How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Azure Key Vault Keys API

Operations for creating, importing, managing, and performing cryptographic operations with keys.

Azure Key Vault Keys API is one of 6 APIs that Azure Key Vault publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 46 JSON Schema definitions.

Tagged areas include Keys. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, pricing, a getting-started guide, authentication docs, best-practice docs, and 46 JSON Schemas.

This API exposes 11 operations across 10 paths, and defines 20 schemas. It is described by OpenAPI 3.2.0, at version 7.4.

Requests are made against a single base URL, https://{vaultName}.vault.azure.net.

11 operations 10 paths 20 schemas 1 DELETE2 GET1 PATCH7 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
7.4
Base URL
https://management.azure.com
Authentication
OAuth 2.0
Resource Areas
1

Authentication & Security 1

Azure Key Vault Keys API declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (OAuth2Auth) using the implicit flow, exposing 1 scope. By default, every request must be authenticated.

  • OAuth2Auth — Azure Active Directory OAuth2 authentication. Requires an access token scoped to the Key Vault resource.

Paths & Operations 11

Across 10 paths, the API surfaces 11 operations — 1 DELETE, 2 GET, 1 PATCH, 7 POST. Each is listed below with its method, path, parameters, and response codes.

Keys 11

Operations for creating, importing, managing, and performing cryptographic operations with keys.

POST
/keys/{key-name}/create
Azure Key Vault Create Key
Keys_CreateKey 2 params body → 200default
GET
/keys/{key-name}/{key-version}
Azure Key Vault Get Key
Keys_GetKey 3 params → 200default
PATCH
/keys/{key-name}/{key-version}
Azure Key Vault Update Key
Keys_UpdateKey 3 params body → 200default
DELETE
/keys/{key-name}
Azure Key Vault Delete Key
Keys_DeleteKey 2 params → 200default
GET
/keys
Azure Key Vault List Keys
Keys_GetKeys 2 params → 200default
POST
/keys/{key-name}/{key-version}/encrypt
Azure Key Vault Encrypt
Keys_Encrypt 3 params body → 200default
POST
/keys/{key-name}/{key-version}/decrypt
Azure Key Vault Decrypt
Keys_Decrypt 3 params body → 200default
POST
/keys/{key-name}/{key-version}/sign
Azure Key Vault Sign
Keys_Sign 3 params body → 200default
POST
/keys/{key-name}/{key-version}/verify
Azure Key Vault Verify
Keys_Verify 3 params body → 200default
POST
/keys/{key-name}/{key-version}/wrapkey
Azure Key Vault Wrap Key
Keys_WrapKey 3 params body → 200default
POST
/keys/{key-name}/{key-version}/unwrapkey
Azure Key Vault Unwrap Key
Keys_UnwrapKey 3 params body → 200default

Schemas 20

The contract defines 20 schemas that model the data the API accepts and returns. The most detailed are JsonWebKey (16 properties), KeyAttributes (9 properties), KeyCreateParameters (8 properties), KeyBundle (5 properties). Each schema is shown below with its type and property counts.

Error
object
The key vault server error.
3 properties
KeyUpdateParameters
object
The key update parameters.
4 properties
KeyBundle
object
A KeyBundle consisting of a WebKey plus its attributes.
5 properties
KeyListResult
object
The key list result.
2 properties
KeySignParameters
object
The key sign parameters.
2 properties 2 required
KeyReleasePolicy
object
The policy rules under which the key can be exported.
3 properties
KeyAttributes
object
The attributes of a key managed by the key vault service.
9 properties
KeyItem
object
The key item containing key metadata.
4 properties
KeyOperationsParameters
object
The key operations parameters.
5 properties 2 required
KeyCreateParameters
object
The key create parameters.
8 properties 1 required
DeletedKeyBundle
object
A deleted key bundle consisting of a WebKey plus its attributes.
3 properties
JsonWebKeyType
string
JsonWebKey Key Type (kty), as defined in https://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-40.
JsonWebKeyCurveName
string
Elliptic curve name.
JsonWebKey
object
As of http://tools.ietf.org/html/draft-ietf-jose-json-web-key-18.
16 properties
KeyVaultError
object
The key vault error exception.
1 property
KeyVerifyParameters
object
The key verify parameters.
3 properties 3 required
DeletionRecoveryLevel
string
Reflects the deletion recovery level currently in effect for objects in the current vault.
KeyOperationResult
object
The key operation result.
5 properties
KeyVerifyResult
object
The key verify result.
1 property
JsonWebKeyOperation
string
JSON web key operations.

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

microsoft-azure-key-vault-keys-api-openapi.yml Raw ↑

Other APIs Azure Key Vault publishes across the network.

Azure Key Vault Keys API
Azure Key Vault Secrets API
Azure Key Vault Certificates API
Azure Key Vault Certificates API
Azure Key Vault Secrets API
Where this information came from

This is an independent, third-party profile of Azure Key Vault Keys API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.