Projects

Every account has two projects to start with, and you can create more.

Project	What it is for
Production	Your real servers.
Development	A safe place to experiment.

Everything belongs to a project: servers, SSH keys, and API keys. An API key can act on exactly one project, which is what keeps a key you paste into a script from reaching anything you did not intend.

Development projects are simulated

A development project’s servers never reach real hardware. You cannot SSH into a development server — it does not actually exist. Reboot and re-image report success after a short delay without opening a connection to a BMC.

That is a property of the project, not of where the code is running. It is also the project whose key the documentation fills its examples with, so an example you copy from these pages and run as it is cannot power-cycle anything real.

Actions taken in a development project are recorded with simulated: true, so a simulated success can never be mistaken for a real one.

Creating a project

In the dashboard, use New project under the project selector in the sidebar. Choosing a kind is the meaningful part — a development project can never touch hardware, a production one can.

Through the API:


curl -X POST https://braesystems.com/api/v1/projects \
  -H "Authorization: Bearer bs_live_..." \
  -H "Content-Type: application/json" \
  -d '{"name":"Staging EU"}'


const apiKey = "bs_live_...";
 
async function main(): Promise<void> {
  const response = await fetch("https://braesystems.com/api/v1/projects", {
    method: "POST",
    headers: {
      Authorization: `Bearer ${apiKey}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ name: "Staging EU" }),
  });
 
  if (!response.ok) {
    throw new Error(`Brae API ${response.status}: ${await response.text()}`);
  }
 
  const { data } = (await response.json()) as { data: unknown };
  console.log(data);
}
 
void main();


const apiKey = "bs_live_...";
 
async function main() {
  const response = await fetch("https://braesystems.com/api/v1/projects", {
    method: "POST",
    headers: {
      Authorization: `Bearer ${apiKey}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ name: "Staging EU" }),
  });
 
  if (!response.ok) {
    throw new Error(`Brae API ${response.status}: ${await response.text()}`);
  }
 
  const { data } = await response.json();
  console.log(data);
}
 
void main();


import requests
 
api_key = "bs_live_..."
 
response = requests.post(
    "https://braesystems.com/api/v1/projects",
    headers={"Authorization": f"Bearer {api_key}"},
    json={"name": "Staging EU"},
    timeout=30,
)
response.raise_for_status()
 
print(response.json()["data"])


package main
 
import (
	"fmt"
	"io"
	"net/http"
	"strings"
)
 
func main() {
	apiKey := "bs_live_..."
 
	body := strings.NewReader(`{"name":"Staging EU"}`)
 
	req, err := http.NewRequest("POST", "https://braesystems.com/api/v1/projects", body)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Authorization", "Bearer "+apiKey)
	req.Header.Set("Content-Type", "application/json")
 
	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
 
	out, err := io.ReadAll(resp.Body)
	if err != nil {
		panic(err)
	}
 
	fmt.Println(resp.Status, string(out))
}


{
  "data": {
    "id": "9f1c7d2e-4a3b-4c5d-8e6f-0a1b2c3d4e5f",
    "name": "Staging EU",
    "slug": "staging-eu",
    "kind": "production",
    "created_at": "2026-07-30T14:03:11.000Z"
  }
}

kind defaults to production; send "kind": "development" for a project that can never reach hardware.

A new project gets its own API key, and a development one is seeded with a server and an SSH key so its endpoints return something useful straight away.

Names are unique within an account, by their slug — Staging EU and staging eu are the same project name, and the second request returns 409 Duplicate project.

Listing projects


curl https://braesystems.com/api/v1/projects \
  -H "Authorization: Bearer bs_live_..."


const apiKey = "bs_live_...";
 
async function main(): Promise<void> {
  const response = await fetch("https://braesystems.com/api/v1/projects", {
    headers: {
      Authorization: `Bearer ${apiKey}`,
    },
  });
 
  if (!response.ok) {
    throw new Error(`Brae API ${response.status}: ${await response.text()}`);
  }
 
  const { data } = (await response.json()) as { data: unknown };
  console.log(data);
}
 
void main();


const apiKey = "bs_live_...";
 
async function main() {
  const response = await fetch("https://braesystems.com/api/v1/projects", {
    headers: {
      Authorization: `Bearer ${apiKey}`,
    },
  });
 
  if (!response.ok) {
    throw new Error(`Brae API ${response.status}: ${await response.text()}`);
  }
 
  const { data } = await response.json();
  console.log(data);
}
 
void main();


import requests
 
api_key = "bs_live_..."
 
response = requests.get(
    "https://braesystems.com/api/v1/projects",
    headers={"Authorization": f"Bearer {api_key}"},
    timeout=30,
)
response.raise_for_status()
 
print(response.json()["data"])


package main
 
import (
	"fmt"
	"io"
	"net/http"
)
 
func main() {
	apiKey := "bs_live_..."
 
	req, err := http.NewRequest("GET", "https://braesystems.com/api/v1/projects", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Authorization", "Bearer "+apiKey)
 
	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
 
	out, err := io.ReadAll(resp.Body)
	if err != nil {
		panic(err)
	}
 
	fmt.Println(resp.Status, string(out))
}

Projects themselves are the one collection that is not scoped to a specific key’s project — any key lists all projects. Every other endpoint returns only what belongs to the key’s own project.