default VPC](https://origin.its-live.dev/docs/network/vpcs/default-vpc.md): The platform creates a default VPC for a project the first time you launch an instance without a subnet. Learn what it contains and how auto-assigned public IPs work. - [Delete a subnet or VPC](https://origin.its-live.dev/docs/network/vpcs/delete.md): Delete a subnet or a whole VPC, clear what blocks the deletion, and learn what is removed with it and what happens to its address ranges. - [VPCs and subnets](https://origin.its-live.dev/docs/network/vpcs.md): A VPC is an isolated network with its own address space, divided into subnets. Learn what a VPC comes with and how instances connect to it. - [Network interfaces](https://origin.its-live.dev/docs/network/vpcs/network-interfaces.md): A network interface holds an instance's private IPv4 and IPv6 addresses in a subnet and carries its security groups. Learn how interfaces are created and removed. - [What is Origin Cloud Observability?](https://origin.its-live.dev/docs/observability.md): Observability lets you query CPU, network, and disk metrics that the platform collects for your instances, volumes, and network interfaces. - [Query metrics](https://origin.its-live.dev/docs/observability/query-metrics.md): Query the CPU, network, or volume metrics of one resource over a time window with the GraphQL API, and choose the period and statistic. - [Observability reference](https://origin.its-live.dev/docs/observability/reference.md): Reference pages for Observability, listing every metric with its unit and meaning, the metrics query arguments, limits, and errors. - [Metrics reference](https://origin.its-live.dev/docs/observability/reference/metrics.md): Every metric Observability provides, with resource type, unit, and meaning, plus the metrics query arguments, response fields, limits, and errors. - [Use the GraphQL API](https://origin.its-live.dev/docs/platform/access/api.md): Call the Origin Cloud GraphQL API with a bearer token, find operations by namespace, read resource URNs, and handle typed enums and errors. - [Use the CLI](https://origin.its-live.dev/docs/platform/access/cli.md): Install the origin CLI, log in through your browser or with a device code, manage your session and profile, and read the CLI's JSON output and exit codes. - [Ways to access Origin Cloud](https://origin.its-live.dev/docs/platform/access.md): Reach Origin Cloud through the console, the origin CLI or the GraphQL API. All three act as a signed-in user or service account with the same permissions. - [Billing access](https://origin.its-live.dev/docs/platform/billing/billing-access.md): Billing is kept apart from the Owner role. Learn which billing roles reach a billing account, who holds one from the start, and what an Owner can do without one. - [Billing](https://origin.its-live.dev/docs/platform/billing.md): Billing accounts hold your billing details and payment method, and every project is charged to one. Learn how billing accounts, payment methods, invoices and spend limits fit together. - [Add a payment method](https://origin.its-live.dev/docs/platform/billing/payment-method.md): Add a card to a billing account on the payment provider's hosted page, confirm it, and check paymentMethodStatus so the account's projects can create billable resources. - [Get started with Origin Cloud](https://origin.its-live.dev/docs/platform/getting-started.md): Register an organization, add a payment method, launch your first instance with the origin CLI, log in to it over SSH, and clean up afterwards. - [What is Origin Cloud?](https://origin.its-live.dev/docs/platform.md): Origin Cloud runs virtual machines, block storage and private networks in European data centers. Learn how organizations, projects and resources fit together. - [Create an organization](https://origin.its-live.dev/docs/platform/organizations/create.md): Register an organization with its billing details in one step, or create it from its name alone and add the billing details to its default billing account later. - [Organizations and projects](https://origin.its-live.dev/docs/platform/organizations.md): An organization is your company's Origin Cloud account and holds your projects, members and billing accounts. Learn how they relate and what you can manage. - [Manage projects](https://origin.its-live.dev/docs/platform/organizations/projects.md): Create, list, rename and delete the projects in your organization, find a project's URN, change the billing account a project is charged to, and delete an organization. - [Organization review status](https://origin.its-live.dev/docs/platform/organizations/review-status.md): A new organization is activated at once or reviewed first, depending on platform capacity. Learn what each status allows, which emails you get, and how to check it. - [Platform CLI commands](https://origin.its-live.dev/docs/platform/reference/cli.md): Every origin id, origin admin and origin config command with its flags: log in, manage organizations and projects, and set CLI profile values. - [Error codes](https://origin.its-live.dev/docs/platform/reference/errors.md): Every error code the Origin Cloud API returns, with what it means, what commonly causes it, and what to do. Branch on the code, never on the message. - [Platform reference](https://origin.its-live.dev/docs/platform/reference.md): Look up the platform CLI commands, every error code the API returns with what to do about it, and the quotas and hard limits that apply to your organization. - [Limits](https://origin.its-live.dev/docs/platform/reference/limits.md): The quotas on what your organization and its projects can hold, how to read current usage against them, how to set project budgets, and the platform's hard limits. - [What is Origin Cloud Pricing?](https://origin.its-live.dev/docs/pricing.md): The public price list gives the current list price of every billable product, in euro, over HTTP without an account or token. - [Read the price list](https://origin.its-live.dev/docs/pricing/read-price-list.md): Fetch the public price list with curl, revalidate it with a conditional request, and turn a price into an hourly or monthly cost. - [Pricing reference](https://origin.its-live.dev/docs/pricing/reference.md): Reference pages for Pricing, covering the public price list endpoint, its response fields, product families, headers, and status codes. - [Price list API](https://origin.its-live.dev/docs/pricing/reference/price-list-api.md): Reference for GET /v1/pricing, the public price list endpoint, with every response field, product family, header, and status code. - [What is Origin Cloud Storage?](https://origin.its-live.dev/docs/storage.md): Storage gives your instances durable block volumes and point-in-time snapshots. Learn the parts, how they relate to images, and how to access them. - [origin storage commands](https://origin.its-live.dev/docs/storage/reference/cli.md): Every origin storage command with its flags: volumes, storage classes, imports and snapshots. - [Storage reference](https://origin.its-live.dev/docs/storage/reference.md): Look up every origin storage CLI command and every GraphQL query and mutation in the pvs namespace for volumes, snapshots, and storage classes. - [Create and protect a snapshot](https://origin.its-live.dev/docs/storage/snapshots/create-and-protect.md): Take a crash-consistent snapshot of an available or attached volume, wait for it to complete, and protect it so it can be used as a clone source. - [Delete a snapshot](https://origin.its-live.dev/docs/storage/snapshots/delete.md): Unprotect a snapshot if needed, delete it, and confirm that it reports DELETED so it no longer blocks deleting its volume. - [Snapshots](https://origin.its-live.dev/docs/storage/snapshots.md): A snapshot is a point-in-time copy of a volume. Learn how snapshots connect volumes to new volumes and images, and find the snapshot tasks. - [Snapshot states](https://origin.its-live.dev/docs/storage/snapshots/snapshot-states.md): The status and protection status values a snapshot reports, what FAILED protection means, and when a snapshot can be used as a clone source. - [Troubleshoot storage](https://origin.its-live.dev/docs/storage/troubleshooting.md): Fix common volume and snapshot problems, from volumes in ERROR and failed resizes to refused deletes, failed imports, and refused requests. - [Create a volume](https://origin.its-live.dev/docs/storage/volumes/create.md): Create an empty volume or a volume from a protected snapshot with the origin CLI or the GraphQL API, and check that it becomes AVAILABLE. - [Delete a volume](https://origin.its-live.dev/docs/storage/volumes/delete.md): Delete a volume you no longer need, after detaching it and deleting its snapshots, and confirm that it reports DELETED and frees its quota. - [Find the instance a volume is attached to](https://origin.its-live.dev/docs/storage/volumes/find-instance.md): Follow an INUSE volume's claimRef to its volume attachment and from there to the instance that holds it, with one CLI command or API query. - [Import a disk image as a volume](https://origin.its-live.dev/docs/storage/volumes/import.md): Create a volume whose initial content is a disk image downloaded from an HTTP(S) URL, size it correctly, and check that the import succeeded. - [Volumes](https://origin.its-live.dev/docs/storage/volumes.md): A volume is a durable block disk for your instances. Learn the key concepts and find the tasks for creating, resizing, and deleting volumes. - [Resize a volume](https://origin.its-live.dev/docs/storage/volumes/resize.md): Grow a volume, including one attached to a running instance, then extend the partition and filesystem inside the guest to use the new space. - [Storage classes](https://origin.its-live.dev/docs/storage/volumes/storage-classes.md): A storage class is a volume's performance tier. Learn which classes exist, which one you can select today, and how to read the catalog. - [Volume states](https://origin.its-live.dev/docs/storage/volumes/volume-states.md): The status and modification status values a volume reports, how asynchronous operations and failures show up in them, and which states are billed. ## Agent connection - [MCP endpoint](https://origin.its-live.dev/api/mcp): OAuth 2.1 authenticated MCP; start with tools/list to discover available tools. - [OAuth protected resource](https://origin.its-live.dev/.well-known/oauth-protected-resource): Resource metadata for MCP authorization. - [OAuth authorization server](https://origin.its-live.dev/.well-known/oauth-authorization-server): Authorization and token endpoints. - [API reference](https://origin.its-live.dev/api/rpc/api-reference): Session-authenticated oRPC API documentation. - [OpenAPI specification](https://origin.its-live.dev/api/rpc/api-reference/spec.json): Session-authenticated API schema. - [Sitemap](https://origin.its-live.dev/sitemap.xml): Public URLs only. Markdown pages support ?lang=en, ?lang=de and ?lang=fr. This index and the full document are in English.