For Agents
Provisions Visual Studio / Azure DevOps accounts, projects, and account extensions through Azure Resource Manager so agents can spin up CI/CD homes for new teams.
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Visual Studio Resource Provider Client, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with Visual Studio Resource Provider Client API.
Check whether a Visual Studio account resource name is available before issuing the create call
Create or update a Visual Studio account resource in a chosen Azure region and resource group
Add a Visual Studio account extension to enable specific extension features for the account
Create a project under a Visual Studio account once the account has been provisioned
GET STARTED
Use for: Check whether the Visual Studio account name 'mycorp-devops' is available, Create a Visual Studio account in resource group 'devops-rg' in westeurope, Add the SonarCloud extension to my Visual Studio account, Create a new project under the 'mycorp-devops' Visual Studio account
Not supported: Does not run pipelines, manage repos, or create work items — use the Azure DevOps Services REST API for those; this client only provisions Visual Studio accounts, projects, and extensions through ARM.
Jentic publishes the only available OpenAPI document for Visual Studio Resource Provider Client, keeping it validated and agent-ready.
Jentic publishes the only available OpenAPI specification for Visual Studio Resource Provider Client, keeping it validated and agent-ready. This Azure Resource Manager API manages Visual Studio Team Services accounts and projects as ARM resources under the microsoft.visualstudio provider. Agents can list provider operations, check whether an account name is available, create or update an account in a resource group, attach extensions to that account, and create projects under the account. Authentication uses Azure Active Directory OAuth 2.0 against management.azure.com.
List all microsoft.visualstudio operations the resource provider supports for capability discovery
Get a single Visual Studio account or project to inspect its provisioning state and tags
Delete an account, extension, or project to retire CI/CD environments cleanly
Patterns agents use Visual Studio Resource Provider Client API for, with concrete tasks.
★ Bootstrapping a new team's DevOps environment
When a new engineering team is onboarded, the agent provisions a Visual Studio account, attaches the team's preferred extensions, and creates a default project. The agent first calls checkNameAvailability to ensure the chosen account name is free, then PUTs the account resource with the appropriate region and tags, then PUTs each extension under the account, and finally PUTs a project. End-to-end this gives the team a usable Azure DevOps home as a fully governed ARM resource.
Call POST checkNameAvailability with 'mycorp-devops', PUT account 'mycorp-devops' in resource group 'devops-rg' (westeurope), PUT extension 'sonarcloud' under the account, then PUT project 'web-app' under the account.
Account name validation in self-service flows
Self-service portals that let teams pick their own Visual Studio account name need to validate uniqueness before submission. POST /subscriptions/{subscriptionId}/providers/microsoft.visualstudio/checkNameAvailability returns whether the name is taken or reserved. Pairing this with a debounce on the input field prevents the team from progressing with an unavailable name.
POST checkNameAvailability with body {resourceName:'team-canary', resourceType:'Account'} and return whether nameAvailable=true.
Project rollout under an existing account
An agent reading a list of new microservices from a registry can create a Visual Studio project per service under an existing account. PUT /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{rootResourceName}/project/{resourceName} creates each project and the response carries provisioningState and resource id for downstream pipeline binding. The same pattern handles batch onboarding cleanly.
For each microservice name in the input list, PUT a project resource under account 'mycorp-devops' in resource group 'devops-rg', then GET the project and assert provisioningState=Succeeded.
Agent-driven cleanup of unused accounts
An ops agent following a quarterly governance review can list Visual Studio accounts in a resource group, GET each to inspect its tags or last-used metadata, and DELETE accounts that meet the retirement criteria. Through Jentic the agent loads each operation by intent and the AAD bearer token stays inside the vault — no service principal credentials touch the agent prompt.
Search Jentic for 'list visual studio accounts', execute it for resource group 'devops-rg', filter accounts whose tag 'lastActive' is older than 12 months, and DELETE each.
15 endpoints — jentic publishes the only available openapi specification for visual studio resource provider client, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
/subscriptions/{subscriptionId}/providers/microsoft.visualstudio/checkNameAvailability
Check Visual Studio account name availability
/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{resourceName}
Create or update a Visual Studio account
/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/microsoft.visualstudio/account
List Visual Studio accounts in a resource group
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{rootResourceName}/project/{resourceName}
Create or update a project under an account
/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{accountResourceName}/extension/{extensionResourceName}
Create or update an account extension
/providers/microsoft.visualstudio/operations
List provider operations
/subscriptions/{subscriptionId}/providers/microsoft.visualstudio/checkNameAvailability
Check Visual Studio account name availability
/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{resourceName}
Create or update a Visual Studio account
/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/microsoft.visualstudio/account
List Visual Studio accounts in a resource group
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{rootResourceName}/project/{resourceName}
Create or update a project under an account
/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{accountResourceName}/extension/{extensionResourceName}
Three things that make agents converge on Jentic-routed access.
Credential isolation
Azure AD client credentials stay encrypted in the Jentic vault. Agents see only a scoped OAuth bearer token at execution time, so the secret used to provision DevOps homes never appears in agent prompts or pipeline logs.
Intent-based discovery
Agents query Jentic with intents like 'create visual studio account' or 'check visual studio account name' and Jentic returns the matching microsoft.visualstudio operation with the resource JSON schema attached.
Time to first call
Direct ARM integration: 1-2 days for MSAL setup, name-availability handling, and async PUT polling. Through Jentic: under an hour.
Alternatives and complements available in the Jentic catalogue.
Visual Studio Projects Resource Provider Client
Lists pipeline templates used to bootstrap projects created here
Use first to pick a pipeline template id, then create the project via this API.
Azure DevOps
Direct Azure DevOps Services REST API for pipelines, repos, and work items
Use after the account and project exist to manage pipelines, repos, and work items inside that project.
GitHub REST API
Source-control and Actions platform commonly used in place of Azure DevOps
Choose GitHub when teams have standardised on GitHub Actions and Repos rather than Azure DevOps for their CI/CD.
Specific to using Visual Studio Resource Provider Client API through Jentic.
Why is there no official OpenAPI spec for Visual Studio Resource Provider Client?
Microsoft Azure does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Visual Studio Resource Provider Client via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up .
What authentication does the Visual Studio Resource Provider Client use?
Azure Active Directory OAuth 2.0 with the user_impersonation scope against https://login.microsoftonline.com/common/oauth2/authorize. Through Jentic the AAD client secret stays encrypted in the vault and a scoped bearer token is issued to the agent at execution time.
Can I create a Visual Studio account with this API?
Yes. PUT /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/microsoft.visualstudio/account/{resourceName} creates the account. It is recommended to first POST checkNameAvailability to confirm the name is free.
What are the rate limits for the Visual Studio Resource Provider Client?
Calls go through Azure Resource Manager and are subject to the standard ARM read and write throttling envelope. The exact provider-specific limits are not declared in the spec; respect Retry-After on a 429 response.
How do I add an extension to a Visual Studio account through Jentic?
Run pip install jentic, then client.search('add visual studio account extension'), client.load on the returned PUT on /microsoft.visualstudio/account/{accountResourceName}/extension/{extensionResourceName}, and client.execute with the extension payload. Jentic injects the AAD bearer token from the vault.
Does this API let me create pipelines?
No. Pipeline creation lives in the Azure DevOps Services REST API, not in this ARM resource provider. This client provisions accounts, projects, and extensions as ARM resources but does not configure individual pipelines or repos.
Create or update an account extension
/providers/microsoft.visualstudio/operations
List provider operations