# Tencent Cloud Key Management Service API

> Tencent Cloud Key Management Service API on Apizie: 70 endpoints (Archive Key, Asymmetric Rsa Decrypt, Asymmetric Sm2 Decrypt, Bind Cloud Resource, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:tencent-kms/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:tencent-kms`
- Category: Cloud
- Status: byok
- Source: https://www.tencentcloud.com/document/api
- Page: https://apizie.tech/api/cloud/tencent-kms
- OpenAPI: https://apizie.tech/api/cloud/tencent-kms/openapi.json

Tencent Cloud API 3.0 for Key Management Service (kms). Every call is signed with TC3-HMAC-SHA256 using your SecretId and SecretKey.

## Endpoints

### Archive Key
`POST https://apizie.tech/v1/cloud:tencent-kms/archive-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Asymmetric Rsa Decrypt
`POST https://apizie.tech/v1/cloud:tencent-kms/asymmetric-rsa-decrypt` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| Ciphertext | string | yes |  |
| Algorithm | string | yes |  |

### Asymmetric Sm2 Decrypt
`POST https://apizie.tech/v1/cloud:tencent-kms/asymmetric-sm2-decrypt` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| Ciphertext | string | yes |  |

### Bind Cloud Resource
`POST https://apizie.tech/v1/cloud:tencent-kms/bind-cloud-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| ProductId | string | yes |  |
| ResourceId | string | yes |  |

### Cancel Data Key Deletion
`POST https://apizie.tech/v1/cloud:tencent-kms/cancel-data-key-deletion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| MemberAccount | object | no |  |

### Cancel Key Archive
`POST https://apizie.tech/v1/cloud:tencent-kms/cancel-key-archive` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Cancel Key Deletion
`POST https://apizie.tech/v1/cloud:tencent-kms/cancel-key-deletion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Create Key
`POST https://apizie.tech/v1/cloud:tencent-kms/create-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Alias | string | yes |  |
| Description | string | no |  |
| KeyUsage | string | no |  |
| Type | integer | no |  |
| Tags | array | no |  |
| HsmClusterId | string | no |  |

### Create Kms Instance
`POST https://apizie.tech/v1/cloud:tencent-kms/create-kms-instance` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| InstanceChargeType | string | yes |  |
| ProductVersion | string | no |  |
| InstanceChargePrepaid | object | no |  |
| ClientToken | string | no |  |
| Tags | array | no |  |

### Create White Box Key
`POST https://apizie.tech/v1/cloud:tencent-kms/create-white-box-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Alias | string | yes |  |
| Algorithm | string | yes |  |
| Description | string | no |  |
| Tags | array | no |  |

### Decrypt
`POST https://apizie.tech/v1/cloud:tencent-kms/decrypt` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| CiphertextBlob | string | yes |  |
| EncryptionContext | string | no |  |
| EncryptionPublicKey | string | no |  |
| EncryptionAlgorithm | string | no |  |

### Delete Imported Key Material
`POST https://apizie.tech/v1/cloud:tencent-kms/delete-imported-key-material` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Delete White Box Key
`POST https://apizie.tech/v1/cloud:tencent-kms/delete-white-box-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Describe Data Key
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-data-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| MemberAccount | object | no |  |

### Describe Data Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-data-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyIds | array | yes |  |
| MemberAccount | object | no |  |

### Describe Key
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Describe Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyIds | array | yes |  |
| MemberAccount | object | no |  |

### Describe White Box Decrypt Key
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-white-box-decrypt-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Describe White Box Device Fingerprints
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-white-box-device-fingerprints` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Describe White Box Key
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-white-box-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Describe White Box Key Details
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-white-box-key-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyStatus | integer | no |  |
| Offset | integer | no |  |
| Limit | integer | no |  |
| TagFilters | array | no |  |

### Describe White Box Service Status
`POST https://apizie.tech/v1/cloud:tencent-kms/describe-white-box-service-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |

### Disable Data Key
`POST https://apizie.tech/v1/cloud:tencent-kms/disable-data-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| MemberAccount | object | no |  |

### Disable Data Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/disable-data-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyIds | array | yes |  |
| MemberAccount | object | no |  |

### Disable Key
`POST https://apizie.tech/v1/cloud:tencent-kms/disable-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Disable Key Rotation
`POST https://apizie.tech/v1/cloud:tencent-kms/disable-key-rotation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Disable Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/disable-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyIds | array | yes |  |
| MemberAccount | object | no |  |

### Disable White Box Key
`POST https://apizie.tech/v1/cloud:tencent-kms/disable-white-box-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Disable White Box Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/disable-white-box-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyIds | array | yes |  |

### Enable Data Key
`POST https://apizie.tech/v1/cloud:tencent-kms/enable-data-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| MemberAccount | object | no |  |

### Enable Data Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/enable-data-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyIds | array | yes |  |
| MemberAccount | object | no |  |

### Enable Key
`POST https://apizie.tech/v1/cloud:tencent-kms/enable-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Enable Key Rotation
`POST https://apizie.tech/v1/cloud:tencent-kms/enable-key-rotation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| RotateDays | integer | no |  |
| MemberAccount | object | no |  |

### Enable Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/enable-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyIds | array | yes |  |
| MemberAccount | object | no |  |

### Enable White Box Key
`POST https://apizie.tech/v1/cloud:tencent-kms/enable-white-box-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Enable White Box Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/enable-white-box-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyIds | array | yes |  |

### Encrypt
`POST https://apizie.tech/v1/cloud:tencent-kms/encrypt` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| Plaintext | string | yes |  |
| EncryptionContext | string | no |  |

### Encrypt By White Box
`POST https://apizie.tech/v1/cloud:tencent-kms/encrypt-by-white-box` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| PlainText | string | yes |  |
| InitializationVector | string | no |  |

### Generate Data Key
`POST https://apizie.tech/v1/cloud:tencent-kms/generate-data-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| KeySpec | string | no |  |
| NumberOfBytes | integer | no |  |
| EncryptionContext | string | no |  |
| EncryptionPublicKey | string | no |  |
| EncryptionAlgorithm | string | no |  |
| IsHostedByKms | integer | no |  |
| DataKeyName | string | no |  |
| Description | string | no |  |
| HsmClusterId | string | no |  |
| Tags | array | no |  |

### Generate Random
`POST https://apizie.tech/v1/cloud:tencent-kms/generate-random` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| NumberOfBytes | integer | yes |  |

### Get Data Key Ciphertext Blob
`POST https://apizie.tech/v1/cloud:tencent-kms/get-data-key-ciphertext-blob` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| MemberAccount | object | no |  |

### Get Data Key Plaintext
`POST https://apizie.tech/v1/cloud:tencent-kms/get-data-key-plaintext` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| EncryptionPublicKey | string | no |  |
| EncryptionAlgorithm | string | no |  |

### Get Key Rotation Status
`POST https://apizie.tech/v1/cloud:tencent-kms/get-key-rotation-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Get Parameters For Import
`POST https://apizie.tech/v1/cloud:tencent-kms/get-parameters-for-import` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| WrappingAlgorithm | string | yes |  |
| WrappingKeySpec | string | yes |  |

### Get Public Key
`POST https://apizie.tech/v1/cloud:tencent-kms/get-public-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |

### Get Regions
`POST https://apizie.tech/v1/cloud:tencent-kms/get-regions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |

### Get Service Status
`POST https://apizie.tech/v1/cloud:tencent-kms/get-service-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |

### Import Data Key
`POST https://apizie.tech/v1/cloud:tencent-kms/import-data-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyName | string | yes |  |
| ImportKeyMaterial | string | yes |  |
| ImportType | integer | yes |  |
| Description | string | no |  |
| KeyId | string | no |  |
| HsmClusterId | string | no |  |
| Tags | array | no |  |

### Import Key Material
`POST https://apizie.tech/v1/cloud:tencent-kms/import-key-material` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| EncryptedKeyMaterial | string | yes |  |
| ImportToken | string | yes |  |
| KeyId | string | yes |  |
| ValidTo | integer | no |  |

### List Algorithms
`POST https://apizie.tech/v1/cloud:tencent-kms/list-algorithms` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |

### List Data Key Detail
`POST https://apizie.tech/v1/cloud:tencent-kms/list-data-key-detail` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Offset | integer | no |  |
| Limit | integer | no |  |
| Role | integer | no |  |
| OrderType | integer | no |  |
| KeyState | integer | no |  |
| SearchKeyAlias | string | no |  |
| Origin | string | no |  |
| HsmClusterId | string | no |  |
| KeyId | string | no |  |
| DataKeyLen | integer | no |  |
| TagFilters | array | no |  |
| MemberAccounts | array | no |  |

### List Data Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/list-data-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Offset | integer | no |  |
| Limit | integer | no |  |
| Role | integer | no |  |
| HsmClusterId | string | no |  |

### List Key Detail
`POST https://apizie.tech/v1/cloud:tencent-kms/list-key-detail` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Offset | integer | no |  |
| Limit | integer | no |  |
| Role | integer | no |  |
| OrderType | integer | no |  |
| KeyState | integer | no |  |
| SearchKeyAlias | string | no |  |
| Origin | string | no |  |
| KeyUsage | string | no |  |
| TagFilters | array | no |  |
| HsmClusterId | string | no |  |
| MemberAccounts | array | no |  |

### List Keys
`POST https://apizie.tech/v1/cloud:tencent-kms/list-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Offset | integer | no |  |
| Limit | integer | no |  |
| Role | integer | no |  |
| HsmClusterId | string | no |  |

### Overwrite White Box Device Fingerprints
`POST https://apizie.tech/v1/cloud:tencent-kms/overwrite-white-box-device-fingerprints` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| DeviceFingerprints | array | no |  |

### Post Quantum Crypto Decrypt
`POST https://apizie.tech/v1/cloud:tencent-kms/post-quantum-crypto-decrypt` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| CiphertextBlob | string | yes |  |
| EncryptionPublicKey | string | no |  |
| EncryptionAlgorithm | string | no |  |

### Post Quantum Crypto Encrypt
`POST https://apizie.tech/v1/cloud:tencent-kms/post-quantum-crypto-encrypt` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| PlainText | string | yes |  |

### Post Quantum Crypto Sign
`POST https://apizie.tech/v1/cloud:tencent-kms/post-quantum-crypto-sign` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Message | string | yes |  |
| KeyId | string | yes |  |

### Post Quantum Crypto Verify
`POST https://apizie.tech/v1/cloud:tencent-kms/post-quantum-crypto-verify` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| SignatureValue | string | yes |  |
| Message | string | yes |  |

### Re Encrypt
`POST https://apizie.tech/v1/cloud:tencent-kms/re-encrypt` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| CiphertextBlob | string | yes |  |
| DestinationKeyId | string | no |  |
| SourceEncryptionContext | string | no |  |
| DestinationEncryptionContext | string | no |  |

### Rotate Key
`POST https://apizie.tech/v1/cloud:tencent-kms/rotate-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Schedule Data Key Deletion
`POST https://apizie.tech/v1/cloud:tencent-kms/schedule-data-key-deletion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| PendingWindowInDays | integer | yes |  |
| MemberAccount | object | no |  |

### Schedule Key Deletion
`POST https://apizie.tech/v1/cloud:tencent-kms/schedule-key-deletion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| PendingWindowInDays | integer | yes |  |
| MemberAccount | object | no |  |

### Sign By Asymmetric Key
`POST https://apizie.tech/v1/cloud:tencent-kms/sign-by-asymmetric-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Algorithm | string | yes |  |
| Message | string | yes |  |
| KeyId | string | yes |  |
| MessageType | string | no |  |

### Unbind Cloud Resource
`POST https://apizie.tech/v1/cloud:tencent-kms/unbind-cloud-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| ProductId | string | yes |  |
| ResourceId | string | yes |  |

### Update Alias
`POST https://apizie.tech/v1/cloud:tencent-kms/update-alias` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Alias | string | yes |  |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Update Data Key Description
`POST https://apizie.tech/v1/cloud:tencent-kms/update-data-key-description` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| Description | string | yes |  |
| MemberAccount | object | no |  |

### Update Data Key Name
`POST https://apizie.tech/v1/cloud:tencent-kms/update-data-key-name` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| DataKeyId | string | yes |  |
| DataKeyName | string | yes |  |
| MemberAccount | object | no |  |

### Update Key Description
`POST https://apizie.tech/v1/cloud:tencent-kms/update-key-description` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| Description | string | yes |  |
| KeyId | string | yes |  |
| MemberAccount | object | no |  |

### Verify By Asymmetric Key
`POST https://apizie.tech/v1/cloud:tencent-kms/verify-by-asymmetric-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| X-TC-Region | string | no | Region for regional products, for example ap-singapore, ap-guangzhou, na-siliconvalley |
| KeyId | string | yes |  |
| SignatureValue | string | yes |  |
| Message | string | yes |  |
| Algorithm | string | yes |  |
| MessageType | string | no |  |

## Example
```
curl "https://apizie.tech/v1/cloud:tencent-kms/archive-key" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Tencent Cloud Key Management Service API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:tencent-kms/archive-key with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Tencent Cloud Key Management Service API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Tencent Cloud Key Management Service itself also needs your own key from tencentcloudapi.com.

### Can AI agents use the Tencent Cloud Key Management Service API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:tencent-kms.

### What is the status of the Tencent Cloud Key Management Service API?
Needs your own provider key (bring your own key)