# KeyVaultClient API

> KeyVaultClient API on Apizie: 5 endpoints (Retrieves the Security Domain from the managed HSM. Calling this endpoint can be used to activate a…, Retrieves the Security Domain download operation status, Retrieve Security Domain transfer key, Restore the provided Security Domain., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:azure-keyvault-security-domain/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:azure-keyvault-security-domain`
- Category: Cloud
- Status: byok
- Source: https://learn.microsoft.com/rest/api/azure/
- Page: https://apizie.tech/api/cloud/azure-keyvault-security-domain
- OpenAPI: https://apizie.tech/api/cloud/azure-keyvault-security-domain/openapi.json

The key vault client performs cryptographic key operations and vault operations against the Key Vault service.

## Endpoints

### Retrieves the Security Domain from the managed HSM. Calling this endpoint can be used to activate a…
`POST https://apizie.tech/v1/cloud:azure-keyvault-security-domain/hsmsecurity-domain-download` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Retrieves the Security Domain download operation status
`GET https://apizie.tech/v1/cloud:azure-keyvault-security-domain/hsmsecurity-domain-download-pending` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

### Retrieve Security Domain transfer key
`GET https://apizie.tech/v1/cloud:azure-keyvault-security-domain/hsmsecurity-domain-transfer-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

### Restore the provided Security Domain.
`POST https://apizie.tech/v1/cloud:azure-keyvault-security-domain/hsmsecurity-domain-upload` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Get Security Domain upload operation status
`GET https://apizie.tech/v1/cloud:azure-keyvault-security-domain/hsmsecurity-domain-upload-pending` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

## Example
```
curl "https://apizie.tech/v1/cloud:azure-keyvault-security-domain/hsmsecurity-domain-download" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the KeyVaultClient API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:azure-keyvault-security-domain/hsmsecurity-domain-download with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the KeyVaultClient API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. KeyVaultClient itself also needs your own key from azure.com.

### Can AI agents use the KeyVaultClient API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:azure-keyvault-security-domain.

### What is the status of the KeyVaultClient API?
Needs your own provider key (bring your own key)