---
title: "Create a private network (idempotent per name)"
method: POST
path: "/preview/networks"
tags: ["networks"]
---

# Create a private network (idempotent per name)

`POST /preview/networks`

## Request

- Base URL: `https://autoresearch.sfcompute.com`
- URL: `https://autoresearch.sfcompute.com/preview/networks`
- Auth: HTTP bearer

Create a private network: a workspace-scoped mesh that nodes join (attach_network, or create_node's `network` parameter) to reach each other directly over stable private addresses. Private by default in every direction: a node that never attaches keeps exactly today's isolation, members-only membership, no cross-network routing, no internet transit, and nothing on the mesh is ever reachable from the public internet (expose_port stays the only public door). INSIDE a network the posture is one trust zone: every port a member listens on is reachable by every other member - joining a network is trusting its members. Idempotent per name: creating an existing name returns it (`created: false`), never a duplicate; omitted name = auto-generated. Each member gets a stable IPv4 (from 100.64/10) and IPv6 (ULA) for the node's whole life - across stop/wake, recreate, and repair - plus a DNS name: from inside a member container, `<node>.givemeanode.internal` (and the short node name, via the search domain) resolves to a peer's stable addresses, and the metadata service's /v1/network returns the full roster in one curl. Outside the containers, peers are reached by the addresses get_node/list_networks show.

## Query parameters

- `workspace` string

## Request body

- object
  - `name` string, nullable: Network name (the node-name grammar: lowercase letters, digits, '-'; 1-63 chars), unique in your workspace. Omitted = auto-generated. Creating an existing name returns it (idempotent per name).

## Response `200`

The capability's JSON result.

- Result: The capability's result: the same object the MCP tool returns as structuredContent. Resources carry an `object` type discriminator and an immutable id; money is integer micro-dollars in `*_usd_micros` fields.
  - `object` string: The resource type, when the result is one resource.

## Other responses

- `400`: Malformed request: bad JSON, a parameter that does not parse, or a value outside its range. Code `invalid`.
- `401`: No bearer token, or one this API cannot verify. Code `unauthenticated`.
- `403`: Authenticated, but the token's scopes or the account's role do not reach this operation. The message names the scope word to request. Code `forbidden`.
- `404`: No such route. Code `not_found`; the body names the OpenAPI document.
- `422`: A well-formed request the platform declined: no such node, a cap reached, a state that forbids the move. The message says which, and what to do instead. Code `refused`.
- `429`: Over this door's per-customer budget. Wait `Retry-After` seconds. Code `rate_limited`.
- `500`: Our fault. Retry; if it persists, quote the request-id. Code `internal`.

---

[API](https://skmtc.dev/givemeanode/apis/autoresearch-customer-api.md) · [All operations](https://skmtc.dev/givemeanode/apis/autoresearch-customer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/givemeanode/apis/autoresearch-customer-api/revisions/f88dcb70ac6c?raw)