# KeyVaultClient API

> KeyVaultClient API on Apizie: 27 endpoints (List certificates in a specified key vault, Deletes a certificate from a specified key vault., Gets information about a certificate., Updates the specified attributes associated with the given certificate., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:azure-keyvault-certificates/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:azure-keyvault-certificates`
- Category: Cloud
- Status: byok
- Source: https://learn.microsoft.com/rest/api/azure/
- Page: https://apizie.tech/api/cloud/azure-keyvault-certificates
- OpenAPI: https://apizie.tech/api/cloud/azure-keyvault-certificates/openapi.json

The key vault client performs cryptographic key operations and vault operations against the Key Vault service.

## Endpoints

### List certificates in a specified key vault
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificates` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |
| includePending | boolean | no | Specifies whether to include certificates which are not completely provisioned. |

### Deletes a certificate from a specified key vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/delete-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. |

### Gets information about a certificate.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate in the given vault. |
| certificate-version | string | yes | The version of the certificate. This URI fragment is optional. If not specified, the latest version of the certificate is returned. |

### Updates the specified attributes associated with the given certificate.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/update-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate in the given key vault. |
| certificate-version | string | yes | The version of the certificate. |
| body | object | yes | JSON request body |

### Backs up the specified certificate.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/backup-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. |

### Creates a new certificate.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/create-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. The value you provide may be copied globally for the purpose of running the service. The value provided… |
| body | object | yes | JSON request body |

### Imports a certificate into a specified key vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/import-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. The value you provide may be copied globally for the purpose of running the service. The value provided… |
| body | object | yes | JSON request body |

### Gets the creation operation of a certificate.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificate-operation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. |

### Updates a certificate operation.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/update-certificate-operation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. |
| body | object | yes | JSON request body |

### Deletes the creation operation for a specific certificate.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/delete-certificate-operation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. |

### Merges a certificate or a certificate chain with a key pair existing on the server.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/merge-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. |
| body | object | yes | JSON request body |

### Lists the policy for a certificate.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate in a given key vault. |

### Updates the policy for a certificate.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/update-certificate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate in the given vault. |
| body | object | yes | JSON request body |

### List the versions of a certificate.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificate-versions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Lists the certificate contacts for a specified key vault.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificate-contacts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

### Sets the certificate contacts for the specified key vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/set-certificate-contacts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Deletes the certificate contacts for a specified key vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/delete-certificate-contacts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |

### List certificate issuers for a specified key vault.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificate-issuers` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Lists the specified certificate issuer.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificate-issuer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| issuer-name | string | yes | The name of the issuer. |

### Sets the specified certificate issuer.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/set-certificate-issuer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| issuer-name | string | yes | The name of the issuer. The value you provide may be copied globally for the purpose of running the service. The value provided should not… |
| body | object | yes | JSON request body |

### Updates the specified certificate issuer.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/update-certificate-issuer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| issuer-name | string | yes | The name of the issuer. |
| body | object | yes | JSON request body |

### Deletes the specified certificate issuer.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/delete-certificate-issuer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| issuer-name | string | yes | The name of the issuer. |

### Restores a backed up certificate to a vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/restore-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| body | object | yes | JSON request body |

### Lists the deleted certificates in the specified vault currently available for recovery.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-deleted-certificates` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |
| includePending | boolean | no | Specifies whether to include certificates which are not completely provisioned. |

### Retrieves information about the specified deleted certificate.
`GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-deleted-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate |

### Permanently deletes the specified deleted certificate.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/purge-deleted-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the certificate |

### Recovers the deleted certificate back to its current version under /certificates.
`POST https://apizie.tech/v1/cloud:azure-keyvault-certificates/recover-deleted-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | Your KeyVaultClient endpoint URL, for example https://myresource.azure.com |
| api-version | string | no | The API version to use for this operation. |
| certificate-name | string | yes | The name of the deleted certificate |

## Example
```
curl "https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificates" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the KeyVaultClient API?
Create a free Apizie key, then send GET https://apizie.tech/v1/cloud:azure-keyvault-certificates/get-certificates with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the KeyVaultClient API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. KeyVaultClient itself also needs your own key from azure.com.

### Can AI agents use the KeyVaultClient API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:azure-keyvault-certificates.

### What is the status of the KeyVaultClient API?
Needs your own provider key (bring your own key)