# KeyVaultClient API

> KeyVaultClient API on Apizie: 20 endpoints (List storage accounts managed by the specified key vault. This operation requires the storage/list permission., Lists deleted storage accounts for the specified vault., Gets the specified deleted storage account., Permanently deletes the specified storage account., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:azure-keyvault-secrets-storage`
- Category: Cloud
- Status: byok
- Source: https://learn.microsoft.com/rest/api/azure/
- Page: https://apizie.tech/api/cloud/azure-keyvault-secrets-storage
- OpenAPI: https://apizie.tech/api/cloud/azure-keyvault-secrets-storage/openapi.json

The key vault client performs cryptographic key operations and vault operations against the Key Vault service.

## Endpoints

### List storage accounts managed by the specified key vault. This operation requires the storage/list permission.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-storage-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Lists deleted storage accounts for the specified vault.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-deleted-storage-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Gets the specified deleted storage account.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-deleted-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |

### Permanently deletes the specified storage account.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/purge-deleted-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |

### Recovers the deleted storage account.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/recover-deleted-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |

### Backs up the specified storage account.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/backup-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |

### Restores a backed up storage account to a vault.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/restore-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| body | object | yes | JSON request body |

### Gets information about a specified storage account. This operation requires the storage/get permission.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |

### Creates or updates a new storage account. This operation requires the storage/set permission.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/set-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. The value you provide may be copied globally for the purpose of running the service. The value provided… |
| body | object | yes | JSON request body |

### Updates the specified attributes associated with the given storage account. This operation requires the…
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/update-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| body | object | yes | JSON request body |

### Deletes a storage account. This operation requires the storage/delete permission.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/delete-storage-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |

### Regenerates the specified key value for the given storage account. This operation requires the…
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/regenerate-storage-account-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| body | object | yes | JSON request body |

### List storage SAS definitions for the given storage account. This operation requires the storage/listsas…
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-sas-definitions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Lists deleted SAS definitions for the specified vault and storage account.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-deleted-sas-definitions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| maxresults | integer | no | Maximum number of results to return in a page. If not specified the service will return up to 25 results. |

### Gets the specified deleted sas definition.
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-deleted-sas-definition` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| sas-definition-name | string | yes | The name of the SAS definition. |

### Recovers the deleted SAS definition.
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/recover-deleted-sas-definition` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| sas-definition-name | string | yes | The name of the SAS definition. |

### Gets information about a SAS definition for the specified storage account. This operation requires the…
`GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-sas-definition` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| sas-definition-name | string | yes | The name of the SAS definition. |

### Creates or updates a new SAS definition for the specified storage account. This operation requires the…
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/set-sas-definition` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| sas-definition-name | string | yes | The name of the SAS definition. The value you provide may be copied globally for the purpose of running the service. The value provided… |
| body | object | yes | JSON request body |

### Updates the specified attributes associated with the given SAS definition. This operation requires the…
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/update-sas-definition` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| sas-definition-name | string | yes | The name of the SAS definition. |
| body | object | yes | JSON request body |

### Deletes a SAS definition from a specified storage account. This operation requires the storage/deletesas…
`POST https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/delete-sas-definition` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| vaultBaseUrl | string | yes | The vault name, for example https://myvault.vault.azure.net. |
| storage-account-name | string | yes | The name of the storage account. |
| sas-definition-name | string | yes | The name of the SAS definition. |

## Example
```
curl "https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-storage-accounts" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the KeyVaultClient API?
Create a free Apizie key, then send GET https://apizie.tech/v1/cloud:azure-keyvault-secrets-storage/get-storage-accounts with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the KeyVaultClient API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. KeyVaultClient itself also needs your own key from azure.com.

### Can AI agents use the KeyVaultClient API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:azure-keyvault-secrets-storage.

### What is the status of the KeyVaultClient API?
Needs your own provider key (bring your own key)