ContainerInstanceManagementClient

Name: ContainerInstanceManagementClient API
Brand: ContainerInstanceManagementClient
Availability: InStock

★ Only Publicly Available OpenAPI DocumentCloud InfrastructureContainer Orchestrationoauth216 EndpointsREST

For Agents

Connect the ContainerInstanceManagementClient to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the ContainerInstanceManagementClient, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Install Jentic One Beta (Self-Hosted)

Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with ContainerInstanceManagementClient API.

Create or update a container group with one or more containers, image, ports, and environment variables

Restart, stop, or delete a running container group from a single ARM call

Pull stdout and stderr logs from a named container in a group, with an optional tail line count

Execute a command inside a running container and stream the response over a websocket URL

GET STARTED

Start building with ContainerInstanceManagementClient API

Explore with Jentic

View OpenAPI Document

Use for: I need to run a one-shot container that processes a CSV and exits, Restart container group 'agent-worker' in resource group prod-rg, Pull the last 100 log lines from container 'sidecar' in group 'agent-worker', Exec the command '/bin/sh -c env' inside a running container

Not supported: Does not orchestrate Kubernetes clusters, manage container images in a registry, or run VMs — use for serverless single-container-group workloads on Azure Container Instances only.

Jentic publishes the only available OpenAPI document for ContainerInstanceManagementClient, keeping it validated and agent-ready.

Jentic publishes the only available OpenAPI specification for ContainerInstanceManagementClient, keeping it validated and agent-ready. The Container Instance Management Client is the Azure Resource Manager API for Azure Container Instances (ACI) — running serverless container groups without managing a Kubernetes cluster. It exposes 16 endpoints covering container group create/update/delete, restart, stop, log retrieval, command execution, cached image lookup, and per-region capabilities and usage. Use it when an agent needs to run a one-shot container, exec into a running container, or pull logs.

Use Cases

Patterns agents use ContainerInstanceManagementClient API for, with concrete tasks.

★ Run an agent task as a one-shot container

When an agent needs to run a sandboxed workload — a build, a data transform, or a model inference call — Azure Container Instances lets it spin up a container group, run the task, and tear it down without owning a cluster. The Container Instance Management Client creates the group with image, command, env, and resources, returns the public IP or DNS, and exposes Stop and Delete to clean up.

PUT /subscriptions/{subscriptionId}/resourceGroups/agent-rg/providers/Microsoft.ContainerInstance/containerGroups/agent-job-001 with a Linux container image and command, then DELETE the group when the task exits.

Pull logs from a running container

Operators debugging a failing container group need stdout and stderr without SSHing into a host. The logs endpoint takes a container group, container name, and optional tail line count and returns the most recent log buffer, which can be streamed to an incident response channel or attached to a ticket.

GET the logs subresource for container 'sidecar' in container group 'agent-worker' with tail=200 and post the response to the incident channel.

Exec a command for live debugging

ACI exposes a websocket-based exec channel so an operator can attach a shell to a running container without redeploying. The exec endpoint returns a websocket URI and a password; an agent can use this to run an env dump, inspect a process list, or rerun a failing migration step.

POST the exec subresource on container 'sidecar' in container group 'agent-worker' with command '/bin/sh -c "ps aux"' and capture the websocket response.

Quota-aware scheduling

Azure Container Instances quotas vary per region. Before submitting many container groups, an agent should query usages and capabilities per location to confirm the requested vCPU and memory profile is available — this prevents wasted PUTs that 429 or 409 against subscription quota.

GET /subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/locations/eastus/usages and refuse to schedule new groups if vCPU usage > 80% of quota.

Agent-driven sandboxed execution via Jentic

An AI agent integrated through Jentic can use Azure Container Instances as a sandboxed runtime — pulling an image, running it with the agent's task as the entrypoint, fetching logs, and tearing the group down. Jentic's intent search exposes the right ACI operation for each phase and the AAD token never leaves the vault.

Spin up an ACI container group with image 'mcr.microsoft.com/python:3.11', run the supplied script as the entrypoint, stream logs back, then delete the group.

Key Endpoints

16 endpoints — jentic publishes the only available openapi specification for containerinstancemanagementclient, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/containerGroups

List container groups in a subscription

GET

/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerInstance/containerGroups

List container groups in a resource group

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/locations/{location}/cachedImages

List cached images for a region

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/locations/{location}/capabilities

List ACI capabilities for a region

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/locations/{location}/usages

Get ACI usage and quota for a region

GET

/providers/Microsoft.ContainerInstance/operations

List Microsoft.ContainerInstance provider operations

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/containerGroups

List container groups in a subscription

GET

/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerInstance/containerGroups

List container groups in a resource group

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/locations/{location}/cachedImages

List cached images for a region

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/locations/{location}/capabilities

List ACI capabilities for a region

GET

/subscriptions/{subscriptionId}/providers/Microsoft.ContainerInstance/locations/{location}/usages

Get ACI usage and quota for a region

Why though Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

Azure AD OAuth tokens for the user_impersonation scope are stored encrypted in the Jentic vault. Agents receive scoped access tokens — refresh tokens and image-pull credentials never enter the agent's context.

Intent-based discovery

Agents search by intent (for example 'run an azure container' or 'exec into a container') and Jentic returns the matching ACI operation with its full input schema, including container group, container, and exec subresource shapes.

Time to first call

Direct integration: 2-4 days for AAD plumbing, container group schema validation, and websocket exec wiring. Through Jentic: under 1 hour — search, load schema, execute.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Complementary

Container Registry Management Client

Manages the Azure Container Registry that ACI typically pulls images from

Choose Container Registry Management when the agent also needs to push, retag, or scan the image before running it on ACI

Alternative

Container Service Client

Provisions full Kubernetes clusters when one-shot ACI groups are not enough

Choose Container Service when the agent needs orchestration, autoscaling, or service meshes that ACI does not provide

Alternative

Compute Management Client

Standard VM-based compute when containers are the wrong abstraction

Choose Compute Management when the workload requires a full VM, a custom kernel, or features ACI does not support

FAQs

Specific to using ContainerInstanceManagementClient API through Jentic.

Why is there no official OpenAPI spec for ContainerInstanceManagementClient?

Microsoft Azure does not publish a single consolidated OpenAPI specification for the Container Instance Management Client. Jentic generates and maintains this spec so that AI agents and developers can call ContainerInstanceManagementClient via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.

What authentication does the ContainerInstanceManagementClient use?

It uses Azure Active Directory OAuth 2.0 with the implicit flow at https://login.microsoftonline.com/common/oauth2/authorize and the user_impersonation scope. The caller needs Contributor on the resource group. Through Jentic the AAD token sits in the encrypted vault.

Can I exec into a running container with this API?

Yes. POST the exec subresource on a named container in a container group with a command and terminal size. The response contains a websocket URI and a one-time password — open the websocket to attach to the container session.

What are the rate limits for the ContainerInstanceManagementClient?

ARM applies subscription-level read and write throttling (typically 12,000 reads and 1,200 writes per hour per subscription). Container instances also have per-region vCPU and memory quotas — call the usages endpoint to check current consumption against quota.

How do I run a one-shot container through Jentic?

Search Jentic for 'create azure container group', load the schema for PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerInstance/containerGroups/{containerGroupName}, and execute it with image, command, and resources in the body. Run pip install jentic to get the SDK.

Is the ContainerInstanceManagementClient free?

Calling the management API itself is free, but each container group is billed per second on vCPU and memory allocated for the lifetime of the group. Standard ACI pricing applies; the spec does not change billing.