Azure Key Vault

Azure Key Vault is a cloud service for securely storing and accessing secrets, keys, and certificates. It helps safeguard cryptographic keys and secrets used by cloud applications and services.

Azure Key Vault publishes 3 APIs on the APIs.io network: Certificates API, Keys API, and Secrets API. Tagged areas include Certificates, Cloud Security, Cryptography, Key Management, and Secrets Management.

The Azure Key Vault catalog on APIs.io includes 2 JSON-LD contexts and 3 Spectral governance rulesets.

Azure Key Vault’s developer surface includes authentication, engineering blog, changelog, developer portal, support, pricing, and 9 more developer resources.

🌐 Visit website 📡 Source on GitHub

57.9/100 strong ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6

AccessPaidSelf serve

6 APIs 6 Features 4 Use Cases

CertificatesCloud SecurityCryptographyKey ManagementSecrets ManagementSecurity

Kin Score

Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6

Composite quality — 57.9/100 · strong

Contract Quality 18.4 / 25

Developer Ergonomics 6.1 / 20

Commercial Clarity 14.2 / 20

Operational Transparency 8.2 / 13

Governance 3.8 / 12

Discoverability 7.2 / 10

Agent readiness — 31/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/microsoft-azure-key-vault: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 6

Individual APIs this provider publishes, each with its own machine-readable definition.

Rate Limits 2

Documented rate limits and quota policies.

Azure Key Vault Rate Limits

13 limits

RATE LIMITS

Microsoft Azure Key Vault Rate Limits

7 limits

RATE LIMITS

FinOps 2

Cost, billing, and metering signals for API financial operations.

Azure Key Vault Finops

FINOPS

Microsoft Azure Key Vault Finops

FINOPS

Features 6

Notable capabilities this provider offers.

Key Management

Create, import, and manage cryptographic keys with support for RSA, EC, and symmetric key types.

Secrets Management

Securely store and control access to passwords, connection strings, API keys, and other secrets.

Certificate Lifecycle

Automate certificate creation, renewal, and management with certificate authority integration.

Cryptographic Operations

Perform encrypt, decrypt, sign, verify, wrap, and unwrap operations using managed keys.

HSM-Backed Keys

Use hardware security modules for FIPS 140-2 Level 2 validated key protection.

Soft Delete and Purge Protection

Recover accidentally deleted vaults, keys, secrets, and certificates with configurable retention.

JSON Schema 91

Standalone JSON Schema definitions for this provider's data models.

Scroll for all 91

JSON Structure 46

JSON Structure definitions describing this provider's data shapes.

Scroll for all 46

Examples 45

Example request and response payloads for these APIs.

Scroll for all 45

Scopes 1

OAuth scopes governing access to this provider's APIs.

Microsoft Azure Key Vault Scopes

1 scope · implicit

1 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Microsoft Azure Key Vault Agentic Access

29 operations · 20 acting

AGENTIC

Use Cases 4

What developers build with this provider.

Application Secret Management

Centralize and secure application secrets with audited access and automatic rotation.

Data Encryption

Encrypt data at rest and in transit using customer-managed keys stored in Key Vault.

TLS Certificate Management

Automate TLS certificate provisioning and renewal for web applications and services.

Code and Document Signing

Sign code, documents, and artifacts using keys stored securely in Key Vault.

Integrations 5

Pre-built integrations with other platforms and tools.

Azure App Service

Reference Key Vault secrets and certificates directly from App Service configuration.

Azure Kubernetes Service

Mount Key Vault secrets as volumes in AKS pods using the Secrets Store CSI Driver.

Azure DevOps

Use Key Vault secrets in CI/CD pipelines for secure deployment automation.

Azure Disk Encryption

Encrypt Azure VM disks using customer-managed keys stored in Key Vault.

Azure SQL Database

Enable Transparent Data Encryption with customer-managed keys from Key Vault.

Resources

Get Started 1

Portal, sign-up, and the first successful call

Portal

Portal

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

SpectralRules

SpectralRules

Vocabulary

Vocabulary

Build 1

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

Access & Security 3

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Authentication

Authentication

OAuthScopes

OAuthScopes

Operate 3

Status, limits, changes, and where to get help

StatusPage

StatusPage

ChangeLog

ChangeLog

Support

Support

Commercial 3

Pricing, plans, and the legal terms of use

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Pricing

Pricing

Company 1

The organization behind the API

Blog

Blog

Source (apis.yml)

name: Azure Key Vault
description: Azure Key Vault is a cloud service for securely storing and accessing secrets, keys, and certificates. It helps
  safeguard cryptographic keys and secrets used by cloud applications and services.
accessModel:
  pricing: paid
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Paid · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://azure.microsoft.com/svghandler/key-vault/
tags:
- Certificates
- Cloud Security
- Cryptography
- Key Management
- Secrets Management
- Security
created: '2024'
modified: '2026-05-19'
url: https://azure.microsoft.com/en-us/services/key-vault/
specificationVersion: '0.18'
apis:
- name: Azure Key Vault Keys API
  description: REST API for creating, importing, updating, and performing cryptographic operations with keys in Azure Key
    Vault. Supports RSA, EC, and symmetric key types with operations including encrypt, decrypt, sign, verify, wrap, and unwrap.
  image: https://azure.microsoft.com/svghandler/key-vault/
  humanURL: https://learn.microsoft.com/en-us/rest/api/keyvault/keys
  baseURL: https://{vault-name}.vault.azure.net
  tags:
  - Cryptographic Operations
  - Encryption
  - HSM
  - Keys
  - Signing
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys
  - type: APIReference
    url: https://learn.microsoft.com/en-us/rest/api/keyvault/keys
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/azure/key-vault/keys/quick-create-net
  contact:
  - type: Support
    url: https://azure.microsoft.com/en-us/support/
- name: Azure Key Vault Secrets API
  description: REST API for securely storing and managing secrets such as passwords, connection strings, and API keys in Azure
    Key Vault.
  image: https://azure.microsoft.com/svghandler/key-vault/
  humanURL: https://learn.microsoft.com/en-us/rest/api/keyvault/secrets
  baseURL: https://{vault-name}.vault.azure.net
  tags:
  - Connection Strings
  - Passwords
  - Secrets
  - Secure Storage
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/azure/key-vault/secrets/about-secrets
  - type: APIReference
    url: https://learn.microsoft.com/en-us/rest/api/keyvault/secrets
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/azure/key-vault/secrets/quick-create-net
  contact:
  - type: Support
    url: https://azure.microsoft.com/en-us/support/
- name: Azure Key Vault Certificates API
  description: REST API for creating, importing, managing, and renewing certificates in Azure Key Vault.
  image: https://azure.microsoft.com/svghandler/key-vault/
  humanURL: https://learn.microsoft.com/en-us/rest/api/keyvault/certificates
  baseURL: https://{vault-name}.vault.azure.net
  tags:
  - Certificate Authorities
  - Certificate Management
  - Certificates
  - SSL
  - TLS
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/azure/key-vault/certificates/about-certificates
  - type: APIReference
    url: https://learn.microsoft.com/en-us/rest/api/keyvault/certificates
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/azure/key-vault/certificates/quick-create-net
  contact:
  - type: Support
    url: https://azure.microsoft.com/en-us/support/
- aid: microsoft-azure-key-vault:microsoft-azure-key-vault-certificates-api
  name: Azure Key Vault Certificates API
  description: Operations for creating, importing, managing, and renewing certificates including lifecycle management and
    certificate authority integration.
  humanURL: https://azure.microsoft.com/en-us/services/key-vault/
  baseURL: https://management.azure.com
  tags:
  - Certificates
  properties:
  - type: OpenAPI
    url: openapi/microsoft-azure-key-vault-certificates-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/azure/key-vault/
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/key-vault/
  - type: GettingStarted
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/authentication
  - type: BestPractices
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/best-practices
  - type: Security
    url: https://learn.microsoft.com/en-us/azure/key-vault/general/secure-key-vault
  - type: Documentation
    url: https://docs.microsoft.com/en-us/rest/api/keyvault/
  - type: APIReference
    url: https://docs.microsoft.com/en-us/rest/api/keyvault/keys
  - type: JSONSchema
    url: json-schema/azure-key-vault-secret-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-create-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-operation-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-operations-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-sign-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-verify-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-verify-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-release-policy-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-type-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-operation-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-curve-name-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-set-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-restore-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-backup-secret-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-create-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-import-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-operation-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-policy-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-issuer-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-lifetime-action-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-subject-alternative-names-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-x509-certificate-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-key-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-secret-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-certificate-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deletion-recovery-level-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-error-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-vault-error-schema.json
  - type: JSONLD
    url: json-ld/azure-key-vault-context.jsonld
  - type: JSONLD
    url: json-ld/azure-key-vault-data-plane-context.jsonld
  - type: SDKs
    url: https://learn.microsoft.com/en-us/dotnet/api/overview/azure/security.keyvault.keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/python/api/overview/azure/keyvault-keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/java/api/overview/azure/security-keyvault-keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/javascript/api/overview/azure/keyvault-keys-readme
- aid: microsoft-azure-key-vault:microsoft-azure-key-vault-keys-api
  name: Azure Key Vault Keys API
  description: Operations for creating, importing, managing, and performing cryptographic operations with keys.
  humanURL: https://azure.microsoft.com/en-us/services/key-vault/
  baseURL: https://management.azure.com
  tags:
  - Keys
  properties:
  - type: OpenAPI
    url: openapi/microsoft-azure-key-vault-keys-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/azure/key-vault/
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/key-vault/
  - type: GettingStarted
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/authentication
  - type: BestPractices
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/best-practices
  - type: Security
    url: https://learn.microsoft.com/en-us/azure/key-vault/general/secure-key-vault
  - type: Documentation
    url: https://docs.microsoft.com/en-us/rest/api/keyvault/
  - type: APIReference
    url: https://docs.microsoft.com/en-us/rest/api/keyvault/keys
  - type: JSONSchema
    url: json-schema/azure-key-vault-secret-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-create-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-operation-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-operations-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-sign-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-verify-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-verify-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-release-policy-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-type-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-operation-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-curve-name-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-set-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-restore-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-backup-secret-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-create-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-import-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-operation-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-policy-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-issuer-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-lifetime-action-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-subject-alternative-names-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-x509-certificate-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-key-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-secret-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-certificate-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deletion-recovery-level-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-error-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-vault-error-schema.json
  - type: JSONLD
    url: json-ld/azure-key-vault-context.jsonld
  - type: JSONLD
    url: json-ld/azure-key-vault-data-plane-context.jsonld
  - type: SDKs
    url: https://learn.microsoft.com/en-us/dotnet/api/overview/azure/security.keyvault.keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/python/api/overview/azure/keyvault-keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/java/api/overview/azure/security-keyvault-keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/javascript/api/overview/azure/keyvault-keys-readme
- aid: microsoft-azure-key-vault:microsoft-azure-key-vault-secrets-api
  name: Azure Key Vault Secrets API
  description: Operations for securely storing and managing secrets such as passwords, connection strings, and API keys.
  humanURL: https://azure.microsoft.com/en-us/services/key-vault/
  baseURL: https://management.azure.com
  tags:
  - Secrets
  properties:
  - type: OpenAPI
    url: openapi/microsoft-azure-key-vault-secrets-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/azure/key-vault/
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/key-vault/
  - type: GettingStarted
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/authentication
  - type: BestPractices
    url: https://docs.microsoft.com/en-us/azure/key-vault/general/best-practices
  - type: Security
    url: https://learn.microsoft.com/en-us/azure/key-vault/general/secure-key-vault
  - type: Documentation
    url: https://docs.microsoft.com/en-us/rest/api/keyvault/
  - type: APIReference
    url: https://docs.microsoft.com/en-us/rest/api/keyvault/keys
  - type: JSONSchema
    url: json-schema/azure-key-vault-secret-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-create-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-operation-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-operations-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-sign-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-verify-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-verify-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-release-policy-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-type-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-operation-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-json-web-key-curve-name-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-set-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-secret-restore-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-backup-secret-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-create-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-import-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-update-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-item-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-list-result-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-attributes-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-operation-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-certificate-policy-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-issuer-parameters-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-lifetime-action-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-subject-alternative-names-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-x509-certificate-properties-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-key-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-secret-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deleted-certificate-bundle-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-deletion-recovery-level-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-error-schema.json
  - type: JSONSchema
    url: json-schema/azure-key-vault-data-plane-key-vault-error-schema.json
  - type: JSONLD
    url: json-ld/azure-key-vault-context.jsonld
  - type: JSONLD
    url: json-ld/azure-key-vault-data-plane-context.jsonld
  - type: SDKs
    url: https://learn.microsoft.com/en-us/dotnet/api/overview/azure/security.keyvault.keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/python/api/overview/azure/keyvault-keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/java/api/overview/azure/security-keyvault-keys-readme
  - type: SDKs
    url: https://learn.microsoft.com/en-us/javascript/api/overview/azure/keyvault-keys-readme
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/azure-key-vault/overview
- type: AgenticAccess
  url: agentic-access/microsoft-azure-key-vault-agentic-access.yml
- type: DomainSecurity
  url: security/microsoft-azure-key-vault-domain-security.yml
- type: Authentication
  url: authentication/microsoft-azure-key-vault-authentication.yml
- type: OAuthScopes
  url: scopes/microsoft-azure-key-vault-scopes.yml
- type: StatusPage
  url: https://status.azure.com/
- type: Blog
  url: https://azure.microsoft.com/en-us/blog/
- type: TermsOfService
  url: https://azure.microsoft.com/en-us/support/legal/
- type: PrivacyPolicy
  url: https://privacy.microsoft.com/en-us/privacystatement
- type: ChangeLog
  url: https://docs.microsoft.com/en-us/azure/key-vault/general/whats-new
- type: Portal
  url: https://portal.azure.com/
- type: Support
  url: https://azure.microsoft.com/en-us/support/
- type: Pricing
  url: https://azure.microsoft.com/en-us/pricing/details/key-vault/
- type: SpectralRules
  url: rules/azure-key-vault-spectral-rules.yml
- type: Vocabulary
  url: vocabulary/azure-key-vault-vocabulary.yaml
- type: Features
  data:
  - name: Key Management
    description: Create, import, and manage cryptographic keys with support for RSA, EC, and symmetric key types.
  - name: Secrets Management
    description: Securely store and control access to passwords, connection strings, API keys, and other secrets.
  - name: Certificate Lifecycle
    description: Automate certificate creation, renewal, and management with certificate authority integration.
  - name: Cryptographic Operations
    description: Perform encrypt, decrypt, sign, verify, wrap, and unwrap operations using managed keys.
  - name: HSM-Backed Keys
    description: Use hardware security modules for FIPS 140-2 Level 2 validated key protection.
  - name: Soft Delete and Purge Protection
    description: Recover accidentally deleted vaults, keys, secrets, and certificates with configurable retention.
- type: UseCases
  data:
  - name: Application Secret Management
    description: Centralize and secure application secrets with audited access and automatic rotation.
  - name: Data Encryption
    description: Encrypt data at rest and in transit using customer-managed keys stored in Key Vault.
  - name: TLS Certificate Management
    description: Automate TLS certificate provisioning and renewal for web applications and services.
  - name: Code and Document Signing
    description: Sign code, documents, and artifacts using keys stored securely in Key Vault.
- type: Integrations
  data:
  - name: Azure App Service
    description: Reference Key Vault secrets and certificates directly from App Service configuration.
  - name: Azure Kubernetes Service
    description: Mount Key Vault secrets as volumes in AKS pods using the Secrets Store CSI Driver.
  - name: Azure DevOps
    description: Use Key Vault secrets in CI/CD pipelines for secure deployment automation.
  - name: Azure Disk Encryption
    description: Encrypt Azure VM disks using customer-managed keys stored in Key Vault.
  - name: Azure SQL Database
    description: Enable Transparent Data Encryption with customer-managed keys from Key Vault.