# KeyVaultClient API

> KeyVaultClient API on Apizie: 12 endpoints (Lists deleted secrets for the specified vault., Gets the specified deleted secret., Permanently deletes the specified secret., Recovers the deleted secret to the latest version., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:azure-keyvault-secrets/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:azure-keyvault-secrets`
- Category: Cloud
- Status: byok
- Source: https://learn.microsoft.com/rest/api/azure/
- Page: https://apizie.tech/api/cloud/azure-keyvault-secrets
- OpenAPI: https://apizie.tech/api/cloud/azure-keyvault-secrets/openapi.json

The key vault client performs cryptographic key operations and vault operations against the Key Vault service.

## Endpoints

### Lists deleted secrets for the specified vault.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets/get-deleted-secrets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Gets the specified deleted secret.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets/get-deleted-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. |

### Permanently deletes the specified secret.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets/purge-deleted-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. |

### Recovers the deleted secret to the latest version.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets/recover-deleted-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the deleted secret. |

### List secrets in a specified key vault.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets/get-secrets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Sets a secret in a specified key vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets/set-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. The value you provide may be copied globally for the purpose of running the service. The value provided should not… |
| body | object | yes | JSON request body |

### Deletes a secret from a specified key vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets/delete-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. |

### Get a specified secret from a given key vault.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets/get-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. |
| secret-version | string | yes | The version of the secret. This URI fragment is optional. If not specified, the latest version of the secret is returned. |

### Updates the attributes associated with a specified secret in a given key vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets/update-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. |
| secret-version | string | yes | The version of the secret. |
| body | object | yes | JSON request body |

### Backs up the specified secret.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets/backup-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. |

### List all versions of the specified secret.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets/get-secret-versions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| secret-name | string | yes | The name of the secret. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Restores a backed up secret to a vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets/restore-secret` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

## Example
```
curl "https://apizie.tech/v1/cloud:azure-keyvault-secrets/get-deleted-secrets" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the KeyVaultClient API?
Create a free Apizie key, then send GET https://apizie.tech/v1/cloud:azure-keyvault-secrets/get-deleted-secrets with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the KeyVaultClient API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. KeyVaultClient itself also needs your own key from azure.com.

### Can AI agents use the KeyVaultClient API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:azure-keyvault-secrets.

### What is the status of the KeyVaultClient API?
Needs your own provider key (bring your own key)